Embed Size (px)
DESCRIPTION
Business Continuity Planning. The evolution of Disaster Recovery Planning. A dose of Reality….. 4 out of 5 Businesses affected by the 1993 WTC bombings did not survive past 6 months The range of Risks has expanded since September 11. - PowerPoint PPT Presentation
Citation preview
Jump to first page
Business Continuity Planning
The evolution of Disaster Recovery Planning
Jump to first page
A dose of Reality….
4 out of 5 Businesses affected by the 1993 WTC bombings did not survive past 6 months
The range of Risks has expanded since September 11.
The Global climate for doing business has changed permanently
Jump to first page
Keys to Success
A successful plan must have Executive sponsorship
Departments must be realistic about relative importance to the overall business
Any plan must be periodically tested, results reviewed, and modifications made, if required
Jump to first page
External Risk Factors
Extreme Weather Blizzards, Flooding, Tornadoes,
Hurricanes, Ice Storms Earthquakes Long duration Power or
Communications failure Area Evacuation due to chemical
spill, etc. Terrorist Attacks, Criminal actions
Jump to first page
Internal Risk Factors
Structural Damage Roof collapse (Sears Hickory Hill) Fire, Water Pipe Burst
HVAC IT concerns
Equipment Spares Backup / Mirroring process
Personnel
Jump to first page
Step 1: Risk Analysis
Identify and weigh most probable risks
Identify and weigh business functions
Correlate risks with business functions
Make a List!
Jump to first page
Step 2: Prioritization
Threat x Impact = Priority
Threat High : 10 Medium: 5 Low: 1
Business Impact 0=No Impact 1=Noticeable 2=Damage 8-48 hour recovery 3=Major: Relocation required
Jump to first page
Step 3: Evaluation
Identify key components to prioritized list Facilities (Building, furniture, fixtures) Utilities (Electricity, Water, Gas) Network (Voice, Data, IP) Hardware (Servers, Workstations)
Weigh components against alternate sites, if applicable (Natural hot-site)
Jump to first page
Step 4: Plan
Facilities Alternate site
Intra-company or “Buddy system” Hot or Cold backup Fire Suppression system
Utilities (Electricity, Water, Gas) Dual Entrance facilities UPS with suitable battery life Backup Generator
Jump to first page
Step 4: Plan
Software Virus protection, Firewall revision User-loaded software Common platform and partitions Disk backup and/or mirroring
Hardware Spares Maintenance routines
Virus scans, disk utilities Duplication for recovery
Jump to first page
Step 4: Plan
Network Resiliency Legacy platform designed with
alternate mirror site, either in-house or 3rd party. Network provisioned or automated dial backup
Backup tapes/disks verified, storage off-site
IP/ATM/FR platform with alternate hot site. Semi- to full mesh design
Jump to first page
Step 5: Prevention
Password protect all remote access capabilities
Firewalls for IP connections Maintain latest Virus protection and
Firewall software Corrective software controls Intrusion (hacker) detection
Jump to first page
“Sometimes the best way to facilitate effective Business
Continuity Planning is to use an outside expert without any bias towards any one department,
group, or function.”The Gartner Group
“Your Chief Technology Officer on Call”
CompetitiveNetworkSolutions.com901-757-0379
