Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Evaluate impact of system on business continuity
   • Identify business critical functions and the security environment from documentation and from discussion with business area and project team
   • Identify critical data and software from documentation
   • Assess potential impact of business risk and threats on ICT systems
   • Identify and evaluate statutory requirements, commercial requirements and contingency possibilities according to specifications and cost constraints
2. Evaluate threats to system
   • Identify threats to the system, considering security analysis and internal and external business environment
   • Evaluate risk minimisation alternatives against specifications and cost constraints
3. Formulate prevention and recovery strategy
   • Evaluate prevention and recovery options to support critical business functions against business specifications and cost constraints
   • Review current operational procedures to ensure adequate risk safeguards and contingency plans are in place
   • Submit disaster recovery and prevention strategy to appropriate person for approval
4. Develop disaster recovery plan to support strategy
   • Identify and document resources required for disaster recovery according to specifications and cost constraints
   • Identify and document processes required for disaster strategy according to project standards
   • Identify cut-over criteria before initiating disaster plan
   • Document disaster recovery plan and submit to appropriate person for review and sign-off

Performance Evidence

Evidence of the ability to:

develop a contingency plan that identifies threats and minimises down time for business critical functions

develop clear and specific directions on how to handle serious down time

coordinate, plan and articulate flexible logistics requirements.

Note: If a specific volume or frequency is not stated, then evidence must be provided at least once.

---

Knowledge Evidence

To complete the unit requirements safely and effectively, the individual must:

compare and contrast backup methodologies

explain the business planning process relevant to the development of information and communication technology (ICT) business solutions

analyse the client business domain

evaluate disaster recovery plan strategies and components, including:

physical security

system failure, accident or sabotage (hackers)

denial of service

virus attack

cyber attack

telecommunications failure

contingency arrangements

interpret and analyse key workplace health and safety, legislative and organisational requirements relevant to the task

evaluate the organisation’s current systems functionality and systems engineering.

---