Awareness training program plan

Another way of raising the awareness of DR process in the organization is to put up posters and notices of available DR courses, dates of DR exercises, names of participants of DR exercises, recognition from Executive Management on the successful execution of DR exercises onto organization notice-boards.

Through these publicity channels, staff level of awareness of DR activities will be increased, and staff will know their effort in DR Planning and maintenance is well appreciated by the management. However, the shortcoming of this method is you must be able to renew the posters and notices promptly, and not leave them there.

DR training focuses more on skill sets and know-how in performing the DR activities while awareness programs focus on general knowledge. Some examples of DR training are the technical skills for recovering a Windows NT server, the recovery of data from backup tapes using a backup software such as ARCserve. In general, DR training can be divided into five major phases, they are a pre-planning phase, planning phase, development phase, testing phase and maintenance phase.

For each of these phases, the scope and requirements for the training needs differ in order to address the needs of different personnel and different skill-sets. During the pre-planning phase, the scope and objectives are to equip the key personnel with enough understanding of DR Planning, the methodology for carry out a proper DR Plan, the needs of having a DR Plan and how to estimate budget requirements for carrying out a DR Plan development and maintenance.

In summary, in this phase of training is to equip the key DR personnel with the knowledge to justify to the management on the need of having a DR Plan for the organization, so that sufficient budget, resources, and commitment are given to develop a proper DR Plan. In this project management phase, the training should focus on development of skill-sets of identifying the most suitable DR Plan development methodology for the organization, the skills of carrying out risk analysis, assessment and management, and the technical know-how of carrying a Business Impact Analysis to ensure that the management of commit their support and endorse the kicking-off of the DR Plan development for the organization.

In this phase, the training should focus on specific procedural aspects of developing and implementing the DR Plan. The training focus will be in the areas of:. In this phase of training, the organization should concentrate on building up skill sets of staff so that they can verify and validate the strategies and procedures detailed in DR Plan. At the same time, exercising the DR Plan will also provide unique and valuable training for the DR team members. Cloud, In addition, develop the skill-sets of carrying out post-test review meetings to capture all the shortcomings, errors, omissions or gaps of the DR Plan against the actual operational environments.

In the program management phase, the training should focus on ways of plan distribution and collection, the establishment of management control processes for modifying and updating the DR Plan and how to establish the frequency of DR Plan review and updating. At this point, the training is rather procedural and sequential, as the training sessions must focus on standard documentation formatting, standard procedures for version control, distribution control, and review and approval of updates to planning.

Training and awareness is an on-going process and not a one-off event The DR Plan changes with staff turnover, business environment changes, as well as hardware, software and application systems upgrades. Following the training process, the business continuity team should evaluate and establish an ongoing plan for repeat training at appropriate intervals, accounting for variables such as new organizational operations, employee turnover in key positions, and new business continuity techniques.

The bottom line: What would be the cost to us if a disaster occurred and our team was not fully prepared to implement our business continuity plan? The bottom line: What's the cost to not be fully prepared when a disaster finally strikes? Flashlight with extra batteries — An employee can use a flashlight to find his or her way if the power is out. It is important to instruct employees not to use candles or any other open flame for emergency lighting.

Battery-powered radio — News about an emergency may change rapidly as events unfold. Employees also will be concerned about family and friends in the area. Radio reports will give information about the areas most affected. Food — Enough non-perishable food to sustain an employee for at least one day three meals is suggested. Foods selected should require no refrigeration, preparation or cooking, and little or no water.

Items can include:. Water — Employees should consider keeping at least one gallon of water or more if a person is on medications that require water or that increase thirst. Water can be stored in plastic containers such as soft drink bottles. Avoid using containers that will decompose or break, such as milk cartons or glass bottles. Medications — Employees should include usual non-prescription medications, including pain relievers, stomach remedies, etc.

This Planning Kit enables you to quickly build and improve your security awareness program using proven resources. We know that when it comes to measuring and managing your human risk, it can be confusing where to start. Save time and be more successful — get the kit now. Have a resource that you feel is missing?

Is there a template, checklist, or matrix we should add that would help you? Reach out to me at lspitzner sans. The kit includes: Example Project Charter : Project Charters are the first step in planning any large-scale project or initiative.

This covers the key elements of a Project Charter for a new security awareness program. Example Project Plan : A detailed example of what a complete project plan can look like for a comprehensive security awareness program.