Business Continuity/Disaster Recovery Program Update - June 2007


Published on

Published in: Business, Technology
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide
  • Purpose: Current State of Disaster Recovery Efforts
  • Business Continuity/Disaster Recovery Program Update - June 2007

    1. 1. Update on Disaster Recovery Task Force Efforts June 4, 2007 Contributors: CNIC Disaster Recovery Task Force State Data Center <ul><li>All SDC-based Agencies will have developed, maintained, and tested plans by June 2009 to restore and recover their agency critical business functions/applications in the event of a disaster. (per DAS Statewide Business Continuity Planning Policy 107- 001-010 -- ) </li></ul>
    2. 2. Background <ul><li>The CNIC CIO’s formed a CNIC Disaster Recovery Task force to examine and propose DR solutions for systems and services managed by the State Data Center. </li></ul><ul><li>The Sungard DR service contract was extended through October 2007, while requirements for a new RFP and service contract can be gathered and awarded. </li></ul>
    3. 3. Disaster Recovery Plan : Steps taken to restore specified infrastructure requirements in support of key Business Functions such as Information Systems, business equipment environments, internal and external network connections, and data structures utilizing alternate resources for hardware, software, data, and networks. - Hardware - System Software - Data and Data Structures - Applications - Network Connectivity - Desktop Services - Production Support DRP Business Continuity Plan : Steps taken to restore alternate business processes in the event that automated processes or business infrastructures are unavailable, employing documented workaround and/or manual procedures and alternate resources. - Relocation of Personnel - Availability of remote support services - Contingency office space - Process workarounds BCP Components of the Business Continuity Plan
    4. 4. DR Task Force – Objectives <ul><li>Complete DR plans for IT infrastructure that support the Agency critical business functions . </li></ul><ul><li>Track and manage the BCP/DR planning effort by the use of a Scorecard which includes the DR tasks, milestone dates, and detailed template worksheets. </li></ul><ul><li>Assure all IT application and systems information is gathered and loaded in the eBRP Agency instance tool. Assumption: For disaster recovery, the SDC is to be given access to each Agency’s eBRP instance. </li></ul><ul><li>Develop DR operational guidelines, ala a Concept of Operations. </li></ul><ul><li>Collaborate with the SDC to issue an RFP for recovery service contract pricing and selection of a recovery vendor. </li></ul><ul><li>Issue a disaster recovery service contract that: </li></ul><ul><ul><li>Will provide recovery for SDC-managed critical business services. </li></ul></ul><ul><ul><li>Can adopt recovery services for other SDC customers and/or out-of-scope services. </li></ul></ul>
    5. 5. DR Task Force Issues and Proposed Mitigation Action <ul><li>All SDC-Based Agencies to validate their Business Critical Functions annually! </li></ul><ul><ul><li>Action: - Agencies to commit and actively support resources and time to identify Agency’s key </li></ul></ul><ul><ul><li>Business Critical Functions. </li></ul></ul><ul><ul><li> - CIO’s to identify which of these functions need to be recovered in the SDC during a disaster. </li></ul></ul><ul><li>State to hire limited duration DR Expertise </li></ul><ul><ul><li>Action: - Using existing SunGard Contract or an RFP process, DAS to hire full time DR expertise. </li></ul></ul><ul><ul><li>- Assign DR expert to SDC or State CIO Office. </li></ul></ul><ul><li>State to hire ongoing full time DR Program/Project Manager </li></ul><ul><li>Action: - Assign DR Program/Project Manager to SDC or State CIO Office. </li></ul><ul><li>Establish Multi-Agency Workgroups to address key DR services </li></ul><ul><ul><li>Action: - Establish recovery teams for Roles & Responsibilities, Concept of Operations Declaration, </li></ul></ul><ul><ul><li>network services, etc. </li></ul></ul><ul><ul><li>- Decide what work can be performed prior to the introduction of a DR Expert. </li></ul></ul>
    6. 6. <ul><li>Combine BCP information in eBRP with Agency’s DR detailed template file. </li></ul><ul><ul><li>Action: - For disaster recovery, propose Agencies to give SDC access to their eBRP instance. </li></ul></ul><ul><ul><li>- No need to create a program for a single combined SDC instance of Agencies DR requirements. </li></ul></ul><ul><li>Expand Disaster Recovery Scorecard Timeline </li></ul><ul><ul><li>Action: - Modify timeline to accommodate agency-specific time requirements. </li></ul></ul><ul><ul><li>- Extend the SunGard contract as necessary until new DR Services RFP is ready. </li></ul></ul><ul><ul><li>- Ensure Agencies still meet overall deadline of June 30, 2009 BCP deadline, per DAS </li></ul></ul><ul><ul><li>Policy 107- 001-010. </li></ul></ul><ul><li>Ensure DR resources to complete the DR Scorecard and Template. </li></ul><ul><li>Action: - Agencies have already designated the BCP coordinator, but CIO’s need to ensure they </li></ul><ul><li>have dedicated DR technical resources to complete the DR Scorecard. </li></ul>DR Task Force Issues and Proposed Mitigation Action (cont’d)
    7. 7. DR Task Force Efforts – The Scorecard
    8. 8. Disaster Recovery Declaration Process (Sample Only) DR Declaration Stage DR Mobilization Stage DR Action/Recovery Stage
    9. 9. BCP and DR Framework Chart
    10. 10. Critical Business Functions (ODOT Sample) SDC-based Service (11 In-Scope) SDC Out-of-Scope
    11. 11. Disaster Recovery Taskforce Update CNIC Steering Committee