KR100789473B1 - Method and system for designing business continuity plan - Google Patents

Abstract

The present invention discloses a business continuity plan design method and system. The business continuity plan design method of the present invention includes: (a) a plan design server receiving detailed information of components used in a business continuity plan and registering it in a plan database; (b) The plan design server receives the setting information (organization structure data) for the organizational structure for which the business continuity plan is to be performed, and the setting information for setting the connection relationship between the components from the administrator terminal to perform the business continuity plan. Designing an organizational structure to generate organizational structure design data, generating connection relationship setting data indicating a connection relationship between components, and registering the same in a planning database; And (c) the plan design server assigning predetermined recovery tasks to teams and team members included in the organizational structure to generate business continuity plan design data, and registering the business continuity plan design data in the plan database. . The present invention registers important resources, critical systems, etc. identified through business impact analysis as components, and establishes a business continuity plan for restoration of the components and restoration of the entire organization in advance in case of a disaster situation, thereby creating an actual disaster situation. It has the effect of enabling faster and more efficient disaster recovery at the time of occurrence.

Description

Method and system for designing business continuity plan

1 is a block diagram showing the configuration of a business continuity plan design system according to a preferred embodiment of the present invention.

2 is a detailed block diagram showing the configuration of the analysis server of the present invention in detail.

3 is a detailed block diagram showing the configuration of an analysis database in detail.

4A to 4D are flowcharts illustrating a business impact analysis method according to a preferred embodiment of the present invention.

5A through 5G are exemplary diagrams for describing the functions of the project manager shown in FIG. 2.

6A through 8C are exemplary diagrams for describing the function of the questionnaire management unit illustrated in FIG. 2.

9A to 9E are exemplary views illustrating the function of the interview manager shown in FIG. 2.

10A to 10C are exemplary views illustrating the function of the questionnaire analyzer illustrated in FIG. 2.

11A to 11J are exemplary views illustrating the function of the DI (Disruption Impact) analysis unit illustrated in FIG. 2.

12A to 12D illustrate examples in which a user terminal inputs a response to a questionnaire.

13A to 13G are diagrams showing analysis results of the questionnaire of FIGS. 12A to 12D.

14 is a block diagram showing the configuration of a plan design server according to a preferred embodiment of the present invention.

FIG. 15A is a detailed block diagram showing the configuration of the component management unit of FIG. 14, FIG. 15B is a detailed block diagram showing the configuration of the plan design unit in FIG. 14, and FIG. 15C is a configuration of the plan development unit in FIG. 14. It is a detailed block diagram which shows.

16 is a detailed block diagram showing the configuration of a planning database according to a preferred embodiment of the present invention.

17 is a flowchart illustrating a process of designing a business continuity plan in a plan design server according to a preferred embodiment of the present invention.

18A to 18D are diagrams for explaining a function performed by the human resource manager shown in FIG. 15A.

19A to 19E are diagrams for describing a function performed by the asset manager of FIG. 15A.

20 is a view for explaining a function performed by the document manager of FIG. 15A.

FIG. 21 is a diagram illustrating a function performed by the computational resource management unit of FIG. 15A.

22A and 22B are views for explaining the function of the contact management unit in Fig. 15A.

23A to 23G are views exemplarily showing functions of the plan design unit in FIG.

24A to 24C are views exemplarily illustrating functions of the plan development unit of FIG. 14.

25 is a diagram illustrating an example of data read from the analysis database to the plan design server.

26A to 26C are diagrams showing an example of a business continuity plan report.

The present invention relates to a business continuity plan design method and system. Specifically, the present invention relates to a method and system for designing a business continuity plan, which is a plan for recovering from a disaster situation by analyzing the impact that can have on an organization when a disaster occurs, identifying resources required for recovery.

Due to the development of computer technology and the explosive spread of high-speed communication network, our society now uses computers in almost all institutions such as corporations, government offices, schools, and banks, and communicates with each other through internal local area network and the Internet network. Doing. In the past, fax or mail information transfers could be easily handled using e-mail, and in the past, direct banking, withdrawal of cash, or unpaid deposits could be done easily at home with Internet banking. However, as the dependence of wired and wireless communication systems increases, the failure of a communication network causes an inoperable state of all organizations using the communication network, and the same is the case when the main server of the enterprise is down due to a computer virus.

In addition, even in the event of disasters such as natural disasters or terrorism, each agency is likely to be incapable of working, and in preparation for such a situation, each agency is preparing a network of emergency contacts, and a task or system that is vulnerable to various disasters. It is not possible to prepare a plan for predicting and preparing specific damages in preparation for a disaster, such as where is the work or department which is most damaging when a disaster occurs.

Therefore, in the event of a disaster situation in which a systematic disaster recovery plan has not been formulated in advance, each recovery person can perform the recovery work arbitrarily, and there is a difficulty in procuring resources necessary for recovery. There is a problem in that excessive time and money are consumed.

The present invention has been made to solve the above problems, the technical problem to be achieved by the present invention is to investigate in advance the risk factors that may occur in organizations such as enterprises or government offices, each department or Analyze the damage of each unit, and based on the analysis results of each department or unit of work, calculate and process the impact of disaster on the unit qualitatively and quantitatively to derive the damage of the entire organization, and to analyze and evaluate And a method and system for designing a business continuity plan that can provide statistical data.

In addition, another technical problem to be achieved by the present invention is to identify the core departments, core resources, and core systems within the organization, such as enterprises or government offices before the occurrence of a disaster, and to identify departments, resources, and systems that are vulnerable to disasters within the organization. It also provides a method and system for designing business continuity plans optimized for effective recovery in the event of a disaster.

The business continuity plan design system of the present invention for achieving the above-described technical problem is a business continuity plan design system including a plan design server, a plan database, a personnel database, and a manager terminal. A component manager which receives detailed information of the components used and registers them in a planning database; Receive configuration information (organizational structure data) for the organizational structure to perform the business continuity plan, and setting information for setting the connection relationship between the components from the administrator terminal, designing an organizational structure indicating the organizational structure to perform the business continuity plan A plan design unit which generates data, generates connection relationship setting data indicating a connection relationship between components, and registers it in a plan database; And a plan development unit for assigning predetermined recovery tasks to teams and team members included in the organizational structure to generate business continuity plan design data, and to register the business continuity plan design data in the plan database.

In addition, the above-described plan design unit may generate organizational structure design data sequentially including a business floor, a recovery step hierarchy, a team group hierarchy, and a team hierarchy such that the upper hierarchy includes the lower hierarchy.

In addition, the above-mentioned recovery step hierarchy may include an emergency response step, a core work recovery step, and a daily work recovery step, and the above-described team group hierarchy includes a command group, a core work group, a daily work group, and an IT business group. The planning design department may refer to a personnel database to designate an organizational structure by assigning teams in the organization to any of the groups.

In addition, the aforementioned plan development department has a strategy for recovering interrupted work, a mission to perform disaster recovery, team member information, emergency contact information between team members, and a disaster situation for each team belonging to a team group. The team can then move on and assign alternative site information to perform the work.

In addition, the above-described components may include important human resource information, asset information, document information, computerized resource information, and contact information of the organization.

In addition, the business continuity planning design system further includes an analysis database storing important human resource information, asset information, document information, computational resource information, and contact information of a previously investigated organization, and the component management unit includes an analysis database. Human resource information, asset information, document information, computational resource information, and contact information can be read from and registered as a component of the business continuity plan.

In addition, the above-described plan design unit, a structural design unit for generating an emergency organization structure to be operated in an emergency when a disaster situation occurs; A process analysis unit for defining detailed information on a business process in an organization and setting a connection relationship between a pre-registered process and a component; A resource design unit which performs detailed definitions of resources existing in the organization and establishes an interconnection relationship between the resources; And a strategy design department that establishes a strategy that defines how to carry out the major activities to be done for disaster recovery, a mission to carry out the strategy, and a relationship between the teams that will perform the task.

In addition, the plan development unit, assigned to each of the pre-registered teams the tasks and strategies to be performed in the event of a disaster, assigning alternative sites for the team to perform work in the event of a disaster, the emergency of the team A team plan development unit for generating a contact network; A task plan development unit for assigning teams and team members a task to be performed in the event of a disaster; Team Member Plan Development, which assigns team members from the organization to processes, missions, teams, and emergency contacts; And an emergency contact network development unit that assigns previously registered emergency contact networks to teams and team members.

On the other hand, the business continuity plan design method of the present invention for achieving the above-described technical problem is to design a business continuity plan in a business continuity plan design system including a plan design server, a plan database, a personnel database, and a manager terminal A method comprising: (a) a plan design server receiving detailed information of components used in a business continuity plan and registering it in a plan database; (b) The plan design server receives the setting information (organization structure data) for the organizational structure for which the business continuity plan is to be performed, and the setting information for setting the connection relationship between the components from the administrator terminal to perform the business continuity plan. Designing an organizational structure to generate organizational structure design data, generating connection relationship setting data representing a connection relationship between components, and registering the same in a planning database; And (c) the plan design server assigning predetermined recovery tasks to teams and team members included in the organizational structure to generate business continuity plan design data, and registering the business continuity plan design data in the plan database. .

In addition, in the step (b) described above, the organizational structure design data may be generated sequentially including a business hierarchy, a recovery hierarchy, a team group hierarchy, and a team hierarchy such that the upper hierarchy includes the lower hierarchy.

In addition, the above-mentioned recovery step hierarchy includes an emergency response step, a core work recovery step, and a daily work recovery step, and the above-mentioned team group hierarchy includes a command group, a core work group, a daily work group, and an IT business group. For example, the planning server may designate an organizational structure by referring teams in the organization to any one of the groups.

In addition, step (c) described above, to each team belonging to a team group, a strategy for recovering interrupted work, a mission to perform to perform a disaster recovery, team member information, emergency contact network information between team members, and After a disaster, teams can move and assign alternative site information to perform their work.

In addition, the above-described components may include important human resource information, asset information, document information, computing resource information, and contact information of the organization.

In addition, the above described business continuity planning design system further includes an analysis database storing important human resource information, asset information, document information, computational resource information, and contact information of the previously investigated organization, and step (a) Human resource information, asset information, document information, computational resource information, and contact information can be read from the analysis database and registered as a component of the business continuity plan.

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

1 is a block diagram showing the configuration of a business continuity plan design system according to a preferred embodiment of the present invention. Referring to Figure 1, the business continuity plan design system of the present invention is the analysis server 20, plan design server 70, analysis database 30, planning database 80, personnel database 10, electronic The mail server 60 includes a plurality of user terminals 40, and an administrator terminal 50.

