2 cissp ® Official Study Guide Eighth Edition

 Physically Hardening Systems
You can protect systems against the risks by introducing pro-
tective measures such as computer-safe fi re suppression systems and uninterruptible power 
supplies.

---

114
Chapter 3 
■
Business Continuity Planning
 Alternative Systems
You can also protect business functions by introducing redundancy 
(either redundant components or completely redundant systems/communications links that 
rely on different facilities).
These same principles apply to whatever infrastructure components serve your critical 
business processes—transportation systems, electrical power grids, banking and fi nancial 
systems, water supplies, and so on.
Plan Approval and Implementation 
Once the BCP team completes the design phase of the BCP document, it’s time to gain 
top-level management endorsement of the plan. If you were fortunate enough to have senior 
management involvement throughout the development phases of the plan, this should be a 
relatively straightforward process. On the other hand, if this is your fi rst time approaching 
management with the BCP document, you should be prepared to provide a lengthy explana-
tion of the plan’s purpose and specifi c provisions. 
Senior management approval and buy-in is essential to the success of the 
overall BCP effort.
Plan Approval 
If possible, you should attempt to have the plan endorsed by the top executive in your 
business—the chief executive offi cer, chairperson, president, or similar business leader. This 
move demonstrates the importance of the plan to the entire organization and showcases the 
business leader’s commitment to business continuity. The signature of such an individual on 
the plan also gives it much greater weight and credibility in the eyes of other senior manag-
ers, who might otherwise brush it off as a necessary but trivial IT initiative.