[Script Info] Title: [Events] Format: Layer, Start, End, Style, Name, MarginL, MarginR, MarginV, Effect, Text Dialogue: 0,0:00:00.64,0:00:03.04,Default,,0000,0000,0000,,The ability to respond to a natural or Dialogue: 0,0:00:03.04,0:00:05.52,Default,,0000,0000,0000,,man-made threat, ensure continuity of Dialogue: 0,0:00:05.52,0:00:07.20,Default,,0000,0000,0000,,business operations, and Dialogue: 0,0:00:07.20,0:00:09.84,Default,,0000,0000,0000,,protect human resource and assets Dialogue: 0,0:00:09.84,0:00:11.92,Default,,0000,0000,0000,,in the event of a disaster or a business Dialogue: 0,0:00:11.92,0:00:14.24,Default,,0000,0000,0000,,disruption is the primary objective of Dialogue: 0,0:00:14.24,0:00:15.92,Default,,0000,0000,0000,,any business continuity management Dialogue: 0,0:00:15.92,0:00:17.28,Default,,0000,0000,0000,,program. Dialogue: 0,0:00:17.28,0:00:18.96,Default,,0000,0000,0000,,Hello, and welcome to Information Dialogue: 0,0:00:18.96,0:00:22.16,Default,,0000,0000,0000,,Security Governance, Risk, and Compliance. Dialogue: 0,0:00:22.16,0:00:24.08,Default,,0000,0000,0000,,My name is Salvadore, and today we will Dialogue: 0,0:00:24.08,0:00:26.48,Default,,0000,0000,0000,,learn how to audit a business continuity Dialogue: 0,0:00:26.48,0:00:27.84,Default,,0000,0000,0000,,management program Dialogue: 0,0:00:27.84,0:00:29.44,Default,,0000,0000,0000,,in 10 steps. Dialogue: 0,0:00:29.44,0:00:31.02,Default,,0000,0000,0000,,Let's get started. Dialogue: 0,0:00:32.56,0:00:35.20,Default,,0000,0000,0000,,Point number one: Check and verify that a business Dialogue: 0,0:00:35.20,0:00:38.00,Default,,0000,0000,0000,,continuity management policy is created Dialogue: 0,0:00:38.00,0:00:40.96,Default,,0000,0000,0000,,and reviewed on a regular basis. Dialogue: 0,0:00:40.96,0:00:43.28,Default,,0000,0000,0000,,Ensure the policy contains the roles and Dialogue: 0,0:00:43.28,0:00:44.72,Default,,0000,0000,0000,,responsibilities, Dialogue: 0,0:00:44.72,0:00:47.44,Default,,0000,0000,0000,,workforce training, a framework for setting Dialogue: 0,0:00:47.44,0:00:49.68,Default,,0000,0000,0000,,business continuity objectives, Dialogue: 0,0:00:49.68,0:00:51.84,Default,,0000,0000,0000,,and organizational risk appetite and Dialogue: 0,0:00:51.84,0:00:53.76,Default,,0000,0000,0000,,tolerance to plan, Dialogue: 0,0:00:53.76,0:00:56.32,Default,,0000,0000,0000,,deliver, and support capabilities in the Dialogue: 0,0:00:56.32,0:00:59.56,Default,,0000,0000,0000,,event of a business disruption. Dialogue: 0,0:01:00.32,0:01:02.80,Default,,0000,0000,0000,,Point number two: Make sure a business Dialogue: 0,0:01:02.80,0:01:05.68,Default,,0000,0000,0000,,impact analysis is performed. Dialogue: 0,0:01:05.68,0:01:08.72,Default,,0000,0000,0000,,The business impact analysis contains Dialogue: 0,0:01:08.72,0:01:11.36,Default,,0000,0000,0000,,identification of critical products and Dialogue: 0,0:01:11.36,0:01:14.24,Default,,0000,0000,0000,,services with their inherent risks, Dialogue: 0,0:01:14.24,0:01:17.20,Default,,0000,0000,0000,,the likelihood and impact of each risk, Dialogue: 0,0:01:17.20,0:01:20.32,Default,,0000,0000,0000,,countermeasures to prevent, detect, and Dialogue: 0,0:01:20.32,0:01:22.64,Default,,0000,0000,0000,,react to the identified risks, Dialogue: 0,0:01:22.64,0:01:25.04,Default,,0000,0000,0000,,recovery