The analysis server 20 extracts a series of questionnaire data from the questionnaire package pre-stored in the analysis database 30 according to a command received from the manager terminal 50, or manages the disaster using the questionnaire data input by the manager. Register a new questionnaire package required for analysis, or generate the questionnaire data and output it to the analysis database 30 to store.

In addition, the analysis server 20 transmits the newly generated questionnaire data to each user terminal 40 through the e-mail server 60, and receives the response data for the questionnaire data from the user terminal 40, Analyzes various disasters that may affect the situation, and analyzes departments, tasks, and systems affected by various disasters.

In addition, the analysis server 20 according to the response data received from the user terminal 40 due to the damage degree, recovery time, maximum interruption allowable time, and damage to each department, task, and system affected by the disaster The amount of damage is calculated and the analysis results are output to the manager terminal 50.

On the other hand, the analysis database 30 registers a project (general plan of schedule and resources) for each organization in which business impact analysis is performed, and receives personnel data of the organization from the personnel database 10 from time to time, Alternatively, the personnel data is collectively downloaded from the personnel database 10 and stored therein. In addition, the analysis database 30 stores a previously prepared questionnaire package, receives and stores a new questionnaire package from the analysis server 20, or stores questionnaire data to be transmitted to a specific department and / or a specific individual, and a questionnaire. Save the answer data for. In addition, the analysis database 30 stores interview information (including an interview target, interviewer, and interview content information) for business impact analysis. In addition, the analysis database 30 stores the analysis result data of the business impact analysis using the answer data on the questionnaire.

The plan design server 70 registers the main components used in the business continuity plan design based on the data stored in the analysis database, establishes a connection relationship between the respective components, and performs an organizational structure to recover in the event of disaster recovery. After designing the project, create a project continuity plan by assigning certain recovery tasks to the teams and team members included in the structure.

The planning database 80 establishes and stores the interconnections of the components used in the business continuity plan, and assigns recovery tasks to the teams and team members belonging to the organizational structure and the organizational structures that will perform the recovery during disaster recovery. Store the business continuity plan design data generated by assignment.

Personnel database 10 stores the structure of the organization that is the target of the business impact analysis, information about the members of the organization, and linked with the analysis server 20 and the analysis database 30 through a communication network, such as the Internet network do.

The e-mail server 60 transmits an e-mail including the questionnaire data received from the analysis server 20 to the user terminals 40 through a predetermined communication network, and responds to the questionnaire from the user terminal 40. Receives a mail and transmits it to the analysis server 20. The plurality of user terminals 40 display the questionnaire content received from the e-mail server 60 to the user, and receive an answer to the questionnaire content from each user to the analysis server 20 through the e-mail server 60. Send the response data.

The manager terminal 50 transmits a questionnaire content creation command and a questionnaire analysis command to the analysis server 20 to control the analysis server 20 to analyze a business impact due to a disaster by performing a questionnaire and questionnaire analysis. . In addition, the manager terminal 50 transmits component setting information, organization structure setting information, and task assignment information to the plan design server 70, so that the plan design server 70 generates business continuity plan design data. To control.

Hereinafter, the business impact analysis method performed in the analysis server 20 will be described with reference to FIGS. 2 to 13G, and the plan design server 70 is performed based on the business impact analysis results with reference to FIGS. 14 to 26C. Describe how to design a business continuity plan.

2 is a detailed block diagram showing in detail the configuration of the analysis server 20 of the present invention. Referring to FIG. 2, the analysis server 20 may include a project manager 21, a questionnaire manager 22, an interview manager 23, a questionnaire analyzer 24, a report generator 26, and an e-mail transmitter 27. ), The transceiver 28 and the controller 29.

First, the project manager 21 registers a project by a command received from the manager terminal 50 and performs a function of modifying the project. 5A to 5G are exemplary views illustrating the function of the project manager 21. 5A to 5G, in order to perform the business impact analysis of the present invention, the project manager 21 creates a new project. New projects can be created for specific companies, or for each department or task of a particular company.

5A is a diagram illustrating a project list managed by the project manager 21. When the manager terminal 50 accesses the analysis server 20 through a communication network and calls the project manager 21, the project manager 21 5A shows a basic project management menu and a list of currently registered projects on the manager terminal 50 as shown in FIG. 5A, and displays an overview of the project as shown in FIG. 5B when the administrator selects “open”. .

In addition, in the case of creating a new project, if a project registration menu is selected from the manager terminal 50, the project manager 21 displays a project registration page as shown in FIG. 5C, and the manager is shown in FIG. 5C. Register project by inputting project information such as project description, project start date, project end date. In addition, the administrator may select the project modification menu to allow the project manager 21 to modify the project information registered in FIG. 5C, as shown in FIG. 5D.

In addition, when the manager terminal 50 selects a project schedule management item, the project management unit 21 displays the project schedule registration page shown in FIG. 5E to the administrator so that the project schedule can be registered and is illustrated in FIG. 5F. Display the Modify Project Schedule page to the administrator so that they can modify the project schedule. In addition, when the manager terminal 50 selects the project schedule output, the project manager 21 may display the project schedule on the manager terminal 50 in the form of a gantt chart, as shown in FIG. 5G.

In addition, the project management unit 21 may change the content and schedule of the project according to the selection of the manager terminal 50, and such changes may be recorded as change history data.

Meanwhile, the questionnaire management unit 22 registers a questionnaire package in advance and extracts a questionnaire to be sent for the project from a questionnaire package registered in advance, or newly generates a questionnaire and transmits the questionnaire to the user terminal 40. Do this.

6A to 6E illustrate the functions performed by the questionnaire manager 22 described above. Referring to FIGS. 6A to 6E, the function of the questionnaire management unit 22 will be described. First, when the manager terminal 50 accesses the analysis server 20 and calls the questionnaire management unit 22, the questionnaire management unit 22 may be used. When the questionnaire package, the questionnaire development, the questionnaire sending, and the questionnaire management main page having the response result as the main menu are displayed on the manager terminal 50 and the selection signal of the questionnaire package item is received from the manager terminal 50, the questionnaire management unit ( 22 displays the questionnaire package registration page on the manager terminal 50 as shown in FIG. 6A so that the manager terminal 50 may register the questionnaire package in advance. When the questionnaire manager 22 receives the items as shown in FIG. 6A from the manager terminal 50, the questionnaire manager 22 registers the questionnaire package in the analysis database 30. In addition, as shown in FIG. 6B, the manager terminal 50 may modify a questionnaire package that is already registered.

Meanwhile, when the questionnaire manager 22 receives a selection signal for the questionnaire development menu from the manager terminal 50, the questionnaire manager 22 extracts the questionnaire contents from the basic questionnaire package as shown in FIG. 6C. If the administrator selects the former, a list of questionnaire contents stored in the analysis database 30 is displayed on the manager terminal 50 as shown in FIG. 6D. Have your manager select the survey.

However, when the administrator selects to create a new questionnaire, the questionnaire manager 22 displays the item title, the question content, whether or not the question is displayed for the question, and the respondents to the answer further explain the answer as shown in FIG. 6E. Remarks that can be added and whether to add a questionnaire, and select the type of answer questionnaire to create a questionnaire page is sent to the manager terminal 50, the manager terminal 50 by selecting or listing each item of the page is new Fill out the questionnaire.

In a preferred embodiment of the present invention, the answer type is a single response type capable of only one answer to the questionnaire, a plurality of response types capable of multiple answers to the questionnaire content, and an example of answering only “yes” or “no” to the questionnaire content. / No type, can be configured to include a two-stage selection to set the questionnaire of the second stage according to the answer selected in the first stage, the table completion type to fill the answers in the table.

The questionnaire preparation method described above may be variously implemented. However, in the preferred embodiment of the present invention, when the manager terminal 50 selects a single response type, an attribute of the response field may be defined. For example, the response to one questionnaire may be set as a mandatory response to move on to the next questionnaire, and the input method may be set to a text type, a radio box type, or an option list type. In addition, when the manager terminal 50 selects a plurality of response types and selects a check box or an option list method as an input method in the attribute definition of the question, the manager terminal 50 may directly enter a view item for selecting an answer.

When the questionnaire is completed and the questionnaire manager 22 receives the selection signal for sending the questionnaire from the manager terminal 50, the questionnaire manager 22 displays the personnel database 10 or the personnel data store as shown in FIG. 7A. A list of targets to which a questionnaire registered in advance is sent from 36 is displayed and displayed on the manager terminal 50. In addition, when the manager terminal 50 selects the subject registration, the survey manager 22 displays the questionnaire subject registration page on the manager terminal 50 as shown in FIG. 7B, and the manager terminal 50 displays the questionnaire subject. You can register the survey subjects by entering the information. At this time, the questionnaire management unit 22 displays a list of the members of the organization stored in the personnel database 10 or the personnel data storage unit 36 on the manager terminal 50 to allow the manager to select a person to whom the questionnaire is sent. May directly enter the questionnaire's title or name, and search for the corresponding members in the personnel database 10 or the personnel data storage 36 to register the questionnaire. The questionnaire subject registered in this way may be modified by the manager terminal 50 by selecting the subject correction menu as shown in FIG. 7C.

 Meanwhile, the questionnaire manager 22 receiving the questionnaire sending selection signal from the manager terminal 50 displays the questionnaire sending page on the manager terminal 50, and the manager sends a questionnaire to all registered questionnaire subjects or a questionnaire subject. In the Send Type field, select whether to send only to non-responders who have not yet answered some or previously sent surveys. When the administrator selects the selective sending to send only a part of the registered survey subjects as shown in FIG. 7D, the list of registered subjects of the entire survey subjects is output on the left side of the screen, and the administrator selects the selected subjects on the right side of the screen. can do. After the questionnaire is sent, the questionnaire manager 22 may display the dispatch status as illustrated in FIG. 7E on the manager terminal 50.

On the other hand, when the selection signal for the questionnaire response result menu is received from the manager terminal 50, the questionnaire management unit 22 as shown in Figure 8a, the questionnaire response status for the questionnaire for the registered questionnaire package manager terminal If it is displayed on the 50 and the administrator clicks the response completion button, as shown in FIG. 8B, the response is displayed on the administrator terminal 50 so that the response can be checked and modified, and the questionnaire is resent to the non-responder. When the administrator clicks the resend button shown in FIG. 8A, the manager terminal 50 may resend the questionnaire for the entire non-responders as shown in FIG. 8C, and resend the questionnaire only to the selected non-responders. You may.

