Disaster Recovery and Business Continuity Planning


Published on

Published in: Business, Technology
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Disaster Recovery and Business Continuity Planning

  1. 1. Disaster Recovery and Business Continuity Planning in a University Environment Mardecia Bell Ann Harris Copyright Mardecia Bell/Ann Harris 2005. This work is the intellectual property of the authors. Permission is granted for this material to be shared for non-commercial, educational purposes, provided that this copyright statement appears on the reproduced materials and notice is given that the copying is by permission of the authors. To disseminate otherwise or to republish requires written permission from the authors.
  2. 2. <ul><ul><ul><li>The realization of a single point of failure with one data center for both the central academic and administrative IT environments, prompted NC State University to implement a disaster recovery strategy for communications and critical applications residing on the mainframe & open systems computing environment. </li></ul></ul></ul>
  3. 3. History/Timeline Co-processing of production services began in Data Center II Successful DR test of ERP systems Expanded to include Enterprise Business Continuity/Disaster Recovery Planning Scheduled annual Mainframe recovery test Included communications & academic environment Y2K - Business Continuity concept A cquired c entral repository software (LDRPS) Initiated with the administrative environment Mainframe environment recovery test 2005 2004 2002 2001 1999 1997
  4. 4. Implementation Steps <ul><li>Gain Sponsorship </li></ul><ul><li>Establish Steering Committees </li></ul><ul><li>Develop University Policy/Regulation </li></ul><ul><li>Create DR Structure/Establish Staffing </li></ul><ul><li>Market Program </li></ul><ul><li>Establish Central Repository </li></ul><ul><li>Review & Test Plans Regularly </li></ul>
  5. 5. Gain Sponsorship <ul><li>Office of the President – University System </li></ul><ul><li>Chancellor </li></ul><ul><li>Executive Management </li></ul><ul><ul><li>Present your Business Case </li></ul></ul><ul><ul><li>Identify the roles involved </li></ul></ul><ul><ul><li>Provide Executive Summary of BC/DR Program </li></ul></ul><ul><ul><li>Present Statement of Work and Project Plan </li></ul></ul><ul><li>Add responsibilities to staff work plans </li></ul>
  6. 6. Establish Steering Committees <ul><li>IT Steering Committee </li></ul><ul><li>Business/Service Steering Committee </li></ul><ul><li>Both committees are comprised of </li></ul><ul><ul><li>Vice Chancellor/Vice Provost Level </li></ul></ul><ul><ul><li>Representatives from Critical Areas of the Campus </li></ul></ul><ul><ul><li>Ex Officio members from IT areas </li></ul></ul><ul><li>Mission of IT Steering Committee </li></ul><ul><ul><li>Provide guidance and oversight for the combined academic and administrative Disaster Recovery Plan. </li></ul></ul>
  7. 7. Policy/Regulations/Rule <ul><li>Develop a Policy or Regulation to affirm the mandate and promote cooperation </li></ul>
  8. 8. Divide Campus Into Groupings <ul><li>Space/Facilities </li></ul><ul><li>Teaching and Academic Programs </li></ul><ul><li>Academic IT </li></ul><ul><li>Administrative IT </li></ul><ul><li>Environmental Health and Public Safety </li></ul><ul><li>Business Administration </li></ul><ul><li>Research Programs </li></ul><ul><li>Student Affairs </li></ul><ul><li>Extension and Engagement </li></ul>
  9. 9. Resource Projections <ul><li>Hire Full-Time Business Continuity and Disaster Recovery Personnel </li></ul><ul><ul><li>Director of Business Continuity (plus 1 Business Analyst) </li></ul></ul><ul><ul><li>Admin IT DR Coordinator (plus 1 Business Analyst) </li></ul></ul><ul><ul><li>Academic DR Coordinator (part-time) </li></ul></ul><ul><li>Add BC/DR responsibilities to work plan of existing staff </li></ul><ul><li>Identify Coordinators for each business unit </li></ul>
