View source for SP8: Ensure continuity

<itpmch><title>SP8: Prepare for disaster events | YaSM Service Management Wiki</title>
<meta name="keywords" content="yasm disaster management, yasm service continuity management, service management continuity process" />
<meta name="description" content="YaSM process: Prepare for disaster events (SP8). - Definition, sub-processes, process outputs, process metrics and roles." />
</itpmch>
<html><div itemscope="itemscope" itemtype="https://schema.org/WebPage"><!-- define schema.org/WebPage --><p>
<a href="https://yasm.com/wiki/de/index.php/SP8:_Vorbereiten_auf_Katastrophen-Ereignisse"><img src="https://yasm.com/wiki/en/img/yasm-wiki/yasm-wiki-deutsch.png" width="48" height="30" style="float:right;" alt="auf Deutsch" title="diese Seite auf Deutsch" /></a><br style="clear:both;"/>
<p>&nbsp;</p>
<p><b>Process name:</b> <a href="#Process_description" title="SP8: Prepare for disaster events - Process description">Prepare for disaster events</a> - <b>Part of</b>: <a itemprop="isPartOf" href="https://yasm.com/wiki/en/index.php/YaSM_Processes#supporting-service-management-processes" title="YaSM supporting service management processes">Supporting service management processes</a></p>
<p><b>Previous process:</b> <a href="https://yasm.com/wiki/en/index.php/SP7:_Ensure_security" title="SP7: Ensure security">Ensure security</a></p>
<p><b>Next process:</b> <a href="https://yasm.com/wiki/en/index.php/SP9:_Ensure_compliance" title="SP9: Ensure compliance">Ensure compliance</a></html>

<p>&nbsp;</p>

==Process description==

<html><div itemscope itemtype="https://schema.org/ImageObject"><a href="https://yasm.com/wiki/en/img/yasm-process/Prepare-for-disaster-events-yasm-sp8.jpg" title="Prepare for disaster events. - YaSM process SP8" itemprop="contentUrl"><img style="margin:20px 0px 10px 0px; float:left;" src="https://yasm.com/wiki/en/img/yasm-process/Prepare-for-disaster-events-yasm-sp8.jpg" width="677" height="423" title="Prepare for disaster events. - YaSM process SP8" alt="Fig. 1: Prepare for disaster events. - YaSM disaster preparation process SP8." /></a><br style="clear:both;"/><div class="thumbcaption"><span style="font-variant:small-caps;"><b>Figure 1:</b></span> <small><span itemprop="caption">"Prepare for disaster events." - YaSM supporting service management process SP8.</span></small></div></div><br style="clear:both;"/>

<p><span itemprop="description">The purpose of <span itemprop="alternativeHeadline">YaSM's disaster prevention process</span> ("<strong class="selflink"><span itemprop="name Headline">SP8: Prepare for disaster events</span></strong>") is to ensure service continuity in the case of events considered disasters, such as floods, fires, power failures, etc.</span></p>

<p>Preparing for disaster events starts with the compilation of a register of managed disaster events, which lists the types of disasters for which the service provider has decided to put some kind of preparation in place. The register also specifies the responses to the identified events, in particular the related service continuity plans.</p>

<p>The continuity manager may ensure service continuity in a number of ways. Most importantly, this role is involved in the service design and build stages to ensure continuity aspects are taken into account when creating or updating services. Once it has been established during service design which continuity arrangements and mechanisms are required for a new service, these can be put in place, notably</p>
<ul>
<li>Through the service build process, by adding suitable continuity features to the service infrastructure that is to be created</li>
<li>Through the disaster preparation process, by updating continuity arrangements and mechanisms which are operated under the responsibility of the service continuity manager.</li></ul>

<p>The service continuity manager is also involved in service or process improvement initiatives if service continuity aspects are to be considered.</p>

<p>If new types of disasters are to be addressed or if the continuity arrangements need to be upgraded for other reasons, the disaster preparation process is able to start continuity improvement initiatives on its own account. Such initiatives are managed through the continuity improvement plan.</html>