So far, the function of the questionnaire management unit 22 has been described. Hereinafter, the function of the interview management unit 23 will be described with reference to FIGS. 9A to 9E.

 When the manager terminal 50 selects an interview item from the main page and calls the interview manager 23, the interview manager 23 displays an interview summary list, an interview summary registration, and an interview summary modification page shown in FIG. 9A. . The manner of registering the interview summary is similar to the manner in which the project management unit 21 registers the project. For example, the manager terminal 50 may register or modify an interview plan by inputting an interview title, an interview area, an interview start date, an interview end date, or the like, and may output an interview list or schedule in a tabular or gantt chart format. .

In addition, when the manager terminal 50 selects the interviewee menu, the interview manager 23 registers, modifies, and outputs a list of interviewees as shown in FIG. 9B. Mark on. The method of registering and modifying the interviewees is similar to the method of registering and modifying the interviewees, so detailed explanations are omitted.

When the manager terminal 50 selects the interviewer menu, the interview manager 23 registers, modifies, and outputs a list to the manager terminal 50 as shown in FIG. 9C. Display. The method of registering and modifying the interviewer is similar to that of the interviewee, so detailed description thereof will be omitted.

On the other hand, after the interviewer conducts an interview, when the interviewer connects to the interview management unit 23 of the analysis server 20 by using the user terminal 40 or the manager terminal 50, and selects the interview contents menu, the interview management unit 23 outputs a page to register the contents of the interview as shown in FIG. 9D to the manager terminal 50 or the user terminal 40 of the interviewer, and the user terminal 40 of the interviewer is an interviewee, Interview data including the interviewer, the date of the interview, and the contents of the interview are input and transmitted to the interview management unit 23. The interview management unit 23 extracts necessary information from the interview data to the analysis database 30. Save it.

After the interview data is received, the interview manager 23 receives a confirmation e-mail including the interview content so that the interviewee can confirm the interview content input by the interviewer, as shown in FIG. 9E. And transmits the interview data to the analysis database 30 only when receiving the confirmation of the interview content from the user terminal 40 of the interviewee.

On the other hand, when the interview management unit 23 receives one of the interview overview registered in the interview overview from the manager terminal 50, it may output the interview status by date, department, and workplace by report form.

The function of the interview management unit 23 has been described so far. Hereinafter, the function of the questionnaire analyzer 24 will be described with reference to FIGS. 10A to 10C.

The questionnaire analyzer 24 basically performs the following four analyzes from the questionnaire response data stored in the analysis database 30 and stores the analysis result in the analysis database 30.

The first analysis performed by the questionnaire analysis unit 24 is an analysis of the operational impact of the paralysis when a divisional unit or unit task is paralyzed due to a disaster. The survey analysis unit 24 extracts data on items corresponding to operational influence factors (external image crash, customer dropout, employee fraud, impact on partners) among questionnaire responses stored in the analysis database 30. To analyze the operational impact. The questionnaire analysis unit 24 analyzes the expected damage level over time after the disaster is paralyzed by each department or unit task, and also responds to the operational impact level by department or unit task. The results of analyzing the operational impact levels of the entire organization's disasters are generated by collecting the average values.

The second analysis performed by the questionnaire analysis unit 24 is an analysis of the financial impact of the paralysis in the event of a paralysis. The questionnaire analysis unit 24 stores the items of financial impact factors (such as sales reduction, contractual damages compensation, etc.) that may occur when work by department or unit of work is paralyzed among questionnaire responses stored in the analysis database 30. Extracts the contents of responses to various penalties, etc., and analyzes the expected damage level and the estimated damage amount for each department or each task over time after the task is paralyzed, and stores the analysis result in the analysis database 30. do. In addition, the questionnaire analysis unit 24 analyzes the financial impact level due to the disaster of the entire organization by deriving an average value by collecting the results of responses to the financial impact level of each department or unit task, and calculates the damage amount for each item. In addition, the cumulative amount of the estimated damage amount over time after the occurrence of the disaster of the entire organization is analyzed and stored in the analysis database 30.

The third analysis performed by the questionnaire analysis unit 24 is an analysis of various risk factors that may or may result in a paralysis situation. Questionnaire analysis unit 24 is a risk factor that caused the paralysis of work by department or unit work among the survey response content stored in the analysis database 30 (for example, computer virus, system failure, typhoon, earthquake, torrential rain, terrorism) And the response contents of each department and the entire workplace, the probability of occurrence and damage of each risk factor, and the period of interruption and recovery time.

The fourth analysis performed by the questionnaire analysis unit 24 is an analysis of various risk factors that may or may cause paralysis of the system utilized in the work. The questionnaire analysis unit 24 paralyzes the system used in the work among the questionnaire responses stored in the analysis database 30, the influence of each system paralysis, the matters related to the data calculated by using each system, and the paralysis to perform the work. The response contents related to the target time for recovering the old system are extracted, and the impact on the work when the system is paralyzed due to a disaster, the recovery time for lost data and the target recovery time for the system are analyzed. In addition, by generating answers to the target recovery time of each system by generating the statistical data about the number of systems for each target recovery time class, and by combining the response results of the system target recovery time, the shortest response among the target recovery time for each system Deduce the time value. In this case, the shortest time value of each department's target recovery time answers for the system becomes the target time value to be recovered when the system is paralyzed.

In addition to the four analysis items described above, the questionnaire division, based on the contents of the questionnaire responses, includes important records and documents for each department, each unit task, and the entire workplace, anticipated damage by the time of disaster occurrence, recovery plan establishment, and disaster. Analysis of recovery difficulty, impact of other work in the event of a disaster, maximum allowable downtime, target recovery time, system target recovery time, work recovery necessary appliances and equipment, work recovery need personnel, communication internet computer hardware computer software, etc. Perform.

Specific examples of the above-described analysis contents will be described later with reference to FIGS. 4A and 4B.

On the other hand, after the questionnaire analysis unit 24 completes the analysis according to the questionnaire content, and stores the analysis data in the analysis database 30, the questionnaire analysis unit 24 from the manager terminal 50 of the basic report output menu Upon receiving the selection signal, the questionnaire analyzer 24 outputs the analysis result list as shown in FIG. 10A to the manager terminal 50, and the specific analysis result (eg, risk analysis of FIG. 10A) from the manager terminal 50. When receiving the selection value for), the analysis result report as shown in FIG. 10B is output to the manager terminal 50.

In addition, when the questionnaire analysis unit 24 receives a report selection signal for each question from the manager terminal 50, the manager terminal 50 selects only a desired item for analysis from a specific questionnaire item as shown in FIG. 10C and performs the analysis. Send the results of analysis.

So far, the function of the questionnaire analyzer 24 has been described. Hereinafter, the functions of the DI analyzer 25 will be described with reference to FIGS. 11A to 11J. First, the DI analyzer 25 reads resource items necessary for DI analysis from the analysis database 30. Resource items used for DI analysis are composed of unit tasks, systems, departments, and risk factors (risks), each of which is derived from the matters stored in the analysis database 30 as a result of conducting questionnaires and interviews. do.

When the DI analyzer 25 receives a selection signal of the DI analysis menu from the manager terminal 50, the DI analyzer 25 transmits and displays a page for inputting details of DI analysis resources to the manager terminal 50. . As described above, the analysis resource input page includes pages for registering unit tasks, systems, departments, and risks.

First, the DI analysis unit 25 performs a questionnaire and interview from the analysis database 30 to extract a registered unit task, and includes the extracted unit task name in the analysis resource management page and outputs it to the manager terminal 50. Then, the manager terminal 50 registers the unit task to be used for DI analysis, as shown in Figure 11a, and evaluates the production (utility) value of each unit task by the amount of a day, and registers the amount, In case of paralysis due to a disaster, specify the recovery time objective (RTO), recovery point objective (RPO), and maximum allowable downtime (MAO) associated with the recovery of each task. Enroll based on the results of a basic survey and interview.

After that, the DI analysis unit 25 performs a questionnaire and interview from the analysis database 30 as shown in FIG. 11B to extract a registered system, and includes the extracted system name in the analysis resource management page. When the output to the terminal 50, the manager terminal 50 registers the systems to be used for DI analysis, evaluates the production (utility) value of each system by the amount of the daily basis and registers the amount, and the system due to disaster In the event of a paralysis, a basic survey detailing Recovery Time Objective (RTO), Recovery Point Objective (RPO), and Maximum Allowable Downtime (MAO) for recovery of the system. And register based on the interview results. It also registers the time and cost of building each system.

After that, the DI analysis unit 25 performs a questionnaire and interview from the analysis database 30 to extract the registered department name as shown in FIG. 11C, and includes the extracted department name in the analysis resource management page. When outputting to 50, the manager terminal 50 registers the department name to be used for DI analysis, and registers the number of employees working in each department, the average wage and the total wage.

 After that, the DI analysis unit 25 performs a questionnaire and interview from the analysis database 30 to extract a registered risk (disaster) as shown in FIG. 11D, and includes the extracted risk in the analysis resource management page. In this case, the manager terminal 50 registers a risk to be used for DI analysis, and registers a risk occurrence, work impact, control method, control cost, etc. for each unit task. In addition, the DI analysis unit 25 sets and inputs a risk level according to the likelihood of occurrence and influence input by the manager terminal 50.

The risk level is automatically determined by the risk matrix set in advance by the manager terminal 50 when the risk level and the impact of each risk are registered. Referring to FIG. 11E, first, a stage of occurrence (e.g., five stages) of occurrence on the horizontal axis is determined, and a grade of 25 stages is automatically generated when determining an influence stage (e.g., five stages) on the vertical axis. The risk level names (eg, A, B, C, D, E) are registered by setting the interval according to the rank of each grade value.

Meanwhile, when the DI analysis unit 25 receives a selection signal for the DI analysis execution menu from the manager terminal 50 to execute DI analysis using the DI analysis resources registered as described above, the DI analysis unit 25 11F, the analysis resource selected by the manager terminal 50 among the analysis resources (unit work, system, department, and risk) registered for DI analysis is displayed on the screen, and The analysis is performed by establishing a connection relationship between each analysis resource according to the command.

In the example shown in FIG. 11F, the customer service (unit business) task performed by the customer service team (department) is paralyzed by fire or power outage (risk), or Phoenix or Albatross ( Analyze the impact of a system paralyzed by fire or power outage (risk).

