Index B BIA 6 I Information Resource Owner 6 IT Service Manager 6 ITC-01 10 O On-Going 12 Overview 6 P Purpose 6 R RPO 6 RTO 6 S Scope 6 W Within 12 Hours 11 Within 11 Within 48-Hours 11 Within 4-Hours 10 Within 5-Days 12 Within 72-Hours 11
Glossary Administrator Responsible for configuring, managing, overseeing and maintaining a computing environment or system. Responsibilities vary depending on an organization's requirements. This person should possess strong technical knowledge and skills Business Function Process or operation performed routinely to out a part of the mission of an organization. Business Impact Analysis Business impact analysis is the activity in business continuity management that identifies vital business functions and dependencies. These dependencies may include suppliers, people, other business processes, IT services, etc. Business impact analysis defines the recovery requirements for IT services. These requirements include recovery time objectives, recovery point objectives and minimum service level targets for each IT service. (ITIL Service Strategy) Continuity of Operations The ability of an organization to provide service and support for its customers and maintain its viability before, during, and after a business continuity event. Cost Benefit Analysis Cost benefit analysis (CBA), sometimes called benefit cost analysis (BCA), is a systematic approach to estimating the strengths and weaknesses of alternatives (for example in transactions, activities, functional business requirements). It is used to determine options that provide the best approach to achieve benefits while preserving savings. The CBA is also defined as a systematic process for calculating and comparing benefits and costs of a decision, policy (with particular regard to government policy) or (in general) project. Broadly, CBA has two main purposes: 1. to determine if an investment/decision is sound (justification/feasibility) by verifying whether its benefits outweigh the costs, and by how much; 2. to provide a basis for comparing projects,which involves comparing the total expected cost of each option against its total expected benefits. Critical Infrastructure Functions University-wide functions that must continue uninterrupted or can be resumed within a few hours. Examples of critical infrastructure include: -
Emergency response services; - Utilities, including electricity, water, and reasonable climate control; - Communications with internal and external audiences to include students, faculty, staff, and media; - Internet, authentication, and voice communications; - Hazardous materials spill response and control to include safe handling and proper disposal of toxic substances, biologically hazardous materials, and radioactive materials. Custodian of an Information Resource A person responsible for implementing owner-defined controls and access to an information resource. Custodians may include university employees, vendors, and any third party acting as an agent of – or otherwise on behalf of – the university and/or the owner. Essential Functions Defined in the Institutional Continuity Plan () as functions that must be either Uninterrupted or resumed within a few hours of an incident. Essential Functions support: Emergency Response Services, Utilities to include electricity, water, and reasonable climate control, Communications with internal and external audiences to include students, faculty, staff and the media, Internet, authentication, and voice communications, Hazardous materials response and control, to include safe handling and proper disposal of toxic substances, biologically hazardous materials, and radioactive materials. Essential IT Service An IT service with a Recovery Time Objective of less than 12 hours and one required to support the critical infrastructure functions of the university. IT Disaster Recovery Plan (IT DRP) plan that is focused on the overall recovery of Electronic Information Resources supported by the department/unit. IT Service Made up of a combination of information technology, people, and processes. A customer-facing IT service directly supports the business processes of one or more customers. Other IT services, called supporting services, are not directly used by the business, but are required by the service provider to deliver customer-facing services. IT Service Manager