<p>&nbsp;</p>

==Sub-processes==

<html><div itemscope="itemscope" itemtype="https://schema.org/ItemList"><!-- define schema.org/ItemList -->
<meta itemprop="itemListOrder" content="Ascending" />
<p><span itemprop="name" content="SP8: Prepare for disaster events. - Sub-processes:"><i>"Prepare for disaster events"</i> has the following sub-processes:</span>
</p>
<p>&#160;</p>
<p><b><span id="SP8.1" itemprop="itemListElement">SP8.1: Assess risks associated with disaster events</span></b></p>
<ul><li itemprop="description">Process objective: To identify the disaster events which need to be managed by the service provider, and to define appropriate continuity arrangements and mechanisms.</li></ul>
<p><br /></p>
<p><b><span id="SP8.2" itemprop="itemListElement">SP8.2: Define continuity improvements</span></b></p>
<ul><li itemprop="description">Process objective: To define the objectives of initiatives to improve service continuity and the approach for their implementation. This includes creating business cases for the initiatives.</li></ul>
<p><br /></p>
<p><b><span id="SP8.3" itemprop="itemListElement">SP8.3: Start up continuity improvement initiatives</span></b></p>
<ul><li itemprop="description">Process objective: To launch initiatives aimed at ensuring or improving service continuity. This includes obtaining authorization by requesting a budget and submitting a request for change.</li></ul>
<p><br /></p>
<p><b><span id="SP8.4" itemprop="itemListElement">SP8.4: Implement continuity arrangements</span></b></p>
<ul><li itemprop="description">Process objective: To implement, test and deploy new or improved continuity arrangements and mechanisms.</li></ul>
<p><br /></p>
<p><b><span id="SP8.5" itemprop="itemListElement">SP8.5: Operate the continuity arrangements</span></b></p>
<ul><li itemprop="description">Process objective: To arrange adequate training to prepare the service provider's staff and customers for disaster events, and to ensure regular maintenance and testing of the continuity arrangements and mechanisms.</li></ul>
<p><br /></p>
<p><b><span id="SP8.6" itemprop="itemListElement">SP8.6: Review the continuity arrangements</span></b></p>
<ul><li itemprop="description">Process objective: To submit the continuity arrangements and mechanisms to regular reviews, in order to identify potentials for improvement to be addressed by continuity improvement initiatives.</li></ul>
</div><!-- end of schema.org/ItemList --><p></html>