On the other hand, after the DI analysis is executed, if the manager terminal 50 transmits the selection signal for the DI analysis report to the DI analysis unit 25 in order to output the DI analysis result, the DI analysis unit 25 is connected to FIG. 11G. When the illustrated DI analysis report basic page is output to the manager terminal 50 and the analysis targets, output items, output criteria, and the like, which are to output the report from the manager terminal 50, are illustrated in FIGS. 11H through 11J. Generate a DI analysis report as described above and transmits it to the manager terminal (50).

11H and 11I show that the manager terminal 50 selects 'customer service' as the unit task in the [select analysis target] to analyze the [financial impact of the unit task and system paralysis] and [report setting]. An example of a report that is output when 'financial impact' is selected in FIG. 11J is analyzed by [output condition setting] in order for the manager terminal 50 to analyze the effect of risk on each unit task and system. An example of a report that is output when selecting a risk (for example, a power failure), selecting an output criterion for [report setting], and clicking the [generate report] button is shown.

Meanwhile, the report generator 26 is connected to the project manager 21, the questionnaire manager 22, the interview manager 23, the questionnaire analyzer 24, and the DI analyzer 25 through the controller 29. From each of them, the data to be output in the report is input and a report is generated according to a predetermined form (eg, gantt chart, histogram chart, analysis table, etc.).

The e-mail sending unit 27 receives an e-mail including the questionnaire content input from the questionnaire management unit 22 through the control unit 29, receives an interview subject confirmation e-mail from the interview management unit 23, and receives the e-mail. It performs the function of transmitting to the user terminal 40 through the mail server 60. According to a preferred embodiment of the present invention, since the analysis server 20, the user terminal 40 and the manager terminal 50 are installed separately from each other remotely, the questionnaire management unit 22 and the interview management unit 23 is an e-mail server ( 60, the electronic mail is transmitted to the user terminal 40 and the manager terminal 50. However, when the analysis server 20 and the user terminal 40 and the like are connected through a local area network, the e-mail server 60 may be omitted in the system of the present invention, and the e-mail sending unit 27 may also be analyzed server 20. ) May not be included.

The transceiver 28 performs a function of communicating with the user terminals 40 or the manager terminals 50. When the analysis server is connected to the manager terminal 50 and the user terminals 40 through the Internet. In the transmission and reception unit 28 is implemented as a web server.

The control unit 29 performs a function of controlling the above-described components.

The configuration of the analysis server 20 has been described so far with reference to FIG. 2. Hereinafter, the structure of the analysis database 30 is demonstrated with reference to FIG. Analysis database 30 according to a preferred embodiment of the present invention is a project storage unit 31, questionnaire package storage unit 32, questionnaire data storage unit 33, interview data storage unit 34, analysis result storage unit , And personnel data storage 36.

The project storage unit 31 interoperates with the project management unit 21 of the analysis server 20 to store a project registered or modified by the project management unit 21, such as for each business site, department, and task.

The questionnaire package storage unit 32 is interlocked with the questionnaire management unit 22 to package and store pre-formed questionnaire contents. In particular, the questionnaire package storage unit 32 preferably stores in advance the questionnaire content formatted for each type of business performed in the target organization in which the business impact analysis is performed, the type of work performed in the organization, and the system used in the organization.

The questionnaire data storage unit 33 is interlocked with the questionnaire management unit 22 so that the questionnaire management unit 22 may generate the questionnaire items registered in the questionnaire package storage unit 32 or newly by the manager terminal 50. The survey data generated and transmitted to the user terminal 40 and the response data thereof are stored in association with each other. In addition, the questionnaire data storage 33 stores subject information of the questionnaire, response rate information about the questionnaire, and the like.

The interview data storage unit 34 interworks with the interview manager 23 to store interview subject information registered by the interview manager 23, interview operator information, and interview information.

In addition, the questionnaire data storage unit 33 and the interview data storage unit 34 are also linked to the questionnaire analyzer 24 and the DI analyzer 25, and requests from the questionnaire analyzer 24 and the DI analyzer 25 are provided. According to the questionnaire data and interview data is output to the questionnaire analysis unit 24 or DI analysis unit 25.

The analysis result storage unit interlocks with the questionnaire analysis unit 24 and the DI analysis unit 25 to store analysis results performed by the questionnaire analysis unit 24 and the DI analysis unit 25.

Personnel data storage unit 36 stores the organizational structure, personnel information, etc. of the organization in which the business impact analysis is to be performed. However, when the personnel database 10 of the analysis target organization may be linked in real time, the personnel data storage 36 may not be included in the analysis database 30.

So far, with reference to FIGS. 1-3, the structure of the business impact analysis system and the function of each component were demonstrated. Hereinafter, a business impact analysis method according to a preferred embodiment of the present invention will be described with reference to FIGS. 4A to 4D.

First, the questionnaire management unit 22 of the analysis server 20 generates a standardized questionnaire package for each business site, department, and unit work and registers the analysis database 30 (S400). The survey package is preferably configured to include a general survey content for use by a typical company.

When the questionnaire package is registered, the personnel database 10 of the company on which the business impact analysis is to be registered is registered (S405). In step S405, when the personnel database 10 of the corresponding company may be linked with the analysis server 20 in real time, the personnel database 10 may be linked to the analysis server 20, and linked in real time. If not possible, a process of reading the personnel data stored in the personnel database 10 and storing them in the personnel data storage 36 of the analysis database 30 is performed.

In order to analyze the disaster impact of the company, the manager terminal 50 is connected to the project management unit 21 through the transceiver 28, the project management unit 21 transmits the project management menu shown in Figure 5a (S410) ), The manager terminal 50 generates and modifies the project as shown in FIGS. 5B to 5D, and registers and modifies the project schedule and transmits the project schedule to the analysis server 20 as shown in FIGS. 5E and 5F. If (S414), the project manager 21 registers the project by storing the project generation information received from the manager terminal 50 in the project storage unit 31 (S418).

After the project is registered, the questionnaire management unit 22 receives a selection signal of the questionnaire management menu of the manager terminal 50, and transmits a questionnaire management menu page as shown in FIGS. 6A to 8C to the manager terminal 50. (S420).

As illustrated in FIGS. 6A to 6E, the manager terminal 50 searches the questionnaire package storage unit 32 to extract the questionnaire items previously stored in the questionnaire package storage unit 32, or newly, according to the command of the manager. By entering the content of the questionnaire, the questionnaire package is registered and the registered questionnaire package and the questionnaire content are corrected (S421).

Thereafter, the manager terminal 50 inquires the personnel data storage unit 36 or the personnel database 10 through the analysis server 20, and as illustrated in FIGS. 7A to 7C, including questionnaire contents. A target person to whom the survey e-mail is sent is selected (S422).

When the manager terminal 50 completes the input of the new questionnaire package and the input of the questionnaire, the questionnaire manager 22 stores the questionnaire data received from the manager terminal 50 in the questionnaire data storage 33 and registers the questionnaire. The control unit 29 sends a questionnaire registered to the user terminal 40 of the questionnaire subject registered by the questionnaire management unit 22 through the e-mail sending unit 27 (S424).

The user terminal 40 receives an e-mail including a questionnaire and displays the questionnaire to the questionnaire, and receives an answer to the questionnaire from the questionnaire, and transmits the answer to the analysis server 20 through the e-mail server 60 (S425). .

12A to 12D illustrate an example in which the user terminal 40 inputs a response to a questionnaire. First, FIG. 12A is a questionnaire for analyzing the operational impact when a work is interrupted due to a disaster, and the operational influence factors that a respondent may have on the entire organization when work by department or unit of work is paralyzed. The following shows an example of responding to the damage level for each item (external image crash, customer dropout, employee morale, impact on suppliers). In FIG. 12A, the responder responds to the expected damage level over time after the disaster is paralyzed.

FIG. 12B is a questionnaire for analyzing the financial impact when a business is interrupted due to a disaster. For each item of financial influence factors that may occur when respondents are paralyzed by department or unit of work. Reductions, damages in breach of contracts, and various penalties) show the expected damage level and the expected damage amount over time since the work was paralyzed.

FIG. 12C illustrates the risk factors (eg, computer virus, system failure, Select the typhoon, earthquake, heavy rain, terrorism, communication paralysis, fire, etc.) and give an example of responding to the possibility of each factor, the size of the damage, downtime and recovery time.

12D is a questionnaire for conducting an analysis of the impact of each system used in the work paralyzed, the respondents select the degree of impact when each system is paralyzed, and the data calculated through each system and its importance , An example of answering whether and how the data is backed up and a target recovery time for each system are shown.

The questionnaire manager 22 outputs the questionnaire data received from the user terminal 40 to the questionnaire data storage 33 and stores the questionnaire data (S426). Since the manager has corrected the contents of the questionnaire or checked the dispatch status and resend the questionnaire to the non-responders, the detailed description thereof will be omitted.

On the other hand, the interview manager 23 receives the selection signal of the interview menu of the manager terminal 50, and transmits the interview management menu page as shown in Figure 9a to the manager terminal 50 (S430).

The manager terminal 50 generates and modifies the interview summary and schedule as shown in FIG. 9A on the interview overview page of the interview management page and transmits the interview summary to the interview manager 23 (S431).

In addition, the manager terminal 50 inquires the personnel data storage unit 36 or the personnel database 10 through the analysis server 20, and the interviewees page of the interview management page as shown in FIG. The target person is selected, and as illustrated in FIG. 9C on the interviewer page, the interviewer to be interviewed is selected and transmitted to the interview manager 23 (S432).

The interview manager 23 registers the interview summary, the interview schedule, the interviewee, and the interviewer received from the manager terminal 50 in the interview data storage 34 (S433).

On the other hand, the person selected as the interviewer conducts an interview of the interviewees assigned to the interviewer, and if the interview content is input into a predetermined form as shown in FIG. 9D, the interviewer's user terminal 40 or the manager terminal ( 50 is transmitted to the interview management unit 23 (S434).

The interview manager 23 receives the interview contents, temporarily stores the interview contents in the interview data storage 34, and then sends a confirmation e-mail including the interview contents recorded by the interviewer to the user terminal 40 of the interviewee. It transmits to (S435).

The interviewee checks the interview contents recorded in the confirmation e-mail if it is recognized that his interview is accurate, and corrects the inaccurate contents by sending a reply to the confirmation e-mail to the analysis server (S436). 23 receives a reply to the confirmation e-mail, and finally registers the interview contents that were temporarily stored in consideration of the correction (S437).

