Mission Continuity Resources and Tools: Guidelines
You may use the guidelines below to help you determine how to go about constructing your plans or, if your plans are completed, if you have constructed them appropriately.
Things to think about in advance:
- Did you use the Pre-Planning Questionnaire to gather the necessary information for your plan?
- Did you create plans in a spreadsheet format?
- Have you decided on the structure for your plans within your briefcase in Shadow-Planner (for example, do you want to use Action Plan Categories to organize your Action Plans)?
- Have you named your plans so that it would be clear to which School, Center, or Department they belong and they would be easily identifiable in the event of a crisis or outage?
- Did you look at the sample plans in the Penn Library in Shadow-Planner to see if anything in them would be useful in constructing your own plans?
- Using the BETH3 model, have you considered creating at least one plan each for loss of building, loss of equipment, loss of technology (which may include a Disaster Recovery plan), loss of human resources and loss of 3rd-party or vendor?
- If you are creating a Disaster Recovery plan, you may wish to consult these guidelines.
- Within this BETH3 model, are there individual action plans to continue operations (i.e. more than just an evacuation plan) in the event of a disruption to normal operations?
- Have the plans been reviewed and approved by the owner(s) or other management in your unit?
- Feel free to use these guidelines for constructing and reviewing plans.
Once plans are created:
- Is there a procedure identified for storing the plan and retrieving it in the event of a crisis (i.e. is it stored on a flash drive offsite, or in hard copy, or in Box? Does the plan include the URL for the yesterday server, so it can be retrieved in case the main server is down? Do the owners have a hard copy of the plan?)
- Have you conducted a tabletop exercise, and if so, what was tested (e.g. calling the call tree to make sure people and numbers listed are accurate, ability to work remotely, backup servers, etc.)? It is recommended that plans be reviewed for accuracy and tested at least once a year. Here are some guidelines for conducting a tabletop exercise.
As always, if you have any questions about these items, feel free to send them to firstname.lastname@example.org.