CCCL - Corporate Computer Consultants Ltd

	Prepare an overal contingency strategy/approach (as part of a general infosec strategy), leading to a prioritised plan, timescale and budget
	Assess risks and review the state of existing contingency plans & controls e.g. data backups, 'understudies' for key staff
	Design 'DRP/BCP solutions' - from overarching contingency plans down to specific planned responses to common breaches e.g. disk failure, bugs, viruses, website hacks, denial of service attacks etc.
	Prepare response procedures, including establishment of a crisis management team and specific activities
	Help identify managers and staff with responsibility and authority to own, maintain and enact the procedures (not to be underestimated!)
	Where necessary, improve internal controls, focussing especialy on preventive controls to reduce the probability of a disaster occurring
	Select and contract with third-party DRP/BCP suppliers where appropriate (cold/warm/hot site recovery, dealing room recovery etc.)
	Test the controls by exercising contingency plans and recovery scenarios (a vital step!)
	Maintain and update contingency plans regularly