When both the questionnaire and the interview are completed, the questionnaire analyzer 24 transmits the analysis execution menu to the manager terminal 50 at the request of the manager terminal 50 (S440). The analysis execution menu is largely composed of a questionnaire analysis that performs an analysis based on a questionnaire and an interview, and a DI analysis based on a result of a questionnaire and an interview but a connection relationship between analysis resources is set by an administrator.

The manager terminal 50 selects a questionnaire analysis or DI analysis from the analysis execution selection menu and transmits the selected analysis signal to the analysis server 20 (S441), and the analysis server 20 examines the received selection signal (S442).

When the survey result selection signal indicates a questionnaire result analysis, the questionnaire analyzer 24 generates an analysis result for each questionnaire item and interview items based on the questionnaire content and the interview content, and generates a questionnaire analysis list ( S443), and stores the analysis result storage unit 35 for each analysis result (S444), and transmits and displays the analysis list to the manager terminal 50 (S445), and the manager terminal 50 displays the analysis result from the manager. When the selection is received and transmitted to the analysis server 20 (S446), the analysis server 20 reads the analysis result selected by the manager terminal 50 from the analysis result storage unit 35 and transmits the analysis result to the manager terminal 50 for display. (S447, S448).

FIG. 13A is a diagram illustrating a result of analyzing a questionnaire about an operational effect of a disaster illustrated in FIG. 12A. The questionnaire analysis unit 24 derives an average value by collecting the results of the responses to the operational impact level of each department or unit task in step S443, and analyzes the result of analyzing the operational impact level due to the disaster of the entire organization. Can be generated.

13B and 13C are diagrams showing the results of analyzing the questionnaire about the financial impact of the disaster shown in FIG. 12B. In the above-described step S443, the questionnaire analyzing unit 24 collects the results of the responses to the financial impact level of each department or unit of work and derives an average value, thereby analyzing the financial impact level due to the disaster of the entire organization. The sum of damages for each item can be added to analyze the cumulative amount of damages expected over time after the disaster of the entire organization.

13D and 13E are diagrams showing the results of analyzing a questionnaire about risk factors for each department illustrated in FIG. 12C. The survey analysis unit 24 may generate an analysis result by charting the answers to the risk analysis questionnaires for each department in step S443 (FIG. 13D), and aggregate the entire organization by averaging the damage rating for each disaster factor answered by each department. It is possible to generate a result of analyzing the damage class by the disaster factors in the dimension (FIG. 13E).

13F and 13G are diagrams showing the results of analyzing a questionnaire on the work impact when the system is paralyzed due to the disaster occurrence shown in FIG. 12D. The questionnaire analysis unit 24 may generate an analysis result of the number of systems corresponding to the target recovery time grade by synthesizing the answers for the target recovery time for each system in step S443 (FIG. 13F) and for the system target recovery time. The response results may be synthesized to generate an analysis result in which the shortest time value is selected among the answers of the target recovery time for each system. In this case, the shortest time value of each department's target recovery time answers for the system becomes the target time value to be recovered when the system is paralyzed.

On the other hand, if the administrator selected DI analysis in step S442, the DI analysis unit 25 executes a series of DI analysis process (S450). Referring to step S450 with reference to FIG. 4C, the DI analyzer 25 first queries the questionnaire data storage 33 and the interview data storage 34 to extract a list of analysis resources, as shown in FIG. 11A. In step S451, the control unit 50 transmits to the manager terminal 50.

As illustrated in FIGS. 11B to 11E, the manager terminal 50 selects an analysis resource of unit work, a system, a department, and a risk and transmits the analysis resource to the analysis server 20 (S452). The selected analysis resource is registered in the analysis result storage unit (S453).

The DI analyzer 25 displays the selected analysis resources on the manager terminal 50 as shown in FIG. 11F (S454), and receives a setting value for the connection relationship between the analysis resources from the manager terminal 50 (S455). ).

The DI analyzing unit 25 executes DI analysis according to the connection relationship setting value between the analysis resources received from the manager terminal 50, stores the analysis result in the analysis result storage unit, and stores the analysis report in the manager terminal 50. Displayed by transmitting to (S456).

So far, the business impact analysis method performed by the analysis server 20 of the present invention has been described. Hereinafter, the business continuity plan design method performed by the plan design server 70 will be described.

14 is a block diagram showing the configuration of the plan design server 70 according to the preferred embodiment of the present invention. Referring to FIG. 14, the plan design server 70 includes a project manager 71, a component manager 72, a plan designer 73, a plan developer 74, a report generator 75, and a transceiver 76. , And a control unit 77.

The project manager 71 of the plan design server 70 receives project-related data, outputs it to the project storage unit 81 of the plan database 80, and registers the project. Specifically, the project management unit 71 registers the outline and schedule of the business continuity plan design, and performs a function of modifying the previously registered project data.

The component manager 72 registers and manages each component used in the business continuity plan design according to a command input from the manager terminal 50.

The plan design unit 73 configures an organization to perform disaster recovery when a disaster situation occurs, registers detailed information of each component registered by the component manager 72, and defines a connection relationship between the components. By creating configuration data, it performs the function of designing business continuity plan for each component.

The plan development unit 74 is based on the components registered by the component management unit 72 and the disaster recovery organization created by the plan design unit 73, the teams belonging to the team group belonging to each stage of the recovery organization, and the corresponding teams. Strategies for restoring interrupted work to employees of the company, recovery tasks that individual teams must perform, team members, emergency contacts between team members, and alternative sites for each team to move and perform work after a crisis. To create the final business continuity plan.

The report generator 75 reads and outputs data about the components stored in the plan database 80 and the business continuity plan data.

The transceiver 76 performs a function of communicating with the user terminals 40 or the manager terminals 50, and the plan design server 70 connects the manager terminal 50 and the user terminals 40 with the Internet. When connected via, the transceiver 76 is implemented as a web server.

The controller 77 controls functions of the project manager 71, the component manager 72, the plan design unit 73, the plan development unit 74, the report generator 75, and the transceiver 76. To perform.

Hereinafter, the configuration of the plan design server 70 will be described in more detail with reference to FIGS. 15A to 15C.

First, as described above, the component manager 72 registers and manages each component used in the business continuity plan design according to the command input from the manager terminal 50. The components used to design a business continuity plan include human resource information (roles and responsibilities), asset information, document information (documents and records), computer resource information, contact information, and reference materials.

15A is a detailed block diagram showing the configuration of the component manager 72 described above. Referring to FIG. 15A, the component manager 72 includes a human resource manager 72-1, an asset manager 72-2, a document manager 72-3, a computer resource manager 72-4, and a contact manager. (72-5).

Human resource management unit 72-1 registers processes and establishes dependencies between processes, registers tasks to be performed by department, division, or individual in case of a disaster, sets dependency between tasks, and registers information on teams to be configured in case of a disaster situation, And register and manage information about employees who will play a role in a disaster situation.

18A to 18D are diagrams for explaining the functions performed by the human resource manager 72-1. Referring to the drawings, the function of the human resource management unit 72-1 will first be described. First, the manager terminal 50 accesses the plan design server 70 and selects a predetermined menu from the main menu displayed on the manager terminal 50. If a value is input, the component manager 72 displays a menu listing the components used for the business continuity plan design as shown in FIG. 18A on the left side of the screen, and the manager terminal 50 displays a role and a menu. When the responsibility menu is selected, the human resource manager 72-1 corresponding to the corresponding menu displays a submenu composed of a process, a task, a team, and an employee menu.

When the manager terminal 50 selects a process menu, the human resource manager 72-1 displays a process list and details of each process as shown in FIG. 18A and analyzes the selection according to the selection of the manager terminal 50. Process data registered by the analysis server 20 may be collectively loaded from the database 30, or new process contents may be registered and modified and output to the planning database 80. In addition, when the manager terminal 50 selects the Dependency setting item, the preceding and subsequent relationship setting menu shown in FIG. 18B is displayed, and the planning database 80 is set by receiving the preceding and following relationship between each process. Print and register or modify existing data.

When the manager terminal 50 selects the task menu, the human resource manager 72-1 registers / manages information on individual tasks that should be performed by department, business unit, and individual when a disaster occurs as shown in FIG. 18C. A page capable of being output is output to the manager terminal 50, and mission data stored in the analysis database 30 is collectively loaded in accordance with the selection of the manager terminal 50, or new according to the input of the manager terminal 50. Register the mission to output to the planning database 80 to register or modify existing data. Further, according to the selection of the manager terminal 50, the preceding and following relationships between the respective tasks may be set in the same manner as shown in FIG. 18B.

When the manager terminal 50 selects the team menu, the human resource manager 72-1 manages a page for modifying information on a team to perform disaster recovery work in the event of a disaster, as shown in FIG. 18D. When displayed on the terminal 50 and the manager terminal 50 selects an employee menu, the human resource manager 72-1 displays a page on which the employee information can be modified on the manager terminal 50, and the manager terminal 50. Receive corresponding information from) and output to the plan database 80 to modify team information and employee information.

Meanwhile, the asset manager 72-2 performs a function of registering and managing assets to be used for disaster recovery. Specifically, assets used for disaster recovery include recovery strategy, information on the place of business to be recovered, information on the machinery and equipment currently used by the organization, information on alternative sites to perform work during disaster recovery, information on equipment and tools used by the organization, and Recovery target service information, and the like.

19A to 19E are diagrams for explaining the function performed by the asset manager 72-2. Referring to the drawings, the function of the asset management unit 72-2 will be described. First, the manager terminal 50 connects to the plan design server 70 and selects a predetermined menu selection value from the main menu displayed on the manager terminal 50. In this case, the component manager 72 displays a menu listing the components used for the business continuity plan design as shown in FIG. 19A on the left side of the screen, and displays the asset menu in the menu on which the manager terminal 50 is displayed. When selected, the corresponding asset management unit 72-2 includes a recovery strategy, information on the place of business to be restored, information on the machines and facilities currently used by the organization, information on alternative sites to perform work at the time of recovery, and equipment and tools used by the organization. The menu indicating the information and the service information to be restored is displayed on the manager terminal 50, respectively.

First, when the manager terminal 50 selects the recovery strategy menu, the asset manager 72-2 displays the asset management page as the manager terminal 50 as shown in FIG. 19A, and inputs the manager terminal 50. According to the situation, the capital and its effects to be released in order to cope with a disaster situation such as an evacuation strategy or a transportation strategy in case of a disaster or to recover from a disaster situation, to modify an existing recovery strategy, and to perform each strategy. Enter the C / B (Cost Benefit) analysis criteria for comparing

When the manager terminal 50 selects a workplace menu, the asset management unit 72-2 corrects the workplaces and addresses of all organizations registered in advance, as shown in FIG. 19B according to the input of the manager terminal 50. Then, commentary and guidance on this are registered in the planning database 80. In addition, when the manager terminal 50 selects the machine and equipment menu, the asset management unit 72-2 according to the input of the manager terminal 50, as shown in FIG. 19C, the machines and equipment currently used in the organization. Assets are registered or modified in the planning database 80.

