Desarrollo del plan de continuidad de negocio de acuerdo a los estándares vigentes, para el data center de la carrera de computación, de la Universidad Politécnica Salesiana, Sede Quito

Abstract

Development of a business continuity plan (BCP) in accordance with ISO 22301, COBIT and ITIL standards, focused on the Data Center of the Computing degree at the Salesiana Polytechnic University. The BCP includes a business impact analysis (BIA) that details the incidents that occurred from period 54 to 63, evaluating risks, vulnerabilities and logical, physical and human factor threats using a mathematically calculated criticality scale. This evaluation facilitates the assessment of critical assets and the determination of recovery time objective (RTO) and recovery point objective (RPO), thus ensuring preparation for possible incidents. Within the plan, the specific roles and responsibilities of each member of the Data Center are recognized and documented, structuring the functions necessary for the effective execution of the plan. This includes assigning tasks according to the RACI methodology, ensuring equitable distribution of responsibilities and ensuring coordination during incidents. Additionally, a regular maintenance program is established for the BCP, DRP and CP plans, in order to identify and correct areas that may require adjustments or improvements, to strengthen the resilience of the Data Center, also optimizes the response to incidents, minimizing thus the operational impact and availability of virtualization and storage services.