Today’s operational environment has become extremely complex. Users who are dependent on information systems and highly sophisticated technologies are often working at remote locations. In addition, many mission and operations functions are so highly specialized that only a preplanned fallback procedure can lead to restored operations. Therefore, organizations need a comprehensive contingency planning program in place so that essential operations can continue if an emergency renders the organization or any of its facilities uninhabitable or inoperable.
Noblis employs a comprehensive approach to contingency planning that combines the two most recognized methodologies: Continuity of Operations Planning (COOP) and Business Continuity Planning (BCP). COOP, which focuses primarily on U.S. Government organizations and facilities, stresses the order of succession in the first 30 days following an emergency. A COOP establishes the framework for contingency operations but does not necessarily define the procedures used to respond to an incident. BCP supplements COOP requirements with the specific actions that are needed to respond to a contingency situation. The resulting documentation provides checklists that walk the responders through the recovery process from initial failure assessment through final restoration. This additional detail defines the steps for restoring critical functions within their Recovery Time Objectives (RTO).
Noblis’ approach enhances the industry standards sanctioned by DRI International. Our approach is designed to provide the client with documentation suitable for satisfying regulatory requirements. It also provides the tools needed for a successful recovery should a situation render a facility inaccessible, its systems inoperable, or its personnel unavailable.
Noblis brings to its clients the technical capability and objectivity needed to develop the most accurate and effective BCP/COOP solutions. We recognize that developing such solutions includes six key components:
- Evaluating and quantifying the impact that an incident may have on an organization
- Analyzing available recovery strategies and recommending the most appropriate
- Developing the plan
- Exercising and testing the plan and training staff on its use
- Preparing the site
- Performing ongoing plan maintenance
Noblis thoroughly addresses these six areas, providing our clients with the assurance that their plans meet regulatory requirements, make good business sense, are cost-effective, and are relevant. Our experience and objectivity also ensure that the findings of these analyses are not unduly influenced by organizational subjectivity. The client organization can then expend its resources in the most cost-effective manner, focusing on the least expensive option that meets the predetermined RTO. When an organization has more time to recover a function, there are more options available and the recovery costs are lower.
Noblis’ methodology is consistent with DRI International’s five life-cycle phases:
- Project Initiation
- Functional Requirements
- Design and Development/Implementation
- Testing/Exercising
- Maintenance
During these phases, Noblis creates and maintains a living business continuity capability or program. In addition to supporting ongoing plan maintenance, some or all of the following documents are developed:
- Business Impact Analysis
- Recovery Strategies Analysis
- Plan Development
- Site Preparation Plan
- Training and Exercising/Testing Plan
To develop and maintain plans quickly and in an organized fashion, Noblis is well versed in a variety of automated planning tools, as well as with the traditional paper plan. Furthermore, Noblis’ practitioners are certified, possessing DRI International’s Certified Business Continuity Professional (CBCP) designation and the Certified Information Systems Security Professional (CISSP) designation. Noblis recognizes the essential interrelationship between information assurance and contingency planning and has the proven solutions to make organizations secure in their operation.