time objectives, and recovery Dialogue: 0,0:01:25.04,0:01:28.00,Default,,0000,0000,0000,,point objectives. Dialogue: 0,0:01:28.24,0:01:30.40,Default,,0000,0000,0000,,Point number three: Ensure a business Dialogue: 0,0:01:30.40,0:01:32.88,Default,,0000,0000,0000,,continuity strategy is developed to Dialogue: 0,0:01:32.88,0:01:35.44,Default,,0000,0000,0000,,reduce the impact of a disaster, Dialogue: 0,0:01:35.44,0:01:38.08,Default,,0000,0000,0000,,ensure business continuity, and recover Dialogue: 0,0:01:38.08,0:01:40.24,Default,,0000,0000,0000,,from business disruptions within the Dialogue: 0,0:01:40.24,0:01:42.72,Default,,0000,0000,0000,,enterprise risk appetite. Dialogue: 0,0:01:42.72,0:01:44.56,Default,,0000,0000,0000,,Make sure that the strategy includes Dialogue: 0,0:01:44.56,0:01:46.48,Default,,0000,0000,0000,,unavailability of all relevant Dialogue: 0,0:01:46.48,0:01:47.68,Default,,0000,0000,0000,,components, Dialogue: 0,0:01:47.68,0:01:50.40,Default,,0000,0000,0000,,and all activities and processes within Dialogue: 0,0:01:50.40,0:01:54.64,Default,,0000,0000,0000,,the scope whether on-premise or on cloud. Dialogue: 0,0:01:54.64,0:01:56.64,Default,,0000,0000,0000,,Point number four: Check and verify that Dialogue: 0,0:01:56.64,0:01:59.52,Default,,0000,0000,0000,,a business continuity plan is created Dialogue: 0,0:01:59.52,0:02:02.40,Default,,0000,0000,0000,,and reviewed on a regular basis. Dialogue: 0,0:02:02.40,0:02:04.16,Default,,0000,0000,0000,,Ensure that the plan consists of the Dialogue: 0,0:02:04.16,0:02:05.76,Default,,0000,0000,0000,,following components: Dialogue: 0,0:02:05.76,0:02:07.76,Default,,0000,0000,0000,,scope of activity, roles and Dialogue: 0,0:02:07.76,0:02:10.00,Default,,0000,0000,0000,,responsibilities, clear lines of Dialogue: 0,0:02:10.00,0:02:11.28,Default,,0000,0000,0000,,communication, Dialogue: 0,0:02:11.28,0:02:14.08,Default,,0000,0000,0000,,recovery procedures, and the basis for Dialogue: 0,0:02:14.08,0:02:16.40,Default,,0000,0000,0000,,BCM invocation. Dialogue: 0,0:02:16.40,0:02:18.32,Default,,0000,0000,0000,,With respect to cyberattacks, ensure Dialogue: 0,0:02:18.32,0:02:20.40,Default,,0000,0000,0000,,there is a skilled incident management Dialogue: 0,0:02:20.40,0:02:23.68,Default,,0000,0000,0000,,technical team to manage the incidents. Dialogue: 0,0:02:23.68,0:02:26.00,Default,,0000,0000,0000,,In case of a pandemic event that the world Dialogue: 0,0:02:26.00,0:02:28.16,Default,,0000,0000,0000,,is going through now, the users need to Dialogue: 0,0:02:28.16,0:02:29.76,Default,,0000,0000,0000,,perform the functions Dialogue: 0,0:02:29.76,0:02:31.68,Default,,0000,0000,0000,,working from home. Dialogue: 0,0:02:31.68,0:02:34.00,Default,,0000,0000,0000,,Ensure endpoint security and network Dialogue: 0,0:02:34.00,0:02:36.16,Default,,0000,0000,0000,,communication is effective to ensure Dialogue: 0,0:02:36.16,0:02:39.68,Default,,0000,0000,0000,,smooth business operations. Dialogue: 0,0:02:39.84,0:02:42.16,Default,,0000,0000,0000,,Point number five: Check and verify that Dialogue: 0,0:02:42.16,0:02:44.32,Default,,0000,0000,0000,,all the relevant documents, such as Dialogue: 0,0:02:44.32,0:02:46.96,Default,,0000,0000,0000,,backup and restoration guidelines, Dialogue: 0,0:02:46.96,0:02:49.20,Default,,0000,0000,0000,,network, and