Business Continuity and Disaster Recovery for InfoSec Managers

253

BCP/DR Glossary

ABC Fire Extinguisher: A chemically-based device used to eliminate ordi-

nary combustible, flammable liquid, and electrical fires.

Activation: When all or a portion of the recovery plan has been put into

motion.

Alert: Notification that a disaster situation has occurred—stand by for pos-

sible activation of disaster recovery plan.

Alternate Site: A location, other than the normal facility, used to process

data and/or conduct critical business functions in the event of a disaster.

Similar terms: alternate office facility, alternate communication facility, alter-

nate processing facility.

Application Recovery: The component of disaster recovery dealing specifi-

cally with the restoration of business system software and data after the pro-

cessing platform has been restored or replaced. Similar term: business system

recovery.

Assumptions: Basic understandings about unknown disaster situations the

disaster recovery plan is based on. A set of basic facts or premises, provided

to each business unit or established in the course of continuity planning ses-

sions. These premises eliminate the need to consider certain elements dur-

ing the building of continuity plans.

Back Office Location: An office or building that is used by the organiza-

tion to conduct support activities, but that is not located within an organi-

zation’s headquarters or main location.

Backlog Trap: The effect on the business of a backlog of work that accu-

mulates when a system or process is unavailable for a long period—a back-

log that may take a considerable length of time to reduce.

254 BCP/DR Glossary

Backup Agreements: A contract to provide a service that includes the

method of performance, the fees, the duration, the services provided, and

the extent of security and confidentiality maintained.

Backup Position Listing: A list of alternative personnel who can fill a

recovery team position when the primary person is not available.

Backup Power: Generally, diesel generators used to provide sufficient

power to operate equipment normally when commercial power fails.

Backup Strategy: Alternative operating method (e.g., platform, location)

for facilities and systems operations in the event of a disaster. See also Recov-

ery Strategy.

Base Parameters: These are the key guidelines, which include assumptions.

Base parameters establish a foundation on which continuity plans are built.

Business as Usual: Operating under normal conditions, i.e., without any

significant interruptions of operations as a result of a disaster.

Business Continuity Plan: A plan of action detailing how to react to and

recover from a disaster or crisis that threatens to disrupt normal business

activities. The plan steps outline the way in which the company restores

operations to core business processes. (A continuity plan is also referred to

as resumption plan or contingency plan.)

Business Continuity Planning (BCP): An all-encompassing “umbrella”

term, covering both disaster recovery planning and business resumption

planning. See also Disaster Recovery Planning and Business Resumption

Planning.

Business Continuity Program: The advanced planning and development

of a Business Continuity Plan(s) and any guidelines that, when imple-

mented, will ensure the timely and orderly resumption of the company’s

core business processes.

Business Function: The most elementary activities, e.g., calculating gross

pay, updating job descriptions, and matching invoices to receiving reports.

Business Impact Analysis (BIA): The process of analyzing all business

functions and the effect that a specific disaster may have upon them.

Business Interruption: Any event, whether anticipated (e.g., a public ser-

vice strike) or unanticipated (e.g., a blackout), that disrupts the normal

course of business operations at a corporate location.

Business Interruption Costs: The costs or lost revenue associated with an

interruption in normal business operations.