When the manager terminal 50 selects the alternative site menu, the asset manager 72-2 is unable to proceed with work at the current working place due to a disaster according to the input of the manager terminal 50 as shown in FIG. 19D. In addition, the company registers and manages alternative sites for employees to carry out their work in order to restore core business. In addition, when the manager terminal 50 selects the equipment and tools menu, the asset management unit 72-2 stores the assets of the equipment and tools in use in the organization as shown in FIG. 19E in the planning database 80. The same process is performed when registering and managing, and the manager terminal 50 selects the service menu.

On the other hand, the document management unit 72-3 performs a function of registering and managing important documents and important records used in the work. When the manager terminal 50 selects the document and the recording menu, the document manager 72-3 outputs the important record and document management page as shown in FIG. 20 to the manager terminal 50, and the manager terminal 50. It functions to register and manage important record documents and daily work documents necessary for the work progress according to the input of.

On the other hand, the computer resource management unit 72-4 performs the function of registering and managing computer and communication resources such as telephone, fax, business software, hardware, systems, network-related resources used for the job. When the manager terminal 50 selects a menu for computer resource information, the computer resource manager 72-4 outputs a computer management and communication related resource management page as shown in FIG. 21 to the manager terminal 50, and the manager. In accordance with the input of the terminal 50 registers and manages the computer and communication resources necessary for the progress of the work.

The contact management unit 72-5 registers and manages contact information used for work and emergency contact information for emergency. When the manager terminal 50 selects a menu for contact information, the contact manager 72-5 outputs a contact resource management page related to the organization as shown in FIG. 22A to the manager terminal 50, and displays the manager terminal ( In addition to registering and managing the contacts of vendors, customers, and related organizations related to the organization in accordance with the input of 50), it also defines emergency contacts to be used in the event of a disaster as shown in FIG. 22B. Perform the correct function.

The function of the component manager 72 has been described so far. Hereinafter, the configuration and function of the plan design unit 73 of the plan design server 70 will be described in detail.

FIG. 15B is a detailed block diagram showing the configuration of the plan design section 73 in detail, and FIGS. 23A to 23G are diagrams exemplarily showing the functions of the plan design section 73. As described above, the plan design unit 73 configures an organization to perform disaster recovery in the event of a disaster situation, registers detailed information of each component registered by the component manager 72, and interconnects relationships between the components. By generating connection relationship setting data defining the registration to the plan database 80, to perform the function of designing a business continuity plan for each component.

The plan design unit 73 according to a preferred embodiment of the present invention designs an organization to perform work recovery in a disaster situation by dividing it into four layers of business sites, recovery steps, team groups, and teams. The recovery phases to be performed at each site are divided into three phases: emergency response, recovery, and routine recovery.The team group to perform each recovery phase is assigned to the command center, core operations, and disasters. The disaster recovery organizational structure is created by assigning and assigning five team groups of tasks, IT tasks, and daily tasks, and defining the teams that will belong to these team groups.

In addition, the plan design unit 73 according to a preferred embodiment of the present invention defines a connection relationship between resources in preparation for a disaster situation, these resources are resources that teams or individuals need to perform each recovery mission, Defining the linkage information between resources is very important for the detail of recovery task.

For example, suppose that a disaster occurs and S software essential to business performance is lost, and it is necessary to restore S software to resume work. For this purpose, it is necessary to repurchase the missing S software. If information about vendors that can be made is not pre-registered, considerable time will be spent investigating and repurchasing vendors who can repurchase S software.

Therefore, in the present invention, if a task recovery task (resource 1) is assigned to a department A within the business continuity plan, and a S software (resource 2) is to be used to perform such a task, the task of restoring a department A is a necessary resource. The S software must contain information about the S software, and the S software resources must be linked to the vendor's information (resources 3). To this end, the plan design unit 73 defines and registers a connection relationship between each component in advance in order to perform a quick recovery task in the event of a disaster.

Referring to FIG. 15B, the plan design unit 73 includes a structural design unit 73-1, an organization design unit 73-2, a process analysis unit 73-3, a resource design unit 73-4, and a strategic design unit 73. -5).

Based on the organizations registered in advance, the structural design unit 73-1 generates a basic framework constituting a business continuity plan, that is, an emergency organization structure to be operated as an emergency in the event of a disaster. Specifically, as shown in FIG. 23A, the structural design unit 73-1 configures an organizational structure in which the business continuity plan is to be performed in order of four levels of a workplace, a recovery stage, a team group, and a team, The upper layer includes the lower layer.

First, the structural design unit 73-1 sequentially displays a list of pre-registered workplaces on the manager terminal 50, and displays three types of emergency response, core task recovery, and routine task recovery. The recovery stage consisting of the steps is displayed on the manager terminal 50, and the teams operated in an emergency are divided into four team groups of the command center, the core task, the disaster task, and the IT task, and each team list is displayed. do.

Thereafter, the structural design unit 73-1 selects a workplace according to the input of the manager terminal 50, and displays the selected workplace in a tree form on the right side. Then, select the recovery step for the workplace and display it as a subtree of the workplace, select each team group and team to perform each recovery step as the subtree, and when the structural design is completed, the structural design data To register by outputting to the planning database (80).

Meanwhile, as shown in FIG. 23B, the organization design unit 73-2 registers and organizes an organization chart composed of teams registered in advance in a tree form through the component manager 72 according to the command of the manager terminal 50. It provides a function that can be managed. The organization chart that can be created by the organization design unit 73-2 may be an organization chart that subdivided the emergency organization structure created by the structure design unit 73-1, or the plan is generated later, although the business continuity plan has not been assigned so far. It may be an organization chart for teams that are scheduled to be.

As shown in FIG. 23C, the process analyzing unit 73-3 defines detailed information about the business process in the organization according to the input of the manager terminal 50, and connects the previously registered process with the above-described components. do. Referring to FIG. 23C, the process analyzing unit 73-3 displays a list of currently registered processes on the top of the screen of the manager terminal 50, and displays pre-registered components that can be connected to these processes. It is displayed in the form of a tab dialog at the bottom. When a specific resource group is selected in the tab dialog box by the manager terminal 50, a list of resources currently registered is displayed, and the manager terminal 50 stores the selected resource in association with the selected process to perform the process. Register the necessary components in advance.

23D to 23F are diagrams exemplarily illustrating the function of the resource design unit 73-4. As illustrated, the resource design unit 73-4 performs detailed definition of resources existing in the organization according to the input of the manager terminal 50, and establishes an interconnection relationship between resources as in process analysis. Design a business continuity plan for each resource.

For example, as shown in FIG. 23D, in the case of a workplace among asset items, when a disaster situation occurs, workplace work may be connected to an alternative site to be moved and performed, and in the case of a machine and facility resource as shown in FIG. 23E, Disruption of a facility due to a disaster situation will result in contact information of the vendor who will supply the new facility, a (transportation) strategy to move facility resources to another location quickly, and to operate and repair or transport the machinery and equipment in the event of a disaster. There may be a link between the team organization and the place of business where the machines and facilities are installed.

The resource design unit 73-4 interconnects other resources that are components in the same manner as described above. For example, alternate site resources can be set up to interconnect with resources such as teams, businesses, vendors, strategies, equipment and tools resources, and service resources can be interconnected with vendors and strategic resources, and vendor contact resources can be from those vendors. It can be connected to equipment and tool resources, machinery and equipment resources, computing resources, etc. to purchase.

As shown in FIG. 23G, the strategy design unit 73-5 registers the strategies registered by the asset management unit 72-2 in the human resource manager 72-1 according to the input value of the manager terminal 50. And by connecting with teams, it defines a strategy to accomplish the mission and a team to carry out that strategy.

The structure and function of the plan design part 73 of the plan design server 70 were demonstrated so far. Hereinafter, the structure and function of the plan development part 74 of the plan design server 70 are demonstrated.

As described above, the plan development unit 74 belongs to a team group belonging to each step of the recovery organization based on the components registered in the component management unit 72 and the disaster recovery organization created in the plan design unit 73. Strategy for restoring interrupted work, remedial tasks that individual teams must perform, team members, emergency contacts between team members, and each team to move on after a crisis. Create a final business continuity plan by assigning alternate sites to perform.

15C is a detailed block diagram showing the configuration of the plan development unit 74, and FIGS. 24A to 24C are diagrams exemplarily showing the functions of the plan development unit 74. As shown in FIG. Referring to FIG. 15C, the plan development unit 74 includes a team plan development unit 74-1, a mission plan development unit 74-2, a team member plan development unit 74-3, and an emergency contact network development unit 74-4. do.

According to the input value of the manager terminal 50, the team plan development unit 74-1 assigns a task and a strategy to each team registered in advance, or defines an alternative site for the team to perform a task in a disaster situation. Or, create a call tree of the team. FIG. 24A illustrates an example in which the team plan development unit 74-1 sets a task to be performed by a selected team according to an input value of the manager terminal 50.

The mission plan development unit 74-2 performs a function of generating a business continuity plan in units of missions according to an input value of the manager terminal 50. As shown in FIG. 24B, the task plan development unit 74-2 receives a task registered in advance from the manager terminal 50, and selects a corresponding task according to the selection of the manager terminal 50. Assign to a resource.

According to the input of the manager terminal 50, the team member plan development unit 74-3 generates a business continuity plan by assigning selected team members to predetermined processes, tasks, teams, and emergency contact networks, as shown in FIG. 24C. Perform the function.

The emergency contact network development unit 74-4 receives an emergency contact network from a list of emergency contact networks registered in advance from the manager terminal 50, and transmits the manager terminal 50 to the team in which the emergency contact network is defined and the employees in the emergency contact network. Assign the selected emergency contact network.

As described above, the plan development unit 74 outputs the finally generated business continuity plan data to the plan database 80 to register the final business continuity plan data, or corrects the previously registered business continuity plan data.

Meanwhile, the report generation unit 75 of the plan design server 70 reads the plan design data and the final business continuity plan data for each component stored in association with each other in the plan database 80, and by each business site. The business continuity plan for each team and for each individual is extracted and output to the manager terminal 50 and the user terminal according to a predetermined form.

