Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
Business Continuity Program/ Disaster Recovery Program Update <ul><li>Statewide BCP Project   </li></ul><ul><li>SDC Disast...
Background –    Multiple Projects within a BCP/DR Program
Background - Projects <ul><li>1 )   Statewide BCP Initiative </li></ul><ul><ul><li>This initiative was launched in March 2...
Background - Projects <ul><li>4)   SDC Recovery Service Contract Project </li></ul><ul><ul><li>This project establishes a ...
<ul><li>Statewide BCP Initiative </li></ul>
Statewide BCP Initiative – Objectives <ul><li>Designation of BCP Coordinators and Sponsors. </li></ul><ul><li>Identificati...
Ultimate Goal <ul><li>All Agencies will have developed, maintained, and tested plans by June 2009 to restore and recover t...
Phased Approached –  Proposed Planning Goals <ul><li>The Enterprise BCP Office has recommended that agencies develop their...
Statewide BCP Initiative –   Tracking the Progress <ul><li>The Enterprise BCP Program will use a “Scorecard” to track the ...
Statewide BCP Initiative –   The Scorecard     Partial Partial Yes 0 0 3 3 Yes Yes Yellow H Yes Yes Yes Yes Yes 0 0 2 4 Ye...
<ul><li>SDC Disaster Recovery Plan & Service Contract Project </li></ul>
SDC Disaster Recovery Plan & Contract Project    Overview  <ul><li>The CNIC CIO’s formed a CNIC Disaster Recovery taskforc...
SDC Disaster Recovery Plan & Contract Project    Objectives <ul><li>Gather requirements for critical business functions an...
Recovery Time Objective (RTO) The Recovery Time Objective (RTO) is the least amount of time required by a business functio...
15 The Recovery Point Objective (RPO) is the amount of data that each business function is willing to lose if a disruption...
  SDC Disaster Recovery 16
SDC Disaster Recovery Plan & Service Project    Scorecard Note:  The scorecard reflects phases for a) DR Plan Development,...
How Much of a Robust DR Capability is Needed? 18 Recovery Windows Recovery Point Recovery Time When compared against Agenc...
<ul><li>eBRP Toolkit Project </li></ul>
eBRP Toolkit Project – Overview <ul><li>This project supports the “Statewide BCP Policy” by implementing the eBRP Toolkit ...
eBRP Toolkit Project – Objectives <ul><li>Implementation of toolkit to the 12 CNIC agencies. </li></ul><ul><li>Build disas...
eBRP Toolkit Project – Bridging the Gap
eBRP Toolkit Project – Logistics <ul><li>All location data must be entered. </li></ul><ul><li>All technology data must be ...
eBRP Toolkit Project - WBS
eBRP Project - Project Support & Toolkit Training <ul><li>Basic Training #1 – September 2006 (Plan Development) </li></ul>...
Upcoming SlideShare
Loading in …5
×

Business Continuity Program/Disaster Recovery Program

1,240 views

Published on

Published in: Business, Technology
  • Be the first to comment

Business Continuity Program/Disaster Recovery Program

  1. 1. Business Continuity Program/ Disaster Recovery Program Update <ul><li>Statewide BCP Project </li></ul><ul><li>SDC Disaster Recovery Plan & Service Contract Project </li></ul><ul><li>eBRP Project </li></ul>February 2007 Contributors: CNIC BCP Team CNIC Disaster Recovery Task Force State Data Center
  2. 2. Background – Multiple Projects within a BCP/DR Program
  3. 3. Background - Projects <ul><li>1 ) Statewide BCP Initiative </li></ul><ul><ul><li>This initiative was launched in March 2006 with the implementation of the Statewide BCP Policy. It is managed by the DAS Enterprise BCP office and provides guidelines and direction for State agencies in their plan development. </li></ul></ul><ul><li>2) eBRP Toolkit Project </li></ul><ul><ul><li>In Fall 2006, the eBRP Toolkit was selected for the storage and publication of BCP and DR plans for state agencies. This project manages Phase 1 of the implementation, training and utilization of the toolkit by 12 state agencies. Subsequent phases will include the inclusion of additional agencies and testing. </li></ul></ul><ul><li>3) BCP Tabletop Test Project </li></ul><ul><ul><li>At the conclusion of the eBRP Toolkit Project, this project will manage BCP tabletop tests for 12 state agencies. </li></ul></ul>
  4. 4. Background - Projects <ul><li>4) SDC Recovery Service Contract Project </li></ul><ul><ul><li>This project establishes a disaster recovery service contract for applications and systems hosted at the SDC. </li></ul></ul><ul><li>5) SDC/Agency DR Test Project </li></ul><ul><ul><li>This project executes disaster recovery tests per the DR awarded service contract for systems hosted at the SDC. </li></ul></ul><ul><li>6) Agency DR Test Projects </li></ul><ul><ul><li>This project executes disaster recovery tests per the DR awarded service contract for agency systems. </li></ul></ul><ul><li>7) Ongoing BCP/DR Plan Maintenance </li></ul><ul><ul><li>Business Continuity Plans and Disaster Recovery Plans will be maintained and routinely tested by each agency through their established maintenance programs. </li></ul></ul>
  5. 5. <ul><li>Statewide BCP Initiative </li></ul>
  6. 6. Statewide BCP Initiative – Objectives <ul><li>Designation of BCP Coordinators and Sponsors. </li></ul><ul><li>Identification of critical business functions. </li></ul><ul><li>Developed, tested, and maintained BCP. </li></ul><ul><li>Complete DR plans for the IT infrastructure that support the critical business functions. </li></ul><ul><li>Implementation of BCP maintenance programs. </li></ul><ul><li>Established awareness and training programs to create organizational awareness. </li></ul>
  7. 7. Ultimate Goal <ul><li>All Agencies will have developed, maintained, and tested plans by June 2009 to restore and recover their business operations in the event of a disaster. </li></ul>
  8. 8. Phased Approached – Proposed Planning Goals <ul><li>The Enterprise BCP Office has recommended that agencies develop their BCP utilizing a phased approach </li></ul><ul><ul><li>This will focus agencies to work on those most critical business functions </li></ul></ul><ul><ul><li>Four Phases are recommended: </li></ul></ul><ul><ul><ul><li>Phase 1 : CBF that must be restored within 2 days </li></ul></ul></ul><ul><ul><ul><li>Phase 2: CBF that must be restored within 1 week </li></ul></ul></ul><ul><ul><ul><li>Phase 3: CBF that must be restored within 2 weeks </li></ul></ul></ul><ul><ul><ul><li>Phase 4: CBF that must be restored within 1 month </li></ul></ul></ul>
  9. 9. Statewide BCP Initiative – Tracking the Progress <ul><li>The Enterprise BCP Program will use a “Scorecard” to track the progress of the implementation of the Statewide BCP Policy. </li></ul><ul><ul><li>The Scorecard will use the standard Green – Yellow – Red Status indicators: </li></ul></ul><ul><ul><ul><li>Agencies that have met the planning goals will receive a GREEN Status; </li></ul></ul></ul><ul><ul><ul><li>those that have partially met the goals will receive a YELLOW status; and </li></ul></ul></ul><ul><ul><ul><li>those who have not met the goal in any form will receive a RED Status. </li></ul></ul></ul>
  10. 10. Statewide BCP Initiative – The Scorecard     Partial Partial Yes 0 0 3 3 Yes Yes Yellow H Yes Yes Yes Yes Yes 0 0 2 4 Yes Yes Green G       Pending Report Pending Report 1 2 3 2 Yes Yes Pending Report F     N/A N/A Yes 0 1 3 0 Yes Yes Green E     N/A N/A Yes 0 0 0 0 Yes Yes Green D       No Yes 0 2 0 2 Yes Yes Red C     Partial Yes No 0 0 1 8 Yes Yes Green B     Partial Partial Yes 18 11 20 19 Yes Yes Yellow A TESTING Phase 2 6-30-08 PLANS Phase 2 12-31-07 TESTING Phase 1 12-31-07 PLANS Phase 1 12-31-06 Approve by Mgmt PHASE 4 1 mo. RTO PHASE 3 2 week RTO PHASE 2 1 week RTO PHASE 1 2 day RTO Identify CBF 6-30-06 Assign Coord 1-31-06 AGENCY STATUS AGENCY BCP Development & Testing Phased Planning Methodology-CBF Statewide BCP Implementation Scorecard
  11. 11. <ul><li>SDC Disaster Recovery Plan & Service Contract Project </li></ul>
  12. 12. SDC Disaster Recovery Plan & Contract Project Overview <ul><li>The CNIC CIO’s formed a CNIC Disaster Recovery taskforce to examine and propose DR solutions for systems and services managed by the State Data Center. </li></ul><ul><li>The current Sungard DR service contract was extended through October 2007, while requirements for a new RFP and service contract can be gathered and awarded. </li></ul>
  13. 13. SDC Disaster Recovery Plan & Contract Project Objectives <ul><li>Gather requirements for critical business functions and applications supported by SDC managed systems. </li></ul><ul><li>Issue an RFP for recovery service contract pricing. </li></ul><ul><li>Analyze pricing and select recovery options and a recovery vendor. </li></ul><ul><li>Issue a recovery service contract that </li></ul><ul><ul><li>will be executed with the SDC for SDC managed systems and services </li></ul></ul><ul><ul><li>may be executed by CNIC agencies for out-of-scope systems and services </li></ul></ul><ul><li>The DR component of this project will be tracked and managed by the use of a Scorecard which includes the DR tasks and milestones. </li></ul><ul><li>IT data gathered to support the acquisition of the DR service contract will be used to load SDC and Agency instances of eBRP. </li></ul>
  14. 14. Recovery Time Objective (RTO) The Recovery Time Objective (RTO) is the least amount of time required by a business function and/or application to recover critical services, measured from time of disruption to resumption of critical business operations. As a part of the BIA, SunGard classified the RTOs for the critical functions identified by the State of Oregon agencies. The graph below denotes the number of functions that have an RTO of less than 1 day (blue) and between 1-2 days (burgundy). SDC Disaster Recovery 14
  15. 15. 15 The Recovery Point Objective (RPO) is the amount of data that each business function is willing to lose if a disruption occurs. As a part of the BIA, SunGard classified the RPOs for the critical functions identified by the State of Oregon agencies. The graph below denotes the number of functions that have an RPO of less than 1 day (blue) and between 1-2 days (burgundy). SDC Disaster Recovery Recovery Point Objective (RPO) Data
  16. 16. SDC Disaster Recovery 16
  17. 17. SDC Disaster Recovery Plan & Service Project Scorecard Note: The scorecard reflects phases for a) DR Plan Development, b) DR RFP and Service Contract, and c) Subsequent DR Planning and Tests.
  18. 18. How Much of a Robust DR Capability is Needed? 18 Recovery Windows Recovery Point Recovery Time When compared against Agency’s consensus on existing risk….. Think about the risk we bear without High Availability of our business applications….. if infrastructure is not available High Availability Recovery Window Days Mins Hrs Wks Secs Mins Days Hrs Secs Wks
  19. 19. <ul><li>eBRP Toolkit Project </li></ul>
  20. 20. eBRP Toolkit Project – Overview <ul><li>This project supports the “Statewide BCP Policy” by implementing the eBRP Toolkit software within the 12 CNIC agencies. </li></ul><ul><li>The eBRP Toolkit bridges the gap between business and IT. This project encompasses two distinctive components, the development and maintenance of agency BCP and DR plans. </li></ul><ul><li>The software will allow state agencies to manage business continuity planning (BCP) and disaster recovery (DR) planning. The resulting plans published through the software will be used during an event to manage recovery strategies. </li></ul><ul><li>All 12 Agencies are expected to support and maintain the eBRP Toolkit by dedicating the resources necessary for the development of their business continuity plans and disaster recovery data within the tool. The implementation team consists of a minimum of a BCP and DR administrator from each agency. </li></ul>
  21. 21. eBRP Toolkit Project – Objectives <ul><li>Implementation of toolkit to the 12 CNIC agencies. </li></ul><ul><li>Build disaster recovery strategies and plans that are aligned with critical business functions and support agency business continuity plan development. </li></ul><ul><li>Data will be loaded and maintained by each of the agencies into their own eBRP instance, using data entry and toolkit import processes. </li></ul><ul><li>Each agency will determine the extent of data loaded based on their individual BCP requirements. </li></ul><ul><li>The 12 CNIC agencies will participate in the development and use of common terms and codes to support the long term goals of the statewide BCP initiative. </li></ul>
  22. 22. eBRP Toolkit Project – Bridging the Gap
  23. 23. eBRP Toolkit Project – Logistics <ul><li>All location data must be entered. </li></ul><ul><li>All technology data must be entered. </li></ul><ul><li>To populate the other sections of the Toolkit, each Agency will use their top 6 Critical Business Functions (CBF). </li></ul><ul><li>New milestones have been established. </li></ul><ul><li>To successfully meet the new milestones identified on the WBS, the complete location and technology data must be entered into the Toolkit as well as the information pertaining to the 6 CBF’s. </li></ul><ul><li>If an Agency has less than 6 CBF they will be required to input the data of those CBF they have identified. </li></ul>
  24. 24. eBRP Toolkit Project - WBS
  25. 25. eBRP Project - Project Support & Toolkit Training <ul><li>Basic Training #1 – September 2006 (Plan Development) </li></ul><ul><li>Basic Training #2 – November 2006 (Basic Entry & Organization Data) </li></ul><ul><li>IT Training – January 17 th & 18 th 2007 </li></ul><ul><li>Basic Training #3 – TBD 2007 (Process Development) </li></ul><ul><li>Toolkit Assistance: for individual help, the Enterprise BCP Office, Enterprise Application Services (EAS), and the SDC are available to assist BCP and DR Administrators as needed. Call the Enterprise BCP Office to request help: 503-373-1067. </li></ul>

×