Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
Wayne Boone CD PhD CISSP CPP CISM CBCP PCIP
Patricia Moore BSc MLIS ABCP PCIP
Presented to DRIE Ottawa
03 June 2015
Background – Why did we do it?
 New core of BCP professionals at Carleton
 Serious deficiencies in BCM program at Carlet...
Introduction: EMCO Project Description
To develop an Emergency Management
& Continuity of Operations (EMCO)
Program for Ca...
Business Continuity & Disaster Recovery
Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 4
Situation at the time and way ahead
Way ahead – Routine Operations (Business as Usual)
Status Actions required
NEEDS ANALY...
Situation and way ahead (contd)
Way ahead - Response Phase
Status Actions required
NEEDS ANALYSIS
•Misunderstanding of ER ...
Situation and way ahead (contd)
Way ahead - Recovery Phase
Status Actions required
NEEDS ANALYSIS
•No priority established...
Situation and way ahead (contd)
Way ahead – Restoration Phase
Status Actions required
NEEDS ANALYSIS
•No priority of servi...
EMCO Project Objectives
Establishing an effective Business Continuity Planning Program
 Contributing to Asset Protection ...
 Cost-effective method
 Support for MIPIS program
 Knowledge transfer to Carleton staff
 Professional development
 Co...
Why EMCO? – Rationale (contd)
From Carleton’s perspective
 Providing “a safe environment, conducive to … intellectual
gro...
Why EMCO? – Rationale (contd)
 Mitigating the impacts of a major interruption by minimizing
• Casualties
• Data loss or c...
EMCO Program: Functional Governance Structure
President
Academic
Faculties
Library
EDC
Research Finance / Admin
Computing
...
Crisis Management Governance Structure
CM Dir
Operations Plans Logistics Finance / Admin
BCP
Coordinator
Crisis
Communicat...
EMCO Project Deliverables
 Establish an EMCO governance structure
 Conduct operational risk assessments including Busine...
Project Org Chart – with Teams
Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 16
• Students in leadership roles
• ...
Why are students interested?
Benefits of participation in community projects:
 Practical knowledge*
 Technical expertise...
Student Challenges
 Inadequate time (competing course work, and other
academic and personal responsibilities)*
 Reticenc...
Student experience - in their own words
Clint Grant
Stephen Mehta
Patricia Carson
Paul Konarski
Boone, Moore – Large B...
The Continuity Breakfast
Committed
Diagram: Boone, Moore 2013
20
Conclusions
 Results
• Ongoing
 Value to the University
• Increased awareness
• Frame to begin
 Value to the students
•...
Questions
Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 22
My understanding and application of
CIP doctrine rapid...
Thank you
Wayne Boone CD PhD CISSP CPP CBCP CISM PCIP
Adjunct Professor of Asset Protection and Security
Norman Paterson S...
Upcoming SlideShare
Loading in …5
×

Managing Large BCP Project - Hybrid Teams - DRIE Ottawa June 2015

156 views

Published on

Wayne Boone, Patricia Moore

Published in: Business
  • Be the first to comment

  • Be the first to like this

Managing Large BCP Project - Hybrid Teams - DRIE Ottawa June 2015

  1. 1. Wayne Boone CD PhD CISSP CPP CISM CBCP PCIP Patricia Moore BSc MLIS ABCP PCIP Presented to DRIE Ottawa 03 June 2015
  2. 2. Background – Why did we do it?  New core of BCP professionals at Carleton  Serious deficiencies in BCM program at Carleton  Limited funding  New (2010) applied, professional Master of Infrastructure Protection and International Security (MIPIS) program  Professional obligation • Practice the highest level of professionalism at all times • Practice and promote corporate continuity and disaster recovery concepts • Continually seek to increase our competence and the competence of those who work with us • Participate in continuing professional knowledge and skill improvement programs” Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 2
  3. 3. Introduction: EMCO Project Description To develop an Emergency Management & Continuity of Operations (EMCO) Program for Carleton University that will address the University’s current operational risk environment and align with industry best practices Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 3
  4. 4. Business Continuity & Disaster Recovery Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 4
  5. 5. Situation at the time and way ahead Way ahead – Routine Operations (Business as Usual) Status Actions required NEEDS ANALYSIS •Misunderstanding of EMCO requirements •Underestimation of threats, hazards, vulnerabilities and impacts •No formal risk management program •Conduct information briefings to Senior Staff and Line Managers •Initiate project to develop EMCO program framework RISK MANAGEMENT •Few current Threat Risk Assessments (TRAs) •Outdated BIAs •Decentralized, disjointed or untested contingency plans •No EMCO program •Identify high value assets & conduct TRAs •Update BIAs campus-wide •Develop prioritized BCPs/DRPs Test all BCPs/DRPs •Conduct training Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 5
  6. 6. Situation and way ahead (contd) Way ahead - Response Phase Status Actions required NEEDS ANALYSIS •Misunderstanding of ER vs EM •Overestimation of role and capabilities of Campus Safety Staff •Conduct information briefings to Senior Staff and Line Managers EMCO PROGRAM •Mature ER program •Mass notification system in effect •Good response by First Responders (Ambulance, Fire, Police) •Excellent liaison between Campus Safety and First Responders •Enhance notification capabilities Update Evacuation Plans •Train Building Authorities •Enhance ability to secure facilities •Enhance lockdown capabilities Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 6
  7. 7. Situation and way ahead (contd) Way ahead - Recovery Phase Status Actions required NEEDS ANALYSIS •No priority established for recovery of mission-critical functions •Confirm recovery priorities •Approval by senior management EMCO PROGRAM •No EOC •No executable BCP or DRP for campus as whole •Few individual BCPs or DRPs, fewer tested •Few alternate sites identified •Crisis Management Team (CMT) untrained •Construct and maintain an EOC •Ensure that CMT is trained and has appropriate depth of capable personnel •Ensure succession planning Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 7
  8. 8. Situation and way ahead (contd) Way ahead – Restoration Phase Status Actions required NEEDS ANALYSIS •No priority of services established for return to primary site •No plans for re-integration of information and processes •Confirm priority for return to primary site •Capture gaps, issues and lessons learned arising from incident EMCO PROGRAM •As noted in Recovery Phase •Continue training of CMT •Update all plans •Test all plans •Exercise all EMCO staff •Develop first level plans for replacement of key facilities •Develop plans for re-integration Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 8
  9. 9. EMCO Project Objectives Establishing an effective Business Continuity Planning Program  Contributing to Asset Protection and Security (AP&S) risk management including preparation, planning, mitigation  Mitigating the impacts of a major interruption by minimizing • Casualties • Data loss or corruption (including unique research) • Destruction of valued assets, including unique or sensitive holdings • Impact on services and business functions • Unnecessary financial outlays (stewardship) • Contributing to survival of Carleton as a learning institution Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 9
  10. 10.  Cost-effective method  Support for MIPIS program  Knowledge transfer to Carleton staff  Professional development  Community service EMCO Project Strategy Rationale Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 10
  11. 11. Why EMCO? – Rationale (contd) From Carleton’s perspective  Providing “a safe environment, conducive to … intellectual growth” by reducing impacts on personal safety from accidents, unauthorized access, attacks, workplace violence to “ensure a safe campus in which people feel secure”  “Process and methods … developed from a range of best practices” Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 11
  12. 12. Why EMCO? – Rationale (contd)  Mitigating the impacts of a major interruption by minimizing • Casualties • Data loss or corruption (including unique research) • Destruction of valued assets, including unique or sensitive holdings • Impact on services and business functions • Unnecessary financial outlays (stewardship) • Failure as an academic institution  Displaying due diligence  Protecting reputation Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 12
  13. 13. EMCO Program: Functional Governance Structure President Academic Faculties Library EDC Research Finance / Admin Computing (DRP) Safety (ER) Student Support & Registrar Supporting Business Lines Communications EMCO advisors BCP Coordinator ER advisor University advisors (normal University operations) Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 13
  14. 14. Crisis Management Governance Structure CM Dir Operations Plans Logistics Finance / Admin BCP Coordinator Crisis Communications CM Secretariat Liaison Officer EMCO advisors (post-incident) Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 14
  15. 15. EMCO Project Deliverables  Establish an EMCO governance structure  Conduct operational risk assessments including Business Impact Assessments (BIAs)  Develop & manage: • Emergency Response (ER) Plans • Business Continuity Plans (BCPs) • Disaster Recovery Plans (DRPs)  Update equipment requirements  Develop training and awareness plans and conduct exercises  Develop and exercise crisis communications plans Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 15
  16. 16. Project Org Chart – with Teams Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 16 • Students in leadership roles • Succession by developing team members
  17. 17. Why are students interested? Benefits of participation in community projects:  Practical knowledge*  Technical expertise and competence in specialty  Leadership opportunities *  Enhanced interviewing, information-gathering, analytical skills  Building confidence by applying knowledge  Teamwork, mentorship and networking*  Transferrable skills • Organizational and administrative • Information management • Meeting conduct  Populating the CV  Gaining relevant employment Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 17
  18. 18. Student Challenges  Inadequate time (competing course work, and other academic and personal responsibilities)*  Reticence on part of client to participate honestly*  Positional gap (hierarchy problems) between students and clients*  Credibility with interviewees (clients)  Difficulty in arranging meetings with clients, especially outside of core business hours Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 18
  19. 19. Student experience - in their own words Clint Grant Stephen Mehta Patricia Carson Paul Konarski Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 19
  20. 20. The Continuity Breakfast Committed Diagram: Boone, Moore 2013 20
  21. 21. Conclusions  Results • Ongoing  Value to the University • Increased awareness • Frame to begin  Value to the students • Unquestionable  Value to the technical advisors • Ditto Image: ©David Farley www.ibiblio.org/Dave/Dr-Fun/df200210/df20021001.jpg Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 21
  22. 22. Questions Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 22 My understanding and application of CIP doctrine rapidly accelerated due to the guidance of professionals, supervisors, and mentors The practicums are what transform my experience in the MIPIS Program from an academic to a true learning experience. I would do it again in a heartbeat Volunteering in projects provided the tacit knowledge required for effective professional development in the field of AP&S Gave me the confidence and ease to apply my studies in real day-to-day work settings [practicums] also taught me the importance and value of teamwork: how to collaborate and cooperate The practicums afforded the opportunity to see first hand how theory is implemented …the most important facet is the education that students receive outside of the classroom via the applied practicum, volunteer positions, and work placements
  23. 23. Thank you Wayne Boone CD PhD CISSP CPP CBCP CISM PCIP Adjunct Professor of Asset Protection and Security Norman Paterson School of International Affairs, Carleton University wayneboone@rogers.com (613) 863-2993 Patricia Moore BSc, MLIS, ABCP, PCIP Systems Librarian, Digital Projects and Technologies MacOdrum Library, Carleton University pmoore3415@gmail.com (613) 520-2600 ext. 2745 Boone, Moore – Large BCP Projects, Hybrid Teams - 2015 23

×