architecture diagrams, Dialogue: 0,0:02:49.20,0:02:51.60,Default,,0000,0000,0000,,alternate workarounds for performing Dialogue: 0,0:02:51.60,0:02:54.48,Default,,0000,0000,0000,,business functions, and incident playbooks, Dialogue: 0,0:02:54.48,0:02:57.04,Default,,0000,0000,0000,,are available instantly to support Dialogue: 0,0:02:57.04,0:02:59.12,Default,,0000,0000,0000,,business continuity and operational Dialogue: 0,0:02:59.12,0:03:00.48,Default,,0000,0000,0000,,resilience. Dialogue: 0,0:03:00.48,0:03:02.40,Default,,0000,0000,0000,,Make sure that all the documents are Dialogue: 0,0:03:02.40,0:03:05.28,Default,,0000,0000,0000,,reviewed for any changes that happened Dialogue: 0,0:03:05.28,0:03:07.92,Default,,0000,0000,0000,,previously. Dialogue: 0,0:03:08.16,0:03:10.24,Default,,0000,0000,0000,,Point number six: Make sure all Dialogue: 0,0:03:10.24,0:03:12.40,Default,,0000,0000,0000,,business continuity and operational Dialogue: 0,0:03:12.40,0:03:14.88,Default,,0000,0000,0000,,resilience plans are tested at least Dialogue: 0,0:03:14.88,0:03:16.48,Default,,0000,0000,0000,,annually. Dialogue: 0,0:03:16.48,0:03:18.64,Default,,0000,0000,0000,,Check and verify that a table top exercise Dialogue: 0,0:03:18.64,0:03:21.28,Default,,0000,0000,0000,,was performed, and the report generated Dialogue: 0,0:03:21.28,0:03:22.96,Default,,0000,0000,0000,,to identified if there were any Dialogue: 0,0:03:22.96,0:03:25.84,Default,,0000,0000,0000,,shortcomings during the call. Dialogue: 0,0:03:25.84,0:03:27.92,Default,,0000,0000,0000,,Make sure that a call tree exercise was Dialogue: 0,0:03:27.92,0:03:29.12,Default,,0000,0000,0000,,performed Dialogue: 0,0:03:29.12,0:03:31.36,Default,,0000,0000,0000,,to ensure the communications with all Dialogue: 0,0:03:31.36,0:03:33.20,Default,,0000,0000,0000,,users. Dialogue: 0,0:03:33.20,0:03:35.52,Default,,0000,0000,0000,,Ensure users' contacts are stored and Dialogue: 0,0:03:35.52,0:03:38.24,Default,,0000,0000,0000,,acknowledged, and that all calls and messages Dialogue: 0,0:03:38.24,0:03:41.68,Default,,0000,0000,0000,,were recorded and verified. Dialogue: 0,0:03:41.68,0:03:43.68,Default,,0000,0000,0000,,Check and verify the stress reports to Dialogue: 0,0:03:43.68,0:03:45.76,Default,,0000,0000,0000,,identify that the tests were conducted Dialogue: 0,0:03:45.76,0:03:49.04,Default,,0000,0000,0000,,as per the resilience plan. Dialogue: 0,0:03:49.60,0:03:51.04,Default,,0000,0000,0000,,Point number seven: Dialogue: 0,0:03:51.04,0:03:53.36,Default,,0000,0000,0000,,In times of crisis, communication among Dialogue: 0,0:03:53.36,0:03:55.76,Default,,0000,0000,0000,,stakeholders and the relevant entities Dialogue: 0,0:03:55.76,0:03:58.48,Default,,0000,0000,0000,,is key to successfully managing business Dialogue: 0,0:03:58.48,0:04:00.08,Default,,0000,0000,0000,,disruption. Dialogue: 0,0:04:00.08,0:04:01.68,Default,,0000,0000,0000,,Make sure that communication lines Dialogue: 0,0:04:01.68,0:04:03.84,Default,,0000,0000,0000,,are identified and how the communication Dialogue: 0,0:04:03.84,0:04:05.92,Default,,0000,0000,0000,,is sent to the relevant parties, Dialogue: 0,0:04:05.92,0:04:08.32,Default,,0000,0000,0000,,whether it be the press, municipality, or business Dialogue: 0,0:04:08.32,0:04:09.60,Default,,0000,0000,0000,,users. Dialogue: 