In a recent update, the Bundesamt für Sicherheit in der Informationstechnik (Federal Office for Information Security) has outlined a set of business continuity strategies (BC-Strategies) for organizations grappling with building or infrastructure failures. These strategies, based on the BSI Standard 200-4, aim to guide BC officers in identifying, examining, and evaluating solutions suitable for their institutions.
Outlined Strategies:
- Non-dedicated Internal Solution: Convert various institution premises into emergency workplaces, utilizing spaces like training and meeting rooms.
- Dedicated Internal Backup Workplaces: Provide dedicated emergency workplaces at alternative locations, facilitating swift collective action for time-critical processes.
- Mobile Work: Enable employees to work remotely, requiring robust internet connectivity and secure data practices.
- Displacement: Reallocate resources from non-time-critical processes to support time-critical ones during emergencies.
- Distributed Business Activity: Preemptively distribute business processes across independent locations for quick task takeover during emergencies.
- Cooperations: Collaborate with other institutions to access resources, necessitating pre-established agreements and careful consideration of legal and regulatory requirements.
- Commercial Solutions from Specialized Service Companies: Outsource workplace needs to external service providers, incurring ongoing costs but ensuring continuous availability.
Organizations are encouraged to tailor these strategies to their specific needs, continuously evaluating them based on cost, benefit, and risk factors. The BSI welcomes feedback and insights from users to enhance and refine these strategies further.