The structure of the plan design server 70 was demonstrated so far. Hereinafter, the configuration of the planning database 80 will be described with reference to FIG. 16, which is a block showing the configuration of the planning database 80 according to the preferred embodiment of the present invention. Referring to FIG. 16, the plan database 80 includes a project storage unit 81, a component storage unit 82, a design data storage unit 83, and a development data storage unit 84.

The project storage unit 81 performs a function of storing the project information input from the project management unit 71 described above.

The component storage unit 82 stores human resource information, asset information, document information, computer resource information, contact information, and other reference information registered by the component manager 72.

The human resource information stored in the component storage unit 82 includes process information, mission information, team information, and employee information, and asset information includes strategy information, business site information, machine and facility information, alternative site information, equipment and Tool information, and service information.

In addition, the document information includes important record information and general document information, and the computational resource information includes communication information, hardware information, software information, system information, and network information, and the contact information includes vendor contact information, customer contact information, Relevant contact information, and Call Tree information.

On the other hand, the design data storage unit 83 stores the basic organizational structure data of the business continuity plan registered in the plan design unit 73 and the plan data for each component.

The development data storage unit 84 stores business continuity plan data generated by the plan development unit 74 based on the organizational structure and components stored in the design data storage unit 83. So far, the configuration and function of the analysis server which is a business continuity plan design apparatus according to the preferred embodiment of the present invention have been described.

17 is a flowchart illustrating a process of designing a business continuity plan in the plan design server 70 according to the preferred embodiment of the present invention. Hereinafter, a process of designing a business continuity plan will be described with reference to FIG. 17. However, the functions performed in the design process of the business continuity plan have been described in connection with the business continuity plan design apparatus, and thus detailed description thereof will be omitted.

First, the plan design server 70 reads data used in the business continuity plan design among the data collected in the business impact analysis from the above-described analysis database 30 and stores it in the plan database 80 (S1710). . At this time, the data read from the analysis database 30 to the plan design server 70 are items that are essential to the plan development unit 74 to develop a recovery plan. Computational resources including equipment and tools, system resources, documentation resources, manpower information needed for work progress, and target recovery time data to restore work. However, the plan design server 70 may collectively read necessary data from the analysis database 30 and store the data in the plan database 80, and may store necessary data for each component module therein in the analysis database 30. It can also be read from. An example of data read from the analysis database 30 to the planning design server 70 is shown in FIG. 25.

On the other hand, when the manager terminal 50 is connected to the plan design server 70 through the above-described communication network (S1720), the plan design server 70 transmits the basic management page to the manager terminal 50 (S1722), the manager The terminal 50 displays the received management page to the administrator (S1724).

The manager first inputs a project name, a project content, and a project progress schedule for establishing a business continuity plan through the manager terminal 50 and transmits it to the plan design server 70 (S1730).

The project manager 71 of the plan design server 70 receives the received project-related data, outputs it to the project storage unit 81 of the plan database 80, and registers the project (S1732).

On the other hand, after the project is registered, the plan design server 70 to the manager terminal 50 a page that can register each of the above-described components used in the business continuity plan design according to the selection of the manager terminal 50 In operation S1740, the manager terminal 50 clicks a selection menu corresponding to each component on the displayed page, inputs data of the corresponding component, and transmits the data to the plan design server 70 in operation S1744.

The component manager 72 of the plan design server 70 outputs component data received from the manager terminal 50 to the component storage unit 82 of the plan database 80 to register the components (S1748). ).

Hereinafter, steps S1740 and S1748 will be described in detail.

First, the manager terminal 50 selects a menu corresponding to human resource information among components, selects a process menu as a submenu, inputs new process content data, and processes other processes that are in a preceding or subsequent relationship with the corresponding process. Set the dependency between the transmission to the plan design server 70. In the same way, the manager terminal 50 inputs detailed content data about tasks to be performed by each business unit, each team, and each task in the event of a disaster in the business continuity plan, and sets a dependency between each task to design the design server. Transfer to 70. In addition, the manager terminal 50 inputs additional information about each team organization and each employee registered in advance, and transmits it to the plan design server 70. The component manager 72 of the plan design server 70, in particular, the human resource manager 72-1 outputs and registers the received human resource related data to the component storage 82 of the plan database 80. Or modify existing data.

Meanwhile, the manager terminal 50 selects a menu corresponding to asset information among the components, and selects a strategy menu as a sub-menu to perform main activities (eg, transportation, evacuation, etc.) that should be performed when a disaster occurs. Various methods are input, and criteria for calculating the cost effectiveness for each method are input and transmitted to the planning design server 70. In addition, the manager terminal 50 inputs additional information on pre-registered business information, and inputs information on machines and facilities, equipment and tools used in the organization, services performed in the organization, and the like. 70), and if the work is not able to proceed in the current workplace due to the occurrence of the disaster, employees enter the information about the alternative site to move to perform the work to recover the core work to transmit to the plan design server 70 . The asset management unit 72-2 of the plan design server 70 outputs the received asset related data to the component storage unit 82 of the plan database 80 to register new asset data or to store existing data. Modify with new data.

Meanwhile, the manager terminal 50 selects a menu corresponding to document information among the components, and transmits data about important records and general documents necessary for the work progress to the planning design server 70, and the planning design server. 70 outputs and registers the received document-related data to the component storage unit 82 of the planning database 80 or modifies existing data.

On the other hand, the manager terminal 50 selects a menu corresponding to the computational resources among the components and inputs the information on the computational resources used in the progress of the work to transmit to the plan design server 70. As described above, computer resources include hardware resources such as computers, notebooks, and printers, software resources such as various computer programs used for work, communication resources such as telephone fax, various system resources installed in an organization, and LAN cables, modems, and the like. Contains network resources. The computational resource management unit 72-4 of the plan design server 70 outputs the received computational resource data to the component storage unit 82 to newly register the computational resource data or modify the conventional data.

Meanwhile, the manager terminal 50 selects a menu corresponding to a contact resource among the components, inputs contact information of vendor companies, customers, and related organizations related to the organization, and transmits the contact information to the plan design server 70, and the plan design. The contact manager 72-5 of the server 70 outputs the received contact information to the component storage 82 and registers or modifies existing contact information.

In addition, as shown in FIG. 22B, when the manager terminal 50 selects the emergency contact network registration menu, the contact manager 72-5 displays the personnel data of the personnel database 10 or the analysis database 10. The organization member list is read from the storage unit and transmitted to the manager terminal 50 for display, and the manager terminal 50 selects the received member list for each team or business site to generate emergency contact network data and to the plan design server 70. In addition, the contact management unit 72-5 of the plan design server 70 outputs the received emergency contact network data to the component storage unit 82 to register new emergency contact network data or modify existing emergency contact network data.

Meanwhile, when the components are registered by performing steps S1740 to S1748 as described above, the plan design unit 73 transmits the business continuity plan design page as shown in FIG. 23A to the manager terminal 50 ( In operation S1750, the manager terminal 50 displays the received plan design page, receives the organization structure data and the plan data for each component from the manager, and transmits the received plan design page to the plan design server 70 (S1752).

The plan design server 70 generates organization structure design data to perform a business continuity plan by using the data received from the manager terminal 50, outputs it to the plan database 80, and registers it (S1754). Each component Set the connection relationship between the generated business continuity plan data for each component, and outputs and registers to the design data storage unit 83 (S1756).

A detailed description of the step S1750 and the step S1756 is as follows.

First, when the manager terminal 50 selects the structural design menu from the plan design data input page, a menu is displayed to sequentially select a workplace, a disaster recovery step, a team group, and a team as shown in FIG. 23A. The manager terminal 50 inputs the basic organizational structure of the business continuity plan by sequentially selecting each one, and the manager terminal 50 transmits the input organizational structure data to the plan design server 70.

The plan design unit 73 of the plan design server 70 that has received the organization structure data, specifically, the structure design unit 73-1 of the plan design unit 73 uses the organization structure data received from the manager terminal 50. The organization structure design data representing the organization structure to perform the business continuity plan is generated, and the generated organization structure design data is output to the design data storage unit 83 to newly register the organization structure design data or to design the existing organization structure. Modify the data.

As described above, the organization structure of the present invention is composed of four hierarchies of a business place, a restoration stage, a team group, and a team, and the selected items are displayed in a tree form on the right when selecting items for each hierarchy. Since the method of designing the organizational structure has been described above, a detailed description thereof will be omitted.

On the other hand, when the manager terminal 50 selects the organization configuration menu on the plan design data input page, as shown in FIG. 23B, the teams registered in advance through the component manager 72 are output on the screen. The manager terminal 50 uses these organizations to organize the emergency organization structure generated by the structural design unit 73-1, or teams that have not been assigned a business continuity plan so far but are to be created later. Configure the organization chart for and transmits to the plan design server (70). The organization design unit 73-2 of the plan design server 70 generates organization design data using the data received from the manager terminal 50, and outputs the generated organization design data to the design data storage unit 83. Register or modify existing organization design data.

On the other hand, if the manager terminal 50 selects the process analysis menu in the plan design data input page, as shown in FIG. 23C described above, the manager terminal 50 is associated with each process registered in the component manager 72. The connection relationship between the human resources to perform the process and the physical resources such as machines, tools, and systems used to perform the process is set and transmitted to the plan design server 70. The process analysis unit 73-3 of the plan design server 70 sets a connection relationship between the corresponding process and components received from the manager terminal 50 to generate process analysis data, and stores the process analysis data in the design data. The output to unit 83 registers new process analysis data or modifies existing process analysis data.

In addition, when the manager terminal 50 selects the resource design menu on the plan design data input page, as described with reference to FIGS. 23D to 23F, the manager terminal 50 may use the component storage unit ( 82 sets the connection relationship between each component registered in the 82 and transmits to the planning design server 70, the resource design unit 73-4 of the planning design server 70 is the configuration data received from the manager terminal 50 According to the present invention, resource design data indicating detailed information of resources and connection relations between the resources are generated, and the resource design data is output to the design data storage unit 83 to newly register the resource design data or to modify the existing resource design data. do.

In addition, when the manager terminal 50 selects the strategy design menu, as described above with reference to FIG. 23G, to execute the strategy registered in the component storage unit 82 and the corresponding strategy in the same manner as the resource design method. The strategic data connecting the teams, which are the tasks to be performed and the human resources to execute the strategy, is transmitted to the planning server 70, and the strategy design unit 73-5 of the planning server 70 transfers the received strategy data. By using the generated strategic design data to interconnect the strategy and human resources and missions to output to the design data storage unit 83, register the new strategic design data, or modify the existing strategic design data.

