Information management tools for implementing an effective enterprise business continuity strategy

Abstract

The current work aims to the development of the Business Continuity Testing Points method which 
\ncan help both IT as well as business managers define an efficient business continuity strategy. 
\nThe BCTP method stems from the UML Use Case Points theory which is a practically tested and 
\naccepted approach to SW complexity estimation. The Use Case Points methodology was selected 
\nas the theory behind the construction of the BCTP model, due to the fact that 
\nfirstly, both theories 
\nshare the requirement analysis task and secondly because complexity of information systems is 
\nstrongly related to their recovery in cases of their unexpected failovers. In the Use Case Points 
\ntheory IT analysts perform software requirement analysis by executing various business scenarios. 
\nThe BCTP theory, on the other hand, is constructed to support the analysis of IT system recovery 
\nrequirements, by executing multiple efficient recovery scenarios. The method is a new approach 
\nto the objective determination of the Recovery Time Effort of a business function in comparison to 
\nthe Rational Time Objective and the Maximum Acceptable Outage, which are defined with regard 
\nto the Impact Value Level of the function. The most critical functions of the enterprise should be 
\nincluded in the Minimum Business Continuity Objective (MBCO) concept. MBCO refers to vital 
\nbusiness functions without which the enterprise is not able to perform its basic operations. The 
\nRecovery Time Effort of a given business function is affected by multiple Technical, Environmental 
\nand Unexpected factors with precise weights and assessment values. Recovery exercises should 
\nbe based on scenarios which include the unexpected factors that may delay the recovery process. 
\nThe derived exercise results are proposed as drivers for the reassessment of the criticality of 
\na business function.