  10. 10. Marketing <ul><li>Present at campus departmental meetings </li></ul><ul><li>Create a Website </li></ul><ul><li>Utilize listserves </li></ul><ul><li>Campus Newspaper </li></ul><ul><li>Network with peer institutions </li></ul><ul><li>Remain abreast of industry standards </li></ul><ul><li>Attend conferences, workshops and seminars </li></ul>
  11. 11. Establish Central Information Repository Continuous Implementation
  12. 12. Accomplishments <ul><li>Disaster Recovery and Business Continuity Plan </li></ul><ul><li>Risk Assessments for Critical Business Units </li></ul><ul><li>Successful Mainframe Recovery Tests </li></ul><ul><li>Designed and implemented infrastructure for central computing environment (academic & administrative) in secondary data center. </li></ul><ul><li>Implementation of recovery strategies in secondary data center </li></ul><ul><li>Creation of Administrative IT Disaster Recovery Unit </li></ul>
  13. 13. Illustration of Various DR Deployments <ul><li>Fault-tolerant cluster (file and print services) </li></ul>A Production B Configuration B Production A Configuration B Production A Production <ul><li>Distributed deployment (hosted systems) </li></ul>A Production A Development A Production <ul><li>Co-processing and load-balancing (ERP) </li></ul>A Production A Production A Production <ul><li>Data replication (mainframe) </li></ul>Server Data Server Data Server Data
  14. 14. Enterprise Resource Planning (ERP) Deployment DC II <ul><li>Financial System </li></ul><ul><li>Human Resources (Version 8.8) </li></ul><ul><li>Student Information System (under construction) </li></ul>DC I Web Server DB Server Application Server Batch Server Campus Users Web Server Application Server Batch Server Web Server Application Server Web Server Application Server Batch Server DB Server Batch Server Data Storage Area Network
  15. 15. Summary and Future Steps DC II Hosted systems Infrastructure Data Data Storage Area Network Active Directory / Windows Novell Directory Services / Novell Citrix ERP Web ERP Batch ERP Application Data Backup/vaulting ERP DB Server DC I Hosted systems Infrastructure Data Data Data Storage Area Network Back up/vaulting Active Directory / Windows Novell Directory Services / Novell Citrix ERP Web ERP Batch ERP DB Server ERP Application Development Server Mainframe Server Email/Calendar Anti-SPAM File/Print, User Home Web Server Database Server Development Server Mainframe Server Web Server Database Server Data Data Storage Area Network Data Email/Calendar Anti-SPAM File/Print, User Home
  16. 16. Administrative IT Disaster Recovery Unit Mission <ul><li>Ensure minimal risk of major disruptions to critical University systems and processes in the event that all or part of its computer operations are rendered inoperable. </li></ul><ul><li>Ensure timely recovery of infrastructure and services in the event of a disruption. </li></ul><ul><li>Ensure that business continuity plans are available and viable relative to its scenario. </li></ul>
  17. 17. Design and Development Execution Training and Communications Admin. IT DR Activity Cycle
  18. 18. Risk Management <ul><li>Identify </li></ul><ul><li>Mitigate </li></ul><ul><li>Process Mapping </li></ul>
  19. 19. Risk Management <ul><li>Risk Mitigation </li></ul><ul><li>Prioritize Actions </li></ul><ul><li>Evaluate recommended Control Options </li></ul><ul><li>Conduct Cost-Benefit Analysis </li></ul><ul><li>Select Controls </li></ul><ul><li>Assign Responsibility </li></ul><ul><li>Develop Safeguard Implementation Plan </li></ul><ul><li>Implement Selected Controls </li></ul><ul><li>Risk Assessment </li></ul><ul><li>System Characterization </li></ul><ul><li>Threat Identification </li></ul><ul><li>Vulnerability Identification </li></ul><ul><li>Control Analysis </li></ul><ul><li>Likelihood Determination </li></ul><ul><li>Impact Analysis </li></ul><ul><li>Risk Determination </li></ul><ul><li>Control Recommendations </li></ul><ul><li>Results Documentation </li></ul>NIST SP 800-30
  20. 20. Process Mapping
  21. 21. Infrastructure <ul><li>Total DR through distributed high availability </li></ul><ul><li>Client Recovery Solutions </li></ul><ul><li>Application Restoration </li></ul><ul><li>Establish collaborative partnerships with other Universities </li></ul>
