| Phase I |
– Initiation (governance, policy and awareness
development)
– Data gathering (business processes information, dependency
map)
– Risk analyses
– Business impact
analyses |
| Phase II |
– Plan risk reduction measures |
| Phase III |
– Establish response and recovery team |
| Phase IV |
– Develop and implement mitigation strategies |
| Phase V |
– Develop and test processes and procedures |
| Phase VI |
– Conduct awareness and training |
| Phase VII |
– Maintain and exercise plans |
