World Continuity Congress conference on 7th October 2015 at Pullman Putrajaya Lakeside by BCM Institute

2. 1
CRISISANDDISASTER LEADERSHIP:
NAVIGATING THEPATHTOBUSINESS
CONTINUITY MANAGEMENT EXCELLENCE
Pullman Putrajaya Lakeside
7 October 2015
WORLD CONTINUITY CONGRESS
MALAYSIA 2015
DR. SUHAZIMAH BINTI DZAZALI
Deputy Director General (ICT)
Malaysian Administrative Modernisation And Management
Planning Unit (MAMPU), Prime Minister’s Department

3. 2
ONLINE SERVICES AS AN IMPROVEMENT TO
PUBLIC SECTOR SERVICE DELIVERY
MAMPU AGENCY
1Gov*Net
Online Services
Mobile
Services &
Apps
Digitisation
of Documents
Paperless
Government
Integrated
Services
Shared
Services
MTSA
my1Login
PUBLIC SECTOR INITIATIVES
Government
Agency Portal
Bank Portal Mobile Kiosk
Agency
Counter
1MOCC
MULTI-CHANNEL SERVICE

4. 3
GOVERNMENT ICT FOCUS AREA
Strengthening ICT
Governance
Strengthening
Service Delivery
System
Strengthening
Infrastructure &
Infostructure
Collaborative
Strategic
Increased
Capability, Capacity
& Competence
Compliance &
Reliability
Open Innovation &
Engagement

5. 4
CURRENT GOVERNMENT INITIATIVES TO COMBAT
SECURITY THREATS
Malaysia Government Security Operation Center (MyGSOC)
Government Computer Emergency Response Team (GCERT)
Government Public Key Infrastructure (GPKI)
Data Leakage Protection (DLP)
Malaysian Trustmark Public Sector Services (MTSA)
Business Continuity Management (BCM) Public Sector Agencies
Certification of Information Security Management System MS
ISO/IEC 27001:2007 and ISO/IEC 27001:2013

6. 5
COLLABORATIVE EFFORTS
• Effective internetworking between various government agencies in
the wake of modern APTs and Internet of Things (IoT)
Government
Agencies Industries
• PIKOM
• Open Gov Asia
International
Bodies
• United
Nations (UN)
• Open Data
Institute UK
Higher
Education
Institutions
• IPTA
• IPTS
Government
Link
Companies
• MDeC
• CyberSecurity
Malaysia
• MIMOS
• MCMC
• SIRIM
• MKN
• CGSO

7. 6
NEXT STEPS - GOVERNMENT INITIATIVES
OF CYBER SECURITY
Compliance
&
Relaibility
Digital ID
Comprehensive Framework
for Cyber Security Public
Sector
Strengthening the
monitoring & control of
cyber security incidents
through synergies MyGSOC
& GCERT
Strengthen and expand the
Data Leakage Protection
ISMS, BCM & DRP
acculturation
Extended Malaysian
Trustmark Public Sector
Services
Empower ICTSO
Extended implementation
of Information Security
Governance, Risk and
Compliance (ISGRC

8. 7
GOVERNMENT PROACTIVE INITIATIVES – BCM
Implementation Directive on
business continuity management in
Malaysian Public Sector
Directive from Director General
MAMPU Prime Minister’s
Department dated 22 January 2010

9. 8
GOVERNMENT IMPLEMENTATION – BCM
What MAMPU has done
Activities Year of Implementation
A BCM Planning 2010 2011 2012 2013 2014 2015
1 Establish a management structure
MAMPU
&
frontline agencies
“Critical service” agencies in public
sector
2 Management awareness session
3 Preparation of terms of reference
B Determining strategic business continuity management
1 Risk assessment
2 Business impact analysis
3 BCM strategy
C Plan Development
1 Preparation of Crisis Management Plan, Emergency
Response Plan, Disaster Recovery Plan & Communication
Plan
2 Establish alternative site
D Implementation of BCM
1 Awareness & training program
2 Testing & simulation program
3 Maintenance program
4 Audit
Statistics of BCM implemention
- 134 Govt. agencies

10. 9
RECENT FLOOD DISASTER
(20 – 31 December 2014)
 Force majeure - flood hit in East Coast of Peninsular
Malaysia
 The worst flood in decades
Hospital Kota Bharu badly affected The destruction of a school computer center
in Pahang

11. 10
IMPACT OF FLOOD DISASTER
Number of agency
affected
• Federal Govt.
agency - 246
• State agency - 36
Cost of Damage
(RM)
• Federal Govt.
agency - RM11.68
mil.
• State agency –
RM0.97 mil.
Cost of Recovery
(RM)
• Federal Govt.
agency -12.2 mil
• State agency – 1.3
mil.
DENIAL OF SHARED SERVICES
Government Network (1Gov*Net) – 439 Govt. agency offices

12. 11
Collaborative efforts:
Data recovery for servers, PC and laptops
Government network recovery, 1Gov@Net
BCM and DRP advisories
DISASTER RECOVERY STRATEGY
26 February 2015 (92.48%) 1Gov*Net recovery in
406 Govt. agency offices

13. 12
GOVERNMENT MONITORING INITIATIVES – BCM
- Government agencies to
review, test, simulate and
update BCP regularly
- BCM acculturation throughout
the Public Sector

14. 13
CONCLUSION
Government direction for Public Sector agencies
– Consolidation of Data Centre (DC) and Disaster
Recovery Centre (DRC) services
– BCP Audit Implementation
– ISO 22301 Certification
Disaster Recovery Center
services
Data center

15. 14
THANK YOU.