Due Diligence and Ongoing Monitoring

I have been asked to write a BCP for a warehouse and distribution food company. Can anyone share an example that they may have, (all company names, detailed information redacted of course) I am in IT and have written DR plans but not a BCP. I have ... More

I am responsible for not only seeing if our key suppliers have BCPs but assess them. I check for a BC policy (for leadership support) and BCP components (Risk Assessment, BIA, Crisis Management (Incident Response & DRP), Training & Exercise, Plan Maintenance) ... More

Hi Anonymous, We have a vendor we use their services for surrounding our board meeting. Based on the service they are providing we did include them in our vendor program as a tech vendor. I think this will depend on how your institution structures your ... More

When I look at DR/BCP plans I look to see if the plan is well documented, regularly updated and tested, has a BIA that includes RPO/RTO. I also like to see there back up locations for their data, and other important information will also be there that's ... More

Hi Christi, Question: how often do you assess your non-critical vendors to determine/confirm if they are critical? Answer: We do not reassess vendor criticality unless there is some sort of change in service that would trigger such an event. I ... More