Business Continuity Plan

Download Free Business Continuity Plan - Business Impact Analysis Template

University Impact Analysis Form

Section 1 - Business Requirements

1. Business Process Name:
2. Business Process Manager (Name/Title):
3. Business Process Description:
4. Associated Applications:

Download Free HIPAA BCP DRP Matrix

Critical Business Function Analysis & Prioritization
- Mapping critical business functions to applications
- Mapping applications to technologies (platforms, LANs/WANs, data storage, imaging, EDI, etc.)
- Impact of business cycle on prioritization (end of month, quarter-end, year-end, etc.)
- Strategy for regular update and review
- Clear statement of risk assumption
- Definition of minimum acceptable level of service and detailed actions to get to that level
- Management participation and signoff on prioritization recommendations

Download Free IT Recovery Plan Templates

INTRODUCTION
Purpose
[State what the IT Recovery plan is designed to do and who is to be served by it.]

Scope
[State the intended the location, environment, and situation where the IT Recovery Plan, is to operate. Please note that if your business unit has business processes in multiple buildings or locations, you will need separate IT Recovery plans for each building/location/process OR you will need to clearly specify in your IT Recovery plan which elements apply to which building/location/process.]

SUPPORTING INFORMATION

Download Free HIPAA Business Continuity Plan Outline Template

Introduction
- Purpose
- Applicability
- Scope
- Critical Business Functions
- Planning Principles
- Assumptions
- Prerequisites
- Backup Site
- Alternative Back-up Sites

HIPAA (Health Insurance Portability and Accountability Act) Standard requires covered entities to establish (and implement as needed) policies and procedures for responding to an emergency or other occurrence (for example, fire, vandalism, system failure, and natural disaster) that damages systems that contain electronic protected health information. The Contingency Plan standard includes five implementation specifications

1. Data Backup Plan
Establish and implement procedures to create and maintain retrievable exact copies of electronic protected health information.

2. Disaster Recovery Plan
Establish (and implement as needed) procedures to restore any loss of data.