248 8.4 Awareness and Training Programs
contents. Each individual with a copy of the plan is responsible for security
and control of the document in accordance with policies for the protection
of proprietary information.
The business continuity planner is responsible for the authorized distri-
bution of the BCP and should maintain a master distribution list. Each
authorized copy of the plan should contain a version identification number,
and the recipient should be recorded on the distribution list.
Full copies of the plan are usually provided to all team managers. Partial
copies of the business continuity plan may be distributed to other mem-
bers; these would reflect plan details associated with the responsibilities of
their assigned team(s). Additionally, the business continuity planner should
maintain master copies onsite and copies at the offsite storage location—
both printed and electronic versions.
8.4 Awareness and Training Programs
Preparing a program to create corporate awareness and enhance the skills
required to develop, implement, maintain, and execute the business conti-
nuity plan is half the battle. You may have a business continuity plan; how-
ever, if no one knows about it or knows what to do in case of an emergency,
then the best-laid plan will be of little use. Training programs are essential
for recovery processes to flow smoothly and gain support of all affected
departments. Some things you can do:
Establish objectives and components of the training program.
Identify functional training requirements.
Develop training methodology.
Develop awareness program.
Acquire or develop training aids.
Identify external training opportunities.
Identify vehicles for corporate awareness.
BCP training should be provided for personnel to ensure all parties are
aware of their responsibilities should a disaster occur. Key employees should
be involved in the business continuity development process, as well as in
periodic training exercises. The training program should incorporate enter-

Get Business Continuity and Disaster Recovery for InfoSec Managers now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.