Virtualisation:- Business Continuity Solution or Enabler


Published on

Hargobind Singh Ahluwalia, The Agenci

Published in: Business, Economy & Finance
  • Be the first to comment

  • Be the first to like this

Virtualisation:- Business Continuity Solution or Enabler

  1. 1. Virtualisation: – BusinessContinuity Solution or Enabler? VMUG 17 April 2012 Leeds
  2. 2. Hargobind Singh Ahluwalia, Managing Director Agenci © Agenci Ltd 2012
  3. 3. Introductions Hargobind Singh Ahluwalia Managing Director at Agenci Ltd | secure business Business Continuity Consultant - RSA Emerging Markets Senior Risk Consultant: Deloitte IT Leader: GE Capital Solution ( Fleet Services)More than 15 years of experience in business governance, risk and compliance. Extensively worked ondelivering Information security and business continuity using industry standard frameworks.Hold industry certifications CISSP, CISA, ITIL. Trained in Six sigma.Accountability and responsibility for the delivery of Business Continuity across 21 countries. DevelopedBCM planning framework and training followed by delivering processes and training to build localcountry capabilities.Developed BCM and disaster recovery plans for businesses in Insurance, Retail banking, Finance,Fleet management sectors.Conducted design review of systems and interfaces for a Global Oil major, to define the scope ofdisaster recovery testing as part of the business continuity © Agenci Ltd 2012
  4. 4. BCM in © Agenci Ltd 2012
  5. 5. Olympics 2012 and BCM• Some of the areas where advice has been provided by various government organisations: • Staffing issues – attendance, leaves etc. • Internet services bandwidth and performance challenge • Mobile networks capacity • Transport challenges – travel and supplies• Good example of pro-active support in anticipation of a specific planned event/disruption. © Agenci Ltd 2012
  6. 6. Some potential disruptions• Travel disruptions due to icy conditions and inclement weather.• Social/political unrest leading to various disruptions. ( Riots in London, Unrest in Middle east).• Loss of key staff member/s.• Loss of key suppliers.• Loss of work premises due to flood, fire etc.• Pandemic © Agenci Ltd 2012
  7. 7. What if?• What would you do tomorrow if the office building was on fire today?• What would your staff do?• What would your customers do?• What would your competitors do?• What would your bank and shareholders do? © Agenci Ltd 2012
  8. 8. What is Business Continuity Management?Definition:“Business Continuity Management is anholistic management process thatidentifies potential threats to anