Enabling Processes
Enabling Processes
Enabling Processes
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Deliver, Service and Support<br />
DSS04 RACI Chart<br />
Key Management PracticeBoard DSS04.01<br />
Define the business continuity<br />
������� ���������� ��� ������<br />
DSS04.02<br />
Maintain a continuity strategy.<br />
DSS04.03<br />
Develop and implement a<br />
business continuity response.<br />
DSS04.04<br />
Exercise, test and review<br />
the BCP.<br />
DSS04.05<br />
Review, maintain and improve<br />
the continuity plan.<br />
DSS04.06<br />
Conduct continuity plan training.<br />
DSS04.07<br />
Manage backup arrangements.<br />
DSS04.08<br />
Conduct post-resumption<br />
review.<br />
186<br />
: ENABLING PROCESSES<br />
Chief Executive Officer<br />
Chief Financial Officer<br />
Chief Operating Officer<br />
Business Executives<br />
DSS04 Process Practices, Inputs/Outputs and Activities<br />
Business Process Owners<br />
Strategy Executive Committee<br />
�������� ��������������������� ���������<br />
������� ���������� ������<br />
����� ���������� ������<br />
Chief Risk Officer<br />
Chief Information Security Officer<br />
Architecture Board<br />
Enterprise Risk Committee<br />
Head Human Resources<br />
Compliance<br />
Audit<br />
Chief Information Officer<br />
A C R C C C R R C R R<br />
A C R I C C R R C R R<br />
I R I C C R C C R A<br />
I R I R R C R A<br />
A I R I R C R R<br />
I R R R R R A<br />
Head Architect<br />
Head Development<br />
Head IT Operations<br />
Head IT Administration<br />
Service Manager<br />
Information Security Manager<br />
Business Continuity Manager<br />
C A R<br />
C R I R C C R R A<br />
Management Practice Inputs Outputs<br />
DSS04.01 Define the business continuity policy,<br />
objectives and scope.<br />
Define business continuity policy and scope aligned with<br />
���������� ��� ����������� �����������<br />
From Description Description To<br />
APO09.03 SLAs ������ ��� ���������� ���<br />
business continuity<br />
APO01.04<br />
Disruptive incident<br />
scenarios<br />
Internal<br />
Assessments of current<br />
continuity capabilities<br />
and gaps<br />
Internal<br />
Activities<br />
�� �������� �������� ��� ���������� �������� ��������� ��� ������� ���������� ���� ��� �������� �� ��� ���������� ���������� �� ��������� �� ���� ����� ����<br />
or contractual obligations.<br />
2. Identify key stakeholders and roles and responsibilities for defining and agreeing on continuity policy and scope.<br />
�� ������ ��� �������� ��� ��������� ������� ������ ���������� ��� ����� ��� �������� ���������� ��� ����� ��� ���� ��� ���������� �������� �� ���<br />
enterprise culture.<br />
4. Identify essential supporting business processes and related IT services.<br />
Personal Copy of: Mr. Dong Hong Wang<br />
Privacy Officer