On the other hand, if the organizational structure to perform the business continuity plan and the business continuity plan for each component is designed through the above-described process, the plan development unit 74 is a manager terminal 50, the business continuity as shown in Figure 24a After transmitting the plan development page (S1760), the manager terminal 50 displays the received plan development page, and when a disaster situation occurs to each team and team members based on the components registered in the plan database 80 Assign the task to be performed in the transmission to the planning design server 70 (S1764), the planning design server 70 generates the final business continuity planning data using the data received from the manager terminal 50, the final The business continuity plan data is output to the design data storage 83 and registered (S1768).

Hereinafter, steps S1760 and S1768 will be described in detail.

First, when the manager terminal 50 selects the team menu on the business continuity plan development page, the plan development unit 74 transmits a list of teams registered as components to the manager terminal 50, as shown in FIG. 24A. And the resource group (mission / employee / strategy / alternative site / emergency network) that can be assigned to each team, and the manager terminal 50 selects the team name and the resource to be assigned to the team and design the planning server. When transmitting to 70, the plan development unit 74 of the plan design server 70 allocates the selected resources to the team selected by the manager terminal 50, generates final business continuity plan data for the team, and plans this. The data is output to the development data storage unit 84 of the database 80 and registered.

In addition, when the manager terminal 50 selects the task menu, the plan development unit 74 transmits and displays a task list registered as a component to the manager terminal 50, as shown in FIG. 24B, and displays each task. Resource groups (processes / teams / employees / strategies / machines and facilities / alternative sites / equipment and tools / services / important records / general documents / communications / software / hardware / systems / networks / vendors / customers / related agencies / Call Tree) list, and if the manager terminal 50 selects the task and resources to assign the assignment to the plan design server 70, the plan development unit 74 of the plan design server 70 is a manager terminal ( 50 assigns the selected resource to the selected task, generates final business continuity plan data for the task, outputs it to the development data storage 84 of the plan database 80, and registers it.

In addition, when the manager terminal 50 selects the team member menu, the plan development unit 74 transmits and displays a list of team members registered as components to the manager terminal 50, as shown in FIG. 24C, and displays each team member. Displays a list of resource groups (processes / missions / teams / emergency networks) to be assigned to, and when the manager terminal 50 selects the resources to be assigned to team members and team members and transmits them to the planning design server 70, the planning design server ( The plan development unit 74 of 70) allocates the selected resources to the team members selected by the manager terminal 50 to generate the final business continuity plan data for the team members, and the development data storage unit of the plan database 80 ( 84) to register.

In addition, the manager terminal 50 generates the final business continuity plan data for the emergency network by performing the same method as described above for the emergency network menu, and the development data storage unit 84 of the plan database 80 Print it out and register it.

On the other hand, when the manager terminal 50 selects the report management menu as shown in FIG. 26A, the report generator 75 displays each component, each team, and each team member as shown in FIGS. 26B and 26C. Each business continuity plan report is generated and transmitted to the manager terminal 50 (S1770), and the manager terminal 50 outputs the received report (S1775).

The business continuity plan design apparatus and method according to the preferred embodiment of the present invention have been described so far.

The method and system for analyzing business impact due to disasters according to the preferred embodiment of the present invention, and the method and system for designing a business continuity plan using the analysis results have been described. Those skilled in the art will appreciate that various modifications can be made within the scope of the technical idea of the present invention. For example, in the above-described disaster impact business impact analysis method according to a preferred embodiment of the present invention, the interview process is performed after the questionnaire process for registering the questionnaire contents, the questionnaire subjects, and the questionnaire and sending the questionnaire e-mail is performed. Although the survey process and the interview process are independently executed by the survey management unit 22 and the interview management unit 23, the interview process may be performed before the survey process, and the survey process and the interview process may be performed. The investigation process may be performed at the same time.

In addition, although the above-described process of registering the components is described as sequentially registering human resource information, asset information, document information, computational resource information, contact information, and the like, the order of registering each component may be changed. Those skilled in the art will appreciate that the In addition, the design sequences performed in creating the organizational structure, designing the business continuity plan for each component, and designing the final business continuity plan include a plurality of processes as in the component registration process, but these orders are changed from each other. It will be appreciated by those skilled in the art that

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, which are also implemented in the form of a carrier wave (for example, transmission over the Internet). It also includes. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

As described above, the present invention provides a risk of causing a disaster through surveys and interviews in advance, and investigating disasters that may occur in the company in advance, and based on the survey contents and the interview contents surveyed about the disasters. By analyzing the degree of operational damage and financial damage by each department or unit task that may be caused by factors and risk factors, and analyzing the damage degree of the entire organization based on the analysis results by department or unit task. In addition, by identifying critical departments, critical resources, and critical systems within a company prior to a disaster, identifying those departments, resources, and systems that are vulnerable to disasters within a company can help to prepare effective countermeasures against disasters. have.

In addition, the present invention registers important resources, critical systems, and the like identified through business impact analysis as components, and establishes a business continuity plan for restoration of the components and restoration of the entire organization in advance in case of a disaster, In the event of a disaster situation, there is an effect that can be more quickly and efficiently disaster recovery.

Claims (17)

As a method of designing a business continuity plan in a business continuity plan design system including a plan design server, a plan database, a personnel database, and a manager terminal, (a) the organization's critical business processes used by the plan design server for business continuity planning, human resources (roles and responsibilities) to perform the process, asset information, document information, and computational resource information used to perform the business process; Receiving detailed information of components, including contact information, and registering the contact information in the planning database; (b) receiving, from the administrator terminal, setting information (organization structure data) for the organizational structure on which the plan design server is to carry out the business continuity plan, and setting information for setting a connection relationship between the components, and receiving the business continuity. Designing organizational structure to carry out the plan to generate organizational structure design data, and in the event of a disaster to generate connection relationship setting data representing the connection relationship between the components necessary to carry out the business continuity plan to register in the planning database step; And (c) the plan design server assigns repair tasks of the components to teams and team members included in the organizational structure according to the connection relationship of the components to generate business continuity plan design data, and generate the business continuity plan design. And registering data in the planning database. The method of claim 1, wherein step (b) And generating said organizational structure design data sequentially comprising a business hierarchy, a recovery hierarchy, a team group hierarchy, and a team hierarchy such that an upper hierarchy comprises a lower hierarchy. The method of claim 2, The recovery phase hierarchy includes an emergency response step, a core business recovery step, and a routine business recovery step. The method of claim 2, The team group hierarchy includes a command group, a core work group, a daily work group, and an IT work group, and the plan design server assigns teams in the organization to any one of the groups with reference to the personnel database. A business continuity plan design method characterized by designing a structure. The method of claim 2, wherein step (c) To each team in the team group hierarchy, a strategy for recovering interrupted work, a mission to perform disaster recovery, team member information, emergency contact information between team members, and a team move after a disaster situation occurs. Business continuity plan design method comprising allocating alternative site information to perform work. delete The method of claim 1, The business continuity plan design system further includes an analysis database storing important human resource information, asset information, document information, computational resource information, and contact information of the organization previously investigated, In step (a), the human resource information, asset information, document information, computer resource information, and contact information are read from the analysis database and registered as a component of a business continuity plan. . A recording medium having a computer readable method executable program code, wherein the business continuity plan design method according to any one of claims 1 to 5 and 7 can be read by a computer. A business continuity plan design system comprising a plan design server, a plan database, a personnel database, and a manager terminal, The plan design server Important business processes of the organization used for business continuity planning, human resource information (roles and responsibilities) to perform the process, asset information, document information, computational resource information, and contact information used to perform the business process. A component manager which receives detailed information of components and registers them in the planning database; Receive configuration information (organization structure data) for the organizational structure for performing the business continuity plan, and setting information for setting the connection relationship between the components from the administrator terminal to indicate the organizational structure for performing the business continuity plan A plan design unit which generates organization structure design data, generates connection relationship setting data representing connection relationships between the components necessary for executing a business continuity plan in the event of a disaster, and registers them in the plan database; And Allocate the recovery tasks of the components to teams and team members included in the organizational structure to generate business continuity plan design data, and register the business continuity plan design data in the plan database. A business continuity plan design system comprising a plan development unit. The plan design unit of claim 9, wherein the plan design unit Generating said organizational structure design data sequentially comprising a business hierarchy, a recovery hierarchy, a team group hierarchy, and a team hierarchy such that an upper hierarchy comprises a lower hierarchy. The method of claim 10, The recovery phase hierarchy is a business continuity plan design system comprising an emergency response phase, a core task recovery phase, and a routine task recovery phase. The method of claim 10, The team group hierarchy includes a command group, a core work group, a daily work group, and an IT business group, And the plan design unit designing an organizational structure by assigning teams in the organization to any one of the groups with reference to the personnel database. The method of claim 12, wherein the plan development unit For each team belonging to the team group, a strategy for recovering interrupted work, a mission to perform disaster recovery, team member information, emergency contact information between team members, and a team move after a disaster situation occurs. A business continuity plan design system characterized by allocating alternate site information to perform a task. delete The method of claim 9, The business continuity plan design system further includes an analysis database storing important human resource information, asset information, document information, computational resource information, and contact information of the organization previously investigated, The component management unit reads the human resource information, asset information, document information, computing resource information, and contact information from the analysis database and registers them as components of a business continuity plan. . The plan design unit of claim 9, wherein the plan design unit A structural design unit which creates an emergency organization structure to be operated as an emergency when a disaster occurs; A process analysis unit defining detailed information on a business process in an organization and setting a connection relationship between a previously registered process and the components; A resource design unit which performs detailed definitions of resources existing in an organization and establishes an interconnection relationship between the resources; And A business continuity plan design comprising a strategy defining a method for carrying out the main activities to be carried out for disaster recovery, and a strategy design unit for establishing a mission for performing the strategy and a team for performing the task. system. The method of claim 9, wherein the plan development unit A team plan development unit for assigning each of the pre-registered teams a task and strategy to be performed in the event of a disaster, assigning an alternative site for the team to perform a task in the event of a disaster, and creating an emergency contact network for the team; Task planning development to assign teams and team members a task to be performed in the event of a disaster; Team Member Plan Development, which assigns team members from the organization to processes, missions, teams, and emergency contacts; And A business continuity plan design system comprising an emergency contact network development unit for assigning a pre-registered emergency contact network to the team and team members.

Images