Editing Business continuity planning (section)

==Maintenance==
Biannual or annual maintenance cycle maintenance of a BCP manual<ref name=AUdoc>{{Cite web|url=https://publications.qld.gov.au/dataset/05765d5a-91b3-45fd-af43-699ede65dd8a/resource/63f7d2dc-0f40-4abb-b75f-7e6acfeae8f3/download/businesscontinuityplantemplate.doc|title=Business Continuity Plan Template}}</ref> is broken down into three periodic activities.

* Confirmation of information in the manual, roll out to staff for awareness and specific training for critical individuals.
* Testing and verification of technical solutions established for recovery operations.
* Testing and verification of organization recovery procedures.

Issues found during the testing phase often must be reintroduced to the analysis phase.

===Information and targets===
The BCP manual must evolve with the organization, and maintain information about '''who has to know what''':

* A series of checklists
** Job descriptions, skillsets needed, training requirements
** Documentation and document management
* Definitions of terminology to facilitate timely communication during [[IT disaster recovery|disaster recovery]],<ref>{{Cite web|url=https://drii.org/resources/viewglossary|title=Glossary &#124; DRI International|website=drii.org}}</ref>
* Distribution lists (staff, important clients, vendors/suppliers)
* Information about communication and transportation infrastructure (roads, bridges)<ref>{{cite web  |website=CMS.gov
|url=https://www.cms.gov/Medicare/Medicare-Contracting/FFSProvCustSvcGen/Downloads/Disaster-Recovery-Plan-Checklist.pdf |archive-url=https://ghostarchive.org/archive/20221009/https://www.cms.gov/Medicare/Medicare-Contracting/FFSProvCustSvcGen/Downloads/Disaster-Recovery-Plan-Checklist.pdf |archive-date=2022-10-09 |url-status=live  |title=Disaster Recovery Plan Checklist}}</ref>

===Technical===
Specialized technical resources must be maintained. Checks include:
* [[Computer virus|Virus]] definition distribution
* Application security and service patch distribution
* Hardware operability 
* Application operability 
* Data verification
* Data application

===Testing and verification of recovery procedures===
Software and work process changes must be documented and validated, including verification that documented work process recovery tasks and supporting disaster recovery infrastructure allow staff to recover within the predetermined recovery time objective.<ref>{{cite web
|title=Validation of a Disaster Management Metamodel (DMM) |author=Othman
|url=https://scholar.google.com/scholar_url?url=http://ro.uow.edu.au/cgi/viewcontent.cgi%253Farticle%253D2748%2526context%253Deispapers%26hl=en%26sa=X%26scisig=AAGBfm0CkEknKpMQtJeZBAWSgF_CqnzjNg%26nossl=1%26oi=scholarr |website=SCHOLAR.google.com}}</ref>