<p>&nbsp;</p>

==Process outputs==

<html><div itemscope="itemscope" itemtype="https://schema.org/ItemList"><!-- define schema.org/ItemList -->
<meta itemprop="itemListOrder" content="Ascending" />
<p>This section lists the <span itemprop="name">documents and records produced by <i>"Prepare for disaster events"</i></span>. YaSM data objects <a href="#ydo" title="YaSM data object">[*]</a> are marked with an asterisk, while other objects are displayed in gray.</p>
<p>&#160;</p>
<p><b><span itemprop="itemListElement">Budget request</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">A budget request is typically issued to obtain funding for setting up, improving or operating a service or process. An approved budget request means that the required financial resources have been allocated by the financial manager.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement">Change record</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">A change record contains all details of a change, documenting the lifecycle of a single change. In its initial state, a change record describes a request for change (RFC) which is to be assessed and authorized prior to implementing the change. Further information is added as the change progresses through its lifecycle.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement" style="color:#636363">Change status information</span></b></p>
<ul><li itemprop="description" style="color:#636363">Current status information related to the implementation of a change. This information is sent to the change manager from the various processes that implement authorized changes. It is used by the change manager to keep the change records and the change schedule up-to-date.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement">CI record</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">Configuration information is maintained in CI records for all configuration items (CIs) under the control of the configuration manager. In this context, CIs can be of various types: Applications, systems and other infrastructure components are treated as CIs, but often also services, policies, project documentation, employees, suppliers, etc. Configuration information is stored in the configuration management system (CMS).</li></ul>
<p><br /></p>
<p><b><span id="Continuity-improvement-plan" itemprop="itemListElement">Continuity improvement plan</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">Items in the continuity improvement plan are used by the service continuity manager to record and manage continuity improvement initiatives throughout their lifecycle. Initiatives in the continuity improvement plan may aim to enhance the resilience of services or to put mechanisms in place for the recovery of services in the case of disaster events.</li></ul>
<p><br /></p>
<p><b><span id="Continuity-operation-manual" itemprop="itemListElement">Continuity operation manual</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">The continuity operation manual specifies the activities required for the operation of the continuity arrangements and mechanisms operated under the responsibility of the service continuity manager. Some instructions related to the operation of particular security systems may be documented in separate technical manuals or 'standard operating procedures (SOPs)'.</li></ul>
<p><br /></p>
<p><b><span id="Continuity-review-report" itemprop="itemListElement">Continuity review report</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">A continuity review report records the details and findings from a continuity review. This report is an important input for the definition of continuity improvement initiatives.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement" style="color:#636363">Data for project plan update</span></b></p>
<ul><li itemprop="description" style="color:#636363">Current information related to project progress and resource consumption. This information is sent from various service management processes to the project manager as input for project control.</li></ul>
<p><br /></p>
<p><b><span id="Guideline-for-disaster-events" itemprop="itemListElement">Guideline for disaster events</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">The guideline for disaster events contains detailed instructions on when and how to invoke the procedure for responding to disaster events. Most importantly, the guideline defines the first steps to be taken by 1st level support after learning that a (suspected) disaster event has occurred.</li></ul>
<p><br /></p>
<p><b><span id="Index-of-disaster-relevant-information" itemprop="itemListElement">Index of disaster-relevant information</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">A catalogue of all information that is relevant in the context of responding to a disaster event. The index of disaster-relevant information is maintained and circulated by the service continuity manager to all members of staff with responsibilities for fighting disasters.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement" style="color:#636363">Purchase request</span></b></p>
<ul><li itemprop="description" style="color:#636363">A request to procure goods or services from an external supplier. Purchasing requests are typically sent to the supplier manager, for example if applications, systems or other infrastructure components are needed for setting up a new service, or if standard infrastructure components and consumables are required for service operation.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement">Recovery plan</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">Recovery plans contain detailed instructions for returning specific services and/ or systems to a working state, which often includes recovering data to a defined consistent state.</li></ul>
<p><br /></p>
<p><b><span id="Register-of-managed-disaster-events" itemprop="itemListElement">Register of managed disaster events</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">The register of managed disaster events is a tool used by the service continuity manager to keep an overview of the disaster events against which the service provider has decided to set up some kind of protection, considering the potential impacts and occurrence likelihoods. The register of managed disaster events also specifies the responses to the identified events, in particular the related service continuity plans.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement" style="color:#636363">Request to assess security risks</span></b></p>
<ul><li itemprop="description" style="color:#636363">A request to assess security risks, typically issued during service design if new or changed security controls and mechanisms are likely to be needed for a new or improved service.</li></ul>
<p><br /></p>
<p><b><span id="Service-continuity-plan" itemprop="itemListElement">Service continuity plan</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">A service continuity plan describes how service continuity is ensured with regards to a particular type of disaster event. The plan specifies the required preventive measures and describes how to effectively respond to the disaster event. Service continuity plans usually include references to more detailed recovery plans with specific instructions for returning applications, systems or other infrastructure components to a working state.</li></ul>
<p><br /></p>
<p><b><span id="Suggested-continuity-improvement" itemprop="itemListElement" style="color:#636363">Suggested continuity improvement</span></b></p>
<ul><li itemprop="description" style="color:#636363">A suggestion for improving service continuity. Suggestions for continuity improvements may originate from anywhere within the organization.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement" style="color:#636363">Suggested process modification</span></b></p>
<ul><li itemprop="description" style="color:#636363">A suggestion for modifying one or several service management processes. Suggestions for process modifications or improvements may originate from anywhere within the organization.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement" style="color:#636363">Suggested service modification</span></b></p>
<ul><li itemprop="description" style="color:#636363">A suggestion for modifying a service, for example to improve service quality or economics. Suggestions may originate from anywhere within or outside of the service provider organization.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement">Test report</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">A test report provides a detailed account of testing activities. A test report is created for example during tests of new or changed service components, or during tests of security or service continuity mechanisms.</li></ul>
<p><br /></p>
<p><b><span itemprop="itemListElement">Test script</span></b> <a href="#ydo" title="YaSM data object">[*]</a></p>
<ul><li itemprop="description">A test script specifies a set of test cases including their expected outcomes. The nature of the test cases will vary depending on what is to be tested.</li></ul>
</div><!-- end of schema.org/ItemList --><p>

