ABSTRACT
Business continuity strategy is based on management sponsorship, fixation of Business continuity management (BCM) budget, coordination with IT section for alignment of BCM requirements to business requirements, documenting the most cost-effective strategy for implementation, and maintenance. BCM policies and procedures should incorporate the necessary controls to ensure that data integrity and privacy are not compromised during recovery efforts. On the basis of Business Impact Analysis (BIA) or Risk Assessment (RA) reports, the risk strategy is documented. Risk treatment to be determined, all known risks to be entered in risk register, and residual risk impact has to be documented. Information dissemination before, during, and after a disaster is crucial. Continuously embedding BCM awareness in the form of intranet messages or one-liners under corporate e-mails gives out a healthy sign within and outside to those receiving the e-mails.