  22. 22. Client Recovery Solution(s)
  23. 23. Application Restoration <ul><li>Event </li></ul><ul><li>Time </li></ul><ul><li>Scope of Impact </li></ul><ul><ul><li>Infrastructure </li></ul></ul><ul><ul><li>Software </li></ul></ul><ul><ul><li>Hardware </li></ul></ul>
  24. 24. Collaborative Partnerships
  25. 25. <ul><li>Readily accessible </li></ul><ul><li>Secure </li></ul><ul><li>Onsite </li></ul><ul><li>Offsite </li></ul>Vaulting
  26. 26. Critical Business Units <ul><li>Advancement Services </li></ul><ul><li>All Campus Network </li></ul><ul><li>Budget Office </li></ul><ul><li>College of Agriculture and Life Sciences - Personnel Office </li></ul><ul><li>ComTech - Data Networking </li></ul><ul><li>ComTech - Telecommunications </li></ul><ul><li>Contracts and Grants </li></ul><ul><li>Controller's Office </li></ul><ul><li>Enterprise Application and Database Services </li></ul><ul><li>EH&S - Business Continuity </li></ul><ul><li>EH&S - Campus Police </li></ul><ul><li>EH&S - Emergency Response </li></ul><ul><li>EH&S - Environmental Affairs </li></ul><ul><li>EH&S - Health and Safety </li></ul><ul><li>EH&S - Industrial Hygiene </li></ul><ul><li>EH&S - Insurance and Risk Management </li></ul><ul><li>EH&S - Radiation Safety </li></ul><ul><li>EH&S - Transportation </li></ul><ul><li>EH&S - Waste Management </li></ul><ul><li>Enrollment Management - Admissions </li></ul><ul><li>Enrollment Management - Office of Scholarships & Financial Aid </li></ul><ul><li>Enrollment Management - Registration and Records </li></ul><ul><li>Enterprise Technology Services and Support </li></ul><ul><li>Facilities - Construction Management </li></ul><ul><li>Facilities - Design and Construction Services </li></ul><ul><li>Facilities - Operations </li></ul><ul><li>Facilities - University Architect </li></ul><ul><li>Fire Protection </li></ul><ul><li>Foundations Accounting & Investments </li></ul><ul><li>HR - Benefits </li></ul><ul><li>HR - Employment & Compensation </li></ul><ul><li>HR - Human Resource Information Management </li></ul><ul><li>HR - Payroll </li></ul><ul><li>ITD - Business Services </li></ul><ul><li>ITD - Computer Operations </li></ul><ul><li>ITD - Computer Services </li></ul><ul><li>ITD - Systems </li></ul><ul><li>Libraries - Administration </li></ul><ul><li>Materials Management - Materials Support </li></ul><ul><li>Materials Management - Purchasing </li></ul><ul><li>Materials Management - University Graphics </li></ul><ul><li>Real Estate </li></ul><ul><li>Student Health Services </li></ul><ul><li>University Cashier's Office </li></ul><ul><li>University Dining </li></ul><ul><li>University Housing </li></ul>
  27. 27. Business Continuity Planning
  28. 28. Communication <ul><li>Consistency in plan updating </li></ul><ul><li>Training </li></ul><ul><li>Partnering </li></ul><ul><li>Emergency Communication standardization </li></ul><ul><ul><li>Call Trees </li></ul></ul><ul><ul><li>Mobile Devices </li></ul></ul><ul><ul><li>Website </li></ul></ul><ul><ul><li>Incident Command System Call Center </li></ul></ul><ul><ul><li>Incident Report Plan </li></ul></ul>
  29. 29. IT Disaster Categorization <ul><li>Category 1 : A single person or group in a Critical Business Unit (CBU) is unable to perform their critical functions </li></ul><ul><li>Category 2 : An entire CBU is unable to perform its critical functions </li></ul><ul><li>Category 3 : Multiple CBUs are unable to perform their critical functions </li></ul><ul><li>Category 4 : Non CBUs are not able to perform their critical functions </li></ul><ul><li>Category 5 : A wide spread event that impacts the entire University </li></ul>
  30. 30. Goals <ul><li>Total DR through distributed high availability </li></ul><ul><li>Standardized Emergency Communications </li></ul><ul><li>Immediate Client Recovery Solutions </li></ul><ul><li>Improved RTO </li></ul>
  31. 31. <ul><li>Ann Harris </li></ul><ul><li>Asst Dir, Administrative IT Disaster Recovery </li></ul><ul><li>919-515-9228 </li></ul><ul><li>[email_address] </li></ul><ul><li>http://www.fis.ncsu.edu/dr </li></ul>