31

Business Continuity: Getting Your Ducks in a Row

Embed Size (px)

Citation preview

The National Center for Campus Public Safety

CampusPublicSafetyOnline

Tuesday,March21,20172:00-3:00pmET

BusinessCon=nuity:Ge@ngYourDucksinaRow

with

KristaM.DillonDirectorofOpera=onsforSafetyandRiskServices

UniversityofOregon

The National Center for Campus Public Safety

Business Continuity in Context

3

The National Center for Campus Public Safety

The Goal We want to be able to do tomorrow

what we were doing yesterday

No matter what happens today. Paul Dimond, Kuali Ready Council Chair

4

The National Center for Campus Public Safety

Why Business Continuity •  To protect people and property •  Resume critical operations / work

processes – Deliver teaching, research, service

•  To minimize downtime to retain clients / customers (e.g., students)

5

The National Center for Campus Public Safety

Why Business Continuity •  Direct damage only one factor:

– Recovery highly dependent on external environment

•  How are you connected to the community, region, state?

– Significant loss from disruption of flow of supplies or goods

6

The National Center for Campus Public Safety

Not just for catastrophic losses •  Extended staff downtime due to illness or

vacation •  Relocation (planned or unplanned) •  Indoor Air Quality issues •  Infrastructure / utility disruption

7

The National Center for Campus Public Safety

Not just for catastrophic losses •  Beyond your 4 walls: regional or national

incidents •  Reputational Impacts •  ??? •  Ever growing expectations for continued

service.

8

The National Center for Campus Public Safety 9

The National Center for Campus Public Safety

Characteristics of BCP •  Pre-determined and Static:

– Essential Functions – Vital Records – Succession and Delegated Authority – Continuity Facilities

10

The National Center for Campus Public Safety

Characteristics of BCP •  Dynamic, requiring situational

management – Resource Conflicts for Essential Functions – Succession and Delegation in improbable

events – Limits to Continuity Facilities in region-wide

disasters – Communications when first tier systems

inoperable

11

The National Center for Campus Public Safety

BCP in 3 Steps

12

The National Center for Campus Public Safety

1. Access you Functions •  What are our tasks – functions –

programs? •  And what do those functions require?

– Describe your functions – Process and procedures – Utilities – Supplies and equipment – Programs and data

13

The National Center for Campus Public Safety

1. Access you Functions •  And what do those functions require?

– Personnel and training – Vendors or third parties –  Interdependencies (internal and external) – Peak load or cyclical work flow

14

The National Center for Campus Public Safety

Impact Assessment •  If you couldn’t do the function / task, what

is the impact at: – 1 day; 1 week; 1 month

•  Consider, for example: – Life and health – Contractual or financial obligations, liability – Reputation – Funding –  Infrastructure

15

The National Center for Campus Public Safety 16

The National Center for Campus Public Safety

Maximum Allowable Downtime (MAD)

•  Recovery Time Objective (RTO) – How long until things REALLY begin to get

difficult •  Recovery Point Objective (RPO)

– How much is needed to stay somewhat functional?

•  Maximum Tolerable Period of Disruption (MTPD) – How long until recovery is no longer possible?

17

The National Center for Campus Public Safety

Coping Strategies •  Ask: “What do we do if…”

– We don’t have our people? – We don’t have our building / space? – We don’t have our inputs?

There are no non-essential staff, but some functions can be deferred.

18

The National Center for Campus Public Safety

EXAMPLES

19

The National Center for Campus Public Safety

Animal Research Facility Fire

20

The National Center for Campus Public Safety 21

The National Center for Campus Public Safety

Lessons Learned •  Displaced for nearly a year •  Potential business interruption claim of

$250K •  Business processes slowed •  Initially laid off student workers during

immediate clean up efforts •  But……

– They had a plan!

22

The National Center for Campus Public Safety

Graduate Teaching Strike •  Graduate Teaching Fellows went on strike

Fall 2014 during finals week. •  Critical functions performed:

– Grading exams – Proctoring exams – Responsible for entire courses: content, exam

development, proctoring and grading •  Impact Assessment

23

The National Center for Campus Public Safety

Graduate Teaching Strike

24

The National Center for Campus Public Safety

Graduate Teaching Strike: Coping Strategies

•  General: –  ID staff to greet classes prior to finals week –  ID staff to proctor exams

•  Academic: –  Extended grading deadline –  Cancel course hours in dead week that weren’t tied

to exam –  Modify final exams to expedite grading –  Forgo final and take existing grades –  Hire temporary staff to grade

25

The National Center for Campus Public Safety

Umpqua Community College

26

The National Center for Campus Public Safety

Umpqua Community College

27

The National Center for Campus Public Safety

Umpqua Community College

28

The National Center for Campus Public Safety

Umpqua Community College •  Business Continuity without a plan

– Payroll –  Insurance coverage scope and resources – What is the financial tipping point for

upcoming events? – When will other activities/events resume? – Continuation of security services separate

from the incident –  Impact assessment for utilities, IS systems

29

The National Center for Campus Public Safety

Olympic Trials

30

www.margolishealy.com www.nccpsafety.org [email protected]

1.866.817.5817 www.bja.gov