BCP vs. DRP

00:00

Hey, everyone, welcome back to the course. So in the last 30 we talked about some of the prerequisites for this course. We also talked about my background is your instructor is Well, is the overall core structure and the intended audience. So again, this course is actually for anyone, so I designed it that way. So anyone in the organization can take a look at it and fully understand BCPs, Andy, our peace.

00:18

So in this video, we're just gonna talk about the difference between a business continuity plan

00:22

and a disaster recovery plan at a high level just because there's usually a lot of confusion surrounding these

00:28

so learning objectives for this video, we're gonna talk about what BCP is, what d RP is, and then the differences between the two.

00:36

So what is the business continuity plan? Well, this one just remember, the difference between the two is going to be business. Community plan is kind of that overall plan, right? So not just the I t. Related stuff, but also focus more on the critical business operation. So this might be situations where we have a supplier that helps

00:53

us be able to create a certain product. That's a critical product in our company.

00:58

Now. Then the supplier goes out of business. It could be a disaster, right? So things like a hurricane of flood. Ah, tsunami. Ah, huge flat forest fire. Something like that. They can also include things like employees. Right. So maybe our employees get sick with the flu and a lot of people are out.

01:12

So we need to take those things into consideration once or creating the business continuity plan.

01:19

So talking about the human capital, right? The employees, So it could be people getting sick. It could be a bunch of people quitting at the same time. So how are we gonna work through those issues, right? Are these critical staff? Are these maybe staff that aren't so critical to the business operation? So these are things that we need to think through when we're thinking about a business continuity plan.

01:38

What about disaster recovery plane? Well, this is more focused on the actual business or I t systems. Right? So where business continuity plan is kind of the overarching plan that we need in place to help the business sustain operations to make us money and actually maintain the business.

01:53

The D. R P owes more along the lines of the actual systems we use to do those things,

02:00

So this is usually gonna be caused by a disaster. And in most cases it's usually a natural disaster, right? Some things like a hurricane of floods, tornadoes, anything that's in your area now. One thing I want to stress is when you're thinking through these plans for your organization, you need to think about what's actually relevant in your particular geographic area. So, as an example,

02:20

I live in Texas, right. So we get hurricanes, we get a lot of thunderstorms, tornadoes,

02:24

flooding. Those are things that I would be concerned about, what I'm doing. A. B, C, P and G. R P. Right. But I'm not so concerned about a snow store. It doesn't usually happen. So, yes, there is a risk of that that some huge blizzard is gonna come through and blanket everybody in snow.

02:39

But the reality is that that's not necessarily a risk that my particular organization has right

02:46

now. If you live up in Canada, for example, a blizzard is probably something you want to think through, right and maybe an earthquake is not necessarily something you need to think through. So you really have to tailor these to your particular organization in your geographic area. Now let's say that you're a global company. You've got to consider all the areas that you have actual offices in, right.

03:06

So let's say I've got an office at France and I've got an office in

03:08

Japan, one in Australia and let's say I got one in Russia. And when a candidate and one of the US I've got to think about what's occurring in those particular Jigar geographic areas and the concerns that are associated with that.

03:22

So let's think through a couple of different scenarios here. Number one, you're building floods, right? So nobody can get in the building. All the equipment is flooded out.

03:30

What are you going to do?

03:32

Well, there's several things you could do with with that scenario in mind, right? And again, I mentioned that the area I live and actually floods a lot, so I would think through number one. If I've got any systems at all, I'm probably not gonna put critical stuff down on the ground floor where can get flooded. Ah, pretty easily. So as an example. If I had my own mini data center in my office,

03:52

I would make sure that's on the highest floor possible.

03:53

That way in the situation, if it's flooding a couple of floors up, I'm usually okay. Now, I'm not gonna have that be my only data backup plan, right? That's kind of foolish. I would actually have all site storage as well to make sure that my data is protected in some capacity.

04:11

What about another scenario worthy? Just the actual computer itself is flooded outs, Right. So maybe the workstation area there. So as a user watching this, right? So let's say you're not part of the I t recite security teams in your particular organization. What you gonna do if you're the computer you work with? Every day gets flooded out because you're on the ground floor of that building.

04:30

Start thinking through that right. What's the process for you to request new equipment? You just contact I t. What if there's a flood going on and nobody can get to the office? Do you have a laptop that your company's provision for you? Are you able to do remote access from your own devices? So these are things that you need to start asking if you don't know the answer to those already in your particular organization.

04:49

So just a recap what we talked about. We talked about what a business community plan and disaster recovery plan are. We talked about the differences between two again think BCP as the holistic view of things and think D RP is more of the actual equipment. I tease business systems and I t equipment that we're using to actually perform those business operations.