<p>&nbsp;</p>
<hr />
<p><i><b>Notes:</b></i>
</p><p><span id="ydo"><strong>[*]</strong> <i>"YaSM data objects"</i> are those documents or records for which the YaSM model provides detailed recommendations: Every YaSM object has an associated checklist (see <a  href="https://yasm.com/wiki/en/index.php/Service_Management_Checklists" title="Example: YaSM checklists and document templates">example</a>) describing its typical contents, and an associated lifecycle diagram depicting how the status of the object changes as it is created, updated, read and archived by various YaSM processes (see <a href="https://yasm.com/wiki/en/img/yasm-project/Yasm-object-lifecycle-diagram.jpg" title="Example: YaSM object lifecycle diagram (.JPG)">example</a>).</span>
</p><p><i>"Other objects"</i> are mostly informal data or information where YaSM has less strong views about their contents. There are no associated lifecycle diagrams or checklists.</html>

<p>&nbsp;</p>

==Process metrics==

<html><p>Process metrics are used, for example, to assess if the service management processes are running according to expectations.</p>
<p>For suggestions of <a itemprop="significantLinks" href="https://yasm.com/wiki/en/index.php/YaSM_Metrics" title="How to measure the performance of the YaSM processes - Process metrics">suitable metrics</a>, please refer to the <a itemprop="significantLinks" href="https://yasm.com/wiki/en/index.php/YaSM_Metrics/_Supporting_Service_Management_Processes#metrics-sp8" title="Metrics for the YaSM process SP8: Prepare for disaster events.">list of metrics for the YaSM disaster prevention process</a>.</html>

<p>&nbsp;</p>

==Roles and responsibilities==

'''<span id="responsible">Process owner: Service continuity manager</span>'''
*The service continuity manager is responsible for managing risks that could seriously impact the service provider's services. In particular, this role ensures that the service provider can provide minimum agreed service levels in cases of disaster.

<p>&nbsp;</p>

{| class="wikitable sortable" style="background: white; text-align:center; vertical-align:top; font-size: 90%; line-height: 1.3em;"
|+<span style="font-size: 120%; line-height: 2.3em;">Responsibility matrix: "SP8: Prepare for disaster events"</span>
|- style="vertical-align:top"
! colspan="2"| YaSM role / sub-process
! [[YaSM Roles#Compliance-manager|Compli. mgr.]]
! [[YaSM Roles#Operator|Oper.]]
! [[YaSM Roles#Process-owner|Proc. owner]]
! [[YaSM Roles#Security-manager|Secur.  mgr.]]
! [[YaSM Roles#Service-continuity-manager|Serv. contin. mgr.]]
! [[YaSM Roles#Service-owner|Serv. owner]]
! [[YaSM Roles#Technical-domain-expert|Techn. domain expert]]
|- style="text-align:center"
| SP8.1
| style="text-align:left"|[[#SP8.1|Assess risks associated with disaster events]]
| -	 
| -	
|R	 
| -	
|AR	
|R	 
| -
|- style="text-align:center"
|SP8.2
| style="text-align:left"|[[#SP8.2|Define continuity improvements]]
|R	 
| -	
| -	 
|R	
|AR	
| -	 
| -
|- style="text-align:center"
|SP8.3	
| style="text-align:left"|[[#SP8.3|Start up continuity improvement initiatives]]
| - 
| -	
| -	 
| -
|AR	
| -	 
| -
|- style="text-align:center"
| SP8.4	
| style="text-align:left"|[[#SP8.4|Implement continuity arrangements]]
| - 
|R
| -	 
| -
|AR	
| -	 
|R
|- style="text-align:center"
| SP8.5	
| style="text-align:left"|[[#SP8.5|Operate the continuity arrangements]]
| - 
|R
| -	 
| -
|AR	
| -	 
| -
|- style="text-align:center"
| SP8.6	
| style="text-align:left"|[[#SP8.6|Review the continuity arrangements]]
| - 
| -
| -	 
| -
|AR	
| -	 
| -
|}

