来自 昏昏睡睡HSE · From Drowsy HSE CSP DAILY LEARNING · DAY 263

业务连续性与灾后恢复 · 要点进阶 | Business Continuity & Recovery · Key Points in Depth

第 52 块 · Domain 4 · 应急管理 · 10%Block 52 · Domain 4 · Emergency Management · 10%第 2 / 5 课 · 要点进阶Lesson 2 of 5 · Key Points in Depth

本课只做一件事:把「业务连续性与灾后恢复」的四条要点逐条拆开:机制是什么、什么时候成立、最容易错在哪。

Take the four key points of Business Continuity & Recovery apart: mechanism, conditions, and the usual misread.

本课不涉及:不重复概念定义,也不做综合题——只把要点讲透。
Not covered here: No repeat of definitions, no mixed questions — just the points, in depth.

先看一张图 | One picture first

先救人、再保产、后重建——BIA 两问与灾后复工放行 BIA 业务影响分析:只回答两个问题 ① 哪些流程必须活着? 关键流程 ≠ 营业额排名:停摆即停产/违法/伤人的先算 ② 停多久就不可接受? RTO 恢复时间目标 / RPO 恢复点目标(数据可丢多久) 恢复优先级:资产永远排在人后面 ① 人 点名·伤情·安置 → ② 关键流程 供水·供电·环保拦截 → ③ 厂房设施 结构·屋顶·围护 → ④ 系统与数据 IT·档案·供应链 灾后复工四项放行:逐项评估、书面签字才可上电投产 结构 沉降·裂缝·悬吊 电气 绝缘·接地·烘干 气体 管线·储罐·密闭空间 水患与污染 霉菌·浸水设备 恢复期风险抬头:疲劳加班、临时接线、拆除动火、霉菌与污水暴露——复工安全方案要和恢复计划同一份文件 记忆锚:先救人 → 再保产(关键流程)→ 后重建(厂房与系统)
图解 / Figure:示意图(本站绘制,非官方图)/ Site-drawn diagram for study, not an official graphic.

本课目标 | Learning objectives

  1. 按顺序复述四条要点各自的机制
  2. 对每条要点说出一个常见误解,并说明为什么错
  3. 判断一个新例子属于哪一条要点

  • Recite the mechanism behind each of the four points
  • Name one common misread per point and why it fails
  • Classify a new example under the right point
  • 图片预览 / Photo preview

    图片经过压缩后保存在当前浏览器。导出失败时,可在下方预览图片上长按保存。/ The photo is compressed and stored in this browser. If download fails, long-press the preview below to save it.

    要点逐条拆 | Point by point

    1. BIA 只问两问,答案要量化
    The BIA asks two questions, both answered in numbers
    第一问「哪些流程必须活着」——判据是停摆后果(停产、违法、伤人、客户流失),不是营业额大小;第二问「停多久不可接受」——给出 MTD,再由 MTD 倒推 RTO(RTO ≤ MTD,留余量)与 RPO(数据能丢多久)。三个数写在同一张表上,才叫可执行。
    Question one: which processes must live — judged by consequence (production stop, violation, injury, lost customers), not revenue. Question two: how much downtime is intolerable — that is the MTD, from which you derive the RTO (never above it) and the RPO. Three numbers on one sheet is an executable plan.
    常见误解 / Common misread:误区:MTD 写「越快越好」。没有数字就没有优先级,恢复时人人都是紧急。
    Myth: MTD as 'as soon as possible'. No number, no priority.
    2. 恢复顺序是硬约束:人→流程→厂房→系统
    Recovery order is fixed: people, processes, facilities, systems
    先点名与安置人(含承包商、访客、夜班),再恢复关键流程(供水供电、环保拦截、消防水),然后才修厂房,最后才是 IT 与数据。顺序颠倒的典型:先抢服务器、让员工在受损建筑里办公。
    Account for people first, including contractors, visitors and night shift; then restore critical processes such as water, power, environmental containment and fire water; then facilities; IT and data last. The classic inversion is rescuing servers while staff work in a damaged building.
    常见误解 / Common misread:误区:IT 恢复=业务恢复。系统回来了,人伤了、环保失控,照样停产。
    Myth: IT recovery is business recovery.
    3. 复工靠书面放行,不靠目测
    Restart by written clearance, not by eyeball
    四项逐项评估:结构(沉降、裂缝、悬吊件、屋面)、电气(浸水设备必须烘干并测绝缘、接地连续)、气体(管线试压检漏、储罐、密闭空间先检测)、水患(霉菌、污水、浸水物料)。每项签字,形成复工许可(Restart Permit),最后由安全与生产共同签发。
    Four clearances: structure — settlement, cracks, suspended loads, roof; electrical — water-damaged equipment dried and insulation tested, grounding continuity; gas — lines pressure-tested and leak-checked, tanks, confined spaces tested first; water — mould, sewage, soaked materials. Each signed, forming a restart permit issued jointly by safety and operations.
    常见误解 / Common misread:误区:只开灯试电。合闸瞬间的短路与电弧是灾后最常见的二次伤害。
    Myth: flip the breaker to test. Arc flash on energizing is the classic second injury.
    4. 恢复期本身是高风险期
    Recovery itself is a high-risk period
    加班疲劳(连续作业超 12 小时判断力下降)、临时接线与私拉电缆、拆除与动火、霉菌孢子与污水病原体、发电机与临时取暖器的一氧化碳。恢复方案必须把这些当新危险源重新做一次风险评估,而不是沿用灾前那套。
    Fatigue from extended shifts, temporary wiring, demolition and hot work, mould spores and sewage pathogens, carbon monoxide from generators and temporary heaters. The recovery plan needs a fresh risk assessment treating these as new hazards, not the pre-event one.
    常见误解 / Common misread:误区:恢复期按平时管。此时期现场构成、人员状态、设备完整性全变了。
    Myth: manage recovery like normal operations. Site, people and equipment have all changed.

    情景自测 | Scenario check

    要点辨析Key-point discrimination

    这道题考什么:考 RTO 与 MTD 的关系。
    Tests RTO against MTD.

    某关键流程 MTD 为 8 小时。下列 RTO 设定哪个合理?

    A critical process has an MTD of 8 hours. Which RTO is sound?

    自编练习题,不是 BCSP 官方真题,也不能用来预测分数。 / Original practice item, not an official BCSP exam question.

    动手练 | Practice

    1. 把一项关键流程拆成「人能顶多久」的推演。
    Walk one critical process through a manual-workaround drill.

    学习打卡与笔记 | Progress & notes

    已完成 0/4 项 / 0/4 tasks complete

    连续学习 / Learning streak: 0 天 / 0 days

    进度保存在当前浏览器,不会自动跨设备同步。/ Progress is stored in this browser only.

    PNG 学习记录预览;可长按图片保存 / PNG card preview; long-press to save

    可靠来源 | Official references

    BCSP — CSP Examination Blueprint (CSP11)

    BCSP — Official Self-Assessments

    BCSP — Certified Safety Professional (CSP)

    Pearson VUE — CSP 考试预约 / Scheduling

    本课为一般性学习资料,不替代现场专业评估、法规要求或组织程序。/ Educational content only.

    ← 返回课程目录 / Back to catalog