1

2

Cost to Recover

Time toRecover

LastBackup

Work Backlog Created

LostData

RecoveryOperations

Time

CostDisaster Recovery Time Frame

Reconstruct Lost Data

Recovery Time Objective

EventAssessment

RecoverLostData

DisasterDeclaration

Point

ITResourcesRecovered

UserFunction

Recovered

Maximum Tolerable DowntimeRecovery

PointObjective Work Recovery Time

Collect Data Manually

RecoverWork

Backlog

RecoverCollected

Data

Business Units use emergency, manual, and normal procedures

The six stages of the Business Continuity Planning Life-cycle Process will be executed iteratively to establish the required continuity/recovery capabilities across the H&C enterprise.

The first iteration will focus on the centralized IT operations in Indianapolis.

3

Six StagesRisk Management1

BIA

Capability Development

Plan Testing

6

2

3

4

5

BC Strategy Development

Plan Maintenance

4

BC Planning Life-cycle

1

RiskManagement

Stage 1: Risk ManagementStage 1: Risk Management• ObjectivesObjectives

1.1. Assess the risk of Assess the risk of interruption to the interruption to the H&C IT Operations in H&C IT Operations in terms ofterms of• Potential threatsPotential threats• Existing controlsExisting controls• Potential disaster Potential disaster

impactsimpacts• Likelihood of Likelihood of

disaster eventsdisaster events2.2. Control the risk to IT Control the risk to IT

Operations through Operations through recommended recommended mitigation strategiesmitigation strategies

5

BC Planning Life-cycle

BIA

1

2

RiskManagement

Stage 2: Business Impact Stage 2: Business Impact Analysis (BIA)Analysis (BIA)

• ObjectivesObjectives1.1. Identify mission-Identify mission-

critical H&C critical H&C business functions business functions and processesand processes

2.2. Analyze impacts to Analyze impacts to the business ithe business if the f the critical business critical business processes are processes are disrupteddisrupted

3.3. Identify Identify dependencies and dependencies and recovery recovery requirementsrequirements

Stage 3: BC Strategy Development

Objectives1. Assess the

requirements to recover IT Operations based on critical business process recovery requirements

2. Identify alternative options for recovering It Operations based on these requirements

3. Select the most cost-effective option that meets these requirements

6

BC Planning Life-cycle

BIA

1

2

3

BCStrategy

Development

RiskManagement

7

BC Planning Life-cycle

BIA

BC Capability Development

1

24

RiskManagement

Stage 4: BC Capability Stage 4: BC Capability DevelopmentDevelopment

• Objective: Develop and Objective: Develop and Implement Implement 1.1. The operational The operational

recovery/continuity IT recovery/continuity IT environment(s) for the environment(s) for the H&C IT Production H&C IT Production Operations based on Operations based on the approved strategythe approved strategy

2.2. The Plan The Plan Documentation Documentation supporting the supporting the deployment of the deployment of the environment(s) in an environment(s) in an actual crisis scenarioactual crisis scenario

3

BCStrategy

Development

8

BC Planning Life-cycle

BIA

BC Plan Development

BC Plan Testing 1

24

5

RiskManagement

Stage 5: BC Plan TestingStage 5: BC Plan Testing• ObjectiveObjective

1.1. Test the H&C IT Test the H&C IT contingency contingency environment(s) and environment(s) and supporting plan supporting plan documentation to documentation to ensure that they areensure that they are• CurrentCurrent• ViableViable• CompleteComplete

2.2. Test the team’s Test the team’s performanceperformance

3.3. Test the capability’s Test the capability’s conformance to conformance to business requirementsbusiness requirements

3

BCStrategy

Development

9

BC Planning Life-cycle

BIA

BC Plan Development

BC Plan Testing

BC Plan Maintenance

6

1

2

3

4

5

RiskManagement

Stage 6: BC Plan Stage 6: BC Plan MaintenanceMaintenance

• ObjectiveObjective Maintain the H&C Maintain the H&C

IT contingency IT contingency capability in a capability in a ready stateready state

Set the Set the procedures to procedures to insure that insure that maintenance is maintenance is regularly regularly performedperformed

BCStrategy

Development

10