<p>&nbsp;</p>

==[ Infobox ]==

<html><table class="wikitable">
<tr>
<td>Link to this page:</td>
<td><a itemprop="url" href="https://yasm.com/wiki/en/index.php/SP8:_Prepare_for_disaster_events">https://yasm.com/wiki/en/index.php/SP8:_Prepare_for_disaster_events</a></td>
</tr>
<tr>
<td>Languages:</td>
<td><span itemprop="inLanguage" content="en">English</span> | <span><a itemprop="citation" class="external TEXT" href="https://yasm.com/wiki/de/index.php/SP8:_Vorbereiten_auf_Katastrophen-Ereignisse" title="SP8: Vorbereiten auf Katastrophen-Ereignisse">Deutsch</a></span></td>
</tr>
<tr>
<td>Image:</td>
<td style="vertical-align:top"><a itemprop="primaryImageOfPage" href="https://yasm.com/wiki/en/img/yasm-process/Prepare-for-disaster-events-yasm-sp8.jpg" title="Prepare for disaster events. - YaSM process SP8.">YaSM SP8: Prepare for disaster events (.JPG)</a></td>
</tr>
<tr>
<td>Author | Contributor:</td>
<td><span itemprop="author">Stefan Kempter</span>&nbsp;<a rel="author" href="https://plus.google.com/111925560448291102517"><img style="margin:0px 0px 0px 0px;" src="/wiki/en/img/yasm-wiki/bookmarking/google.jpg" width="16" height="16" title="By: Stefan Kempter | Profile on Google+" alt="Author: Stefan Kempter, IT Process Maps GbR" /></a> &nbsp; and <span itemprop="contributor">Andrea Kempter</span>&nbsp;<a href="https://plus.google.com/113316270668629760475"><img style="margin:0px 0px 0px 0px;" src="/wiki/en/img/yasm-wiki/bookmarking/google.jpg" width="16" height="16" title="By: Andrea Kempter | Profile on Google+" alt="Contributor: Andrea Kempter, IT Process Maps GbR" /></a> &nbsp; - &nbsp; <span itemprop="creator copyrightHolder publisher">IT Process Maps</span>.</td>
</tr>
</table>
<p><small>
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb">
<a href="https://yasm.com/wiki/en/index.php/SP8:_Prepare_for_disaster_events#Process_description" itemprop="url"><span itemprop="title">Process description</span></a> › 
</span>
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb">
<a href="https://yasm.com/wiki/en/index.php/SP8:_Prepare_for_disaster_events#Sub-processes" itemprop="url"><span itemprop="title">Sub-processes</span></a> › 
</span>
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb">
<a href="https://yasm.com/wiki/en/index.php/SP8:_Prepare_for_disaster_events#Process_outputs" itemprop="url"><span itemprop="title">Process outputs</span></a> › 
</span>
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb">
<a href="https://yasm.com/wiki/en/index.php/SP8:_Prepare_for_disaster_events#Process_metrics" itemprop="url"><span itemprop="title">Metrics</span></a> › 
</span>
<span itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb">
<a href="https://yasm.com/wiki/en/index.php/SP8:_Prepare_for_disaster_events#Roles_and_responsibilities" itemprop="url"><span itemprop="title">Roles</span></a>
</span>
</small></p>
</div><!-- end of schema.org/WebPage --><p></html>

<!-- This page is assigned to the following categories: -->
[[Category:YaSM process]]
<!-- --- -->