0,0:04:09.60,0:04:11.76,Default,,0000,0000,0000,,Make sure that response structure is Dialogue: 0,0:04:11.76,0:04:14.16,Default,,0000,0000,0000,,developed to communicate early warnings Dialogue: 0,0:04:14.16,0:04:17.38,Default,,0000,0000,0000,,and communications to the stakeholders. Dialogue: 0,0:04:18.56,0:04:20.08,Default,,0000,0000,0000,,Point number eight: Dialogue: 0,0:04:20.08,0:04:22.08,Default,,0000,0000,0000,,Business data is a key component to Dialogue: 0,0:04:22.08,0:04:24.16,Default,,0000,0000,0000,,recover from a disaster or a crisis Dialogue: 0,0:04:24.16,0:04:25.68,Default,,0000,0000,0000,,situation. Dialogue: 0,0:04:25.68,0:04:27.52,Default,,0000,0000,0000,,Make sure that a secure backup data Dialogue: 0,0:04:27.52,0:04:28.40,Default,,0000,0000,0000,,process Dialogue: 0,0:04:28.40,0:04:31.44,Default,,0000,0000,0000,,is followed for storing data in times Dialogue: 0,0:04:31.44,0:04:32.72,Default,,0000,0000,0000,,of crisis. Dialogue: 0,0:04:32.72,0:04:34.88,Default,,0000,0000,0000,,Check sample backup and restoration Dialogue: 0,0:04:34.88,0:04:37.44,Default,,0000,0000,0000,,evidence. Dialogue: 0,0:04:38.88,0:04:40.88,Default,,0000,0000,0000,,Point number nine: To recover from a Dialogue: 0,0:04:40.88,0:04:43.04,Default,,0000,0000,0000,,natural disaster, like flooding or Dialogue: 0,0:04:43.04,0:04:45.36,Default,,0000,0000,0000,,earthquakes, and other man-made disasters Dialogue: 0,0:04:45.36,0:04:46.64,Default,,0000,0000,0000,,like fire, Dialogue: 0,0:04:46.64,0:04:48.80,Default,,0000,0000,0000,,ensure that systems and network devices Dialogue: 0,0:04:48.80,0:04:51.20,Default,,0000,0000,0000,,are housed in environmentally safe data Dialogue: 0,0:04:51.20,0:04:54.40,Default,,0000,0000,0000,,centers, as well as redundancy is always Dialogue: 0,0:04:54.40,0:04:55.52,Default,,0000,0000,0000,,maintained. Dialogue: 0,0:04:55.52,0:04:58.16,Default,,0000,0000,0000,,Ensure alternate sites, like hot, warm, or Dialogue: 0,0:04:58.16,0:05:00.24,Default,,0000,0000,0000,,cold sites, are designed according to Dialogue: 0,0:05:00.24,0:05:02.56,Default,,0000,0000,0000,,business requirements and tested for Dialogue: 0,0:05:02.56,0:05:05.20,Default,,0000,0000,0000,,effectiveness. Dialogue: 0,0:05:05.20,0:05:07.28,Default,,0000,0000,0000,,And finally, point number ten: Check and Dialogue: 0,0:05:07.28,0:05:09.92,Default,,0000,0000,0000,,verify that a DR or disaster recovery Dialogue: 0,0:05:09.92,0:05:11.92,Default,,0000,0000,0000,,activity is tested. Dialogue: 0,0:05:11.92,0:05:12.96,Default,,0000,0000,0000,,Ensure that Dialogue: 0,0:05:12.96,0:05:14.72,Default,,0000,0000,0000,,network switching happens automatically Dialogue: 0,0:05:14.72,0:05:17.60,Default,,0000,0000,0000,,to secondary sites, Dialogue: 0,0:05:17.60,0:05:19.92,Default,,0000,0000,0000,,and servers and applications run without Dialogue: 0,0:05:19.92,0:05:22.48,Default,,0000,0000,0000,,any issues. Dialogue: 0,0:05:22.88,0:05:24.40,Default,,0000,0000,0000,,Thank you for watching the video. Dialogue: 0,0:05:24.40,0:05:26.64,Default,,0000,0000,0000,,Do provide your feedback and subscribe Dialogue: 0,0:05:26.64,0:05:28.00,Default,,0000,0000,0000,,the channel for Dialogue: 0,0:05:28.00,0:05:29.44,Default,,0000,0000,0000,,upcoming videos. Dialogue: 0,0:05:29.44,0:05:31.06,Default,,0000,0000,0000,,Thank you.