ISM BCP Case study

2,926 views

Published on

Case study Business Continuity and Disaster Recovery

Published in: Business, Technology

ISM BCP Case study

  1. 1. BCP Case Study Lightning strikes not twice but 3 times Jorge Sebastiao LOB Head Global Services Solutions
  2. 2. Business Continuity Management To counteract interruptions to business activities To protect critical business processes from the effects of major failures or disasters “2 out of 5 companies that experience a disaster will go out of business within 5 years” - Gartner
  3. 3. Impact of Disaster 3 Productivity: productivity/ employees $millions minutes daystime $impact$billions Revenue : direct financial/ customer Damaged reputation : damaged reputation Governance & performance: Governance Performance constant increase Indirect impact of downtime can be far more severe and unpredictable exponential increase
  4. 4. BCP Project & Process Business Impact Analysis Risk Analysis Recovery Strategy Group Plans and Procedures Business Continuity Planning Initiation Risk Reduction Implement Standby Facilities Create Planning Organization Testing PROCESS Change Management Education Testing Review Policy ScopeResourcesOrganization On- going Process Project
  5. 5. Strategy Optimization Recovery strategy must be optimized to business requirements Time CostofStrategy Mitigation LostRevenue Optimum Mitigation Strategy
  6. 6. Structure
  7. 7. ISM GDC Sites 3 x redundancy ITS GBS ITS Kuwait 3 x sites in place • Main site @Pyramids • Primary Backup located ITS GBS @Freezone 60km away • Secondary backup located in Kuwait 1,500Km away 3 x Redundancy • Communication IP • Voice • Workplace
  8. 8. 3 x Contingencies Offices • Egypt - Pyramids Office • Egypt - Free Zone Office • Egypt- Home Office • Remote - Country Office (Kuwait) Telecom • MPLS, Fiber • Satellite • Wimax /Microwave • 3G • All IP Voice/Data
  9. 9. ISM 3 Threats Levels Levels identify the readiness • Red Badge trigger BCP activation • Yellow Badge readiness BCP activation • Green Badge normal operations Risk Possibility of Risk Normal Operations
  10. 10. Portal all Documentation
  11. 11. ISM Regular Periodical Test ISM hold 4 tests on 2013 for readiness No Test Name Result Test Date 1 Emergency Evacuation Pass 1/6/2013 2 BCP Walkthrough Pass 11/6/2013 3 Work from Home Pass 17/6/2013 4 IT Recovery Test Plan Pass 21/6/2013
  12. 12. Business Continuity timeline Active Business A successful recovery
  13. 13. ISM 3 Major Incidents Lighting striked 3 times…. No Incident Date 1 Fiber Cable Cut Jan-Feb 2008 2 Egyptian revolution 25 Jan 2011 3 Egyptian revolution 30 June 2013
  14. 14. Submarine cable cut
  15. 15. Success Incident Cut of fiber cable PH, 2 fiber cable Pyramids office with internet + telephone line cut for 12h activate loss of communications, • Used satellite connection • business services transfer to disaster recovery site • Transfer Operation team to backup site
  16. 16. 25 Jan 2011 Egypt Revolution Phase 1
  17. 17. Success Incident 25 Jan 2011 Revolution, Telecommunications cut during 25 Jan revolution: • mobile phone • Internet service providers Activated loss of communications and loss of facility scenarios • business services were transferred to Kuwait • Backup team in Kuwait operated business services. • team start operation using backup satellite connection, Microwave • work from home.
  18. 18. 30 June 2013 Egypt Phase 2
  19. 19. Successful Incident 30 June 2013 Revolution activated losing of facility scenarios, • Operation team work form home using VPN • business services transfer to disaster recovery located in Kuwait
  20. 20. Lessons Learned 1.Plan for the worst case 2.Expect the unexpected 3.Test, Test, Test 4.Regular drills valuable 5.Updated doc regularly 6.Certification extra value
  21. 21. Questions

×