Seminar Objective

The methods used to establish IT Disaster recovery plans has changed over the last few years through the evolution of new backup strategies and the need to have instantaneous recovery capabilities.  The migration of organizations production IT hosted environments to the hyperscale cloud environments has also necessitated a change to the approach for designing disaster recovery strategies.  In addition, with further data interchange occurring between organization hosted systems and third party service provider hosted systems, the vendor management program requires significant enhancements to address service commitment and methods to address IT processing during a disaster incident.

This seminar will provide attendees with:

• An understanding of key technologies and approaches used to establish disaster recovery and business continuity plans.
• A foundation for developing an effective process to audit disaster recovery and business continuity plans and to ensure effective testing occurs for these plans.

Seminar Outline

I.   Introduction

• What is a Business Continuity Plan?
• What is Disaster Recovery Plan?
• What have been the traditional types of audits performed which cover Business Continuity and Disaster Recovery

II. Business Impact Analysis (BIA)

• Understanding Recovery Point Objects and Recovery Time Objectives and how they are used to validate backup and recovery strategies
• Alternative methods for establishing the BIA
• Integration with 3rd party service providers
• Approaches to auditing the BIA

III. Risk Assessment

• Alternative methods for establishing the Risk Assessment
• Approaches to auditing the Risk Assessment

IV. Backup Strategies

• Alternative methods for data backups
  • Backup
  • Replication
  • Clustering
• Approaches to auditing the data backups

V. Business Continuity/Disaster Recovery Plans

• Understanding the different types of Business Continuity strategies
  • OnPremises hosted systems
  • Multi-site strategies
  • Hyperscale cloud environments
• Purpose of the Plans
• Alternative methods used within the Industry
• Administrative component of the Plan
• Business level plan development and deployment
• BCP for Pandemics and complete offsite workplace business processing 
• IT Plan components
  • Onsite Disaster Recovery
  • Migration to the offsite DR site
  • Operating at the DR Site
  • Return from DR site to the production site
• Training
• Approaches to auditing the Business Continuity/Disaster Recovery Plans

VI. Integration with 3rd Party Vendors managed systems

• Service commitments
• Assessment of integration requirements related to Disaster Recovery and Business Continuity

VII. Disaster Recovery/Business Continuity Testing

• Alternative methods to conducting Disaster Recovery/Business Continuity Tests
• Approaches to auditing the Disaster Recovery/Business Continuity Testing

Case Studies

Two case studies will be presented during this seminar which will provide the attendees an understanding of how to audit the Business Continuity strategy, Offsite Disaster Recovery Testing and evaluating backup strategies to ensure they meet RPOs & RTOs. 

Details

Two-day Seminar Length

8:30 am - 5:00 pm daily

7.5 hours of presentation time, plus (1) hour for lunch and
(4)-10 minute breaks each day determined by the instructor

Cost

ISACA Members: $200/ Non-Members: $425
Become a member of ISACA and take advantage of great member pricing!

Who Should Attend?

This seminar is designed for IT, Integrated and Operational Auditors at all levels.

Continuing Professional Education Credits (CPEs)

The seminar is structured to allow ISACA and IIA chapters to issue up to 15 CPEs (7.5 per day).

Registration closes at 5 pm on Friday, September 26, at 5:00 PM.

Instructor

Mitchell Levine is the founder of Audit Serve, Inc. which is an IT Audit & Systems consulting company.   For the last 31 years at Audit Serve, Mitch has split his time between traditional IT & Integrated Audit consulting projects, implementing solutions for the latest data privacy regulations, Developing Disaster Recovery Plans and performing pre & post-implementation reviews of system migrations.  Mitch spends 220+ days per year consulting which is the basis for the material which is included in the seminars.

Over the past twelve years Mitch has presented over 115 seminars to 25 different ISACA & IIA chapters.  Mitch also is the primary writer and editor of Audit Vision which is published bi-monthly and has a subscription base of over 3,500 audit & security professionals.  Prior to establishing Audit Serve in 1990, Mr. Levine was an IT Audit Manager at Citicorp where his duties included managing a team of IT Auditors who were responsible for auditing 25+ service bureaus and the corporate financial systems. 

Mitchell H. Levine, CISA, is the founder of Audit Serve, Inc. which is an IT Audit & Systems consulting company.   For the last 31 years at Audit Serve, Mr. Levine has split his time between traditional IT & Integrated Audit consulting projects, PCI Implementations, and Infrastructure project such as deploying change control systems and developing Disaster Recovery Plans.

Mr. Levine spends 220+ days per year consulting which is the basis for the materials included in the seminars he teaches.

Over the past six years Mr. Levine has presented over 60 seminars to eighteen different ISACA & IIA chapters.  Mr. Levine also was the primary writer and editor of Audit Vision which is published monthly and has a subscription base of over 3,500 audit & security professionals.

Prior to establishing Audit Serve, Inc. in 1990, Mr. Levine was an IT Audit Manager at Citicorp where his duties included managing a team of IT Auditors who were responsible for auditing 25+ service bureaus and the corporate financial systems.

WHEN

WHERE

Virtual Event - Zoom link will be shared upon registration confirmation

PLANNER

Chapter Administrator

isaca.detroit.chapter@gmail.com

THE EVENT STARTS IN