Check List

Information security aspects of business continuity management and Press media handling and availability

Purpose

To counteract interruptions to business activities and to protect critical business processes from the effects of major failures of information systems or disasters and to ensure their timely resumption

Audit resources

Procedure

Verification

Document

Business Continuity Plan, Press Media and personnel handling, Shareholder or Board approval

Product

Detailed study list and method

-    Check if a managed process is developed and maintained for business continuity throughout the lottery organization that addresses the information security requirements needed for the organization’s business continuity.

-    Check if events cause interruptions to business processes are identified, along with the probability and impact of such interruptions and their consequences for information security.

-    Check if issuing plans are developed and implemented to maintain or restore operations and ensure availability of information at the required level and in the required time scales following interruption to, or failure of, critical business processes.

-    Check if a single framework of business continuity plans is maintained to ensure all plans are consistent, to consistently address information security requirements, and to identify priorities for testing and maintenance.

-    Check if testing, maintaining and reassessing business continuity plans Control Business continuity plans are tested and updated regularly to ensure that they are up to date and effective.

-    Check if the business continuity plan includes plans to handle the media and personnel during crisis situations.

-    Check if the organization ensures that the Board or shareholders of the organization agree to the decided availability requirements.

-    Major known risks of printed lottery business: Theft, forgery, Printing error, Packing problem, Distribution error, Rack of materials