Task Name

Duration (Days)

Task Name

Duration (Days)

Stage 1 - Initiation

8

Computer System

1

Define and set Policy

1

Networks

1

Define the Project organisation

1

Telecommunications

1

Define Project control structure

1

IT Security

1

Develop Project plan

1

Implement Risk reduction measures

1

Define quality plan

1

Implement Standby Arrangements

6

Identify initial costs

1

Negotiate third party recovery facilities

1

Develop Project Initiation Document (PID)

1

Enter into a contractual arrangement

1

Agree PID

1

Preparing and equipping the stand-by accommodation

1

Purchase and install stand-by computer systems

1

Stage 2 - Requirements Analysis & Strategy Definition

13

Negotiate with external Service providers on their contingency plans

1

Requirements

6

Undertaking due diligence if necessary

1

Identify critical processes

1

Develop ITSCM plans

1

Identify IT Service Support processes

1

Develop Procedures

1

Conduct Impact analysis

1

Initial Recovery Testing

3

Extract support requirements

1

Component Testing

1

Conduct Risk assessment & Vulnerability analysis

3

System Testing

1

Identify risks

1

Integrated Testing

1

Assess threat and vulnerability levels

1

Assess the levels of risk

1

Stage 4 - Operational Management

29

Strategy

7

Education and Awareness

2

Determine risk reduction measures

1

Establish Awareness Programme

1

Determine recovery options

4

Establish Education programme

1

People and accommodation

1

Training

3

IT systems and networks

1

Induction training

1

Critical Services

1

Management training

1

Critical assets

1

General staff training

1

Analyse costs and benefits

1

Review/Audit

4

Make recommendations

1

Establish review schedule

1

Agree

1

Establish review Terms of Reference

1

Establish resource requirements

1

Stage 3 - Implementation

11

Establish feedback Process

1

Organisation Planning

3

Ongoing Testing

4

Executive

1

Establish test schedule

1

Co-ordination

1

Establish test scope and objectives

1

Recovery

1

Establish participants

1

Implementation Planning

11

Establish corrective process

1

Emergency Response

1

Change control

2

Crisis management

1

Review overall Change Control process

1

Damage Assessment

1

Ensure ITSCM is adequately covered

1

Salvage

1

Assurance

2

Personnel

1

Review ITSCM deliverables with Management

1

Vital Records

1

Review ITSCM process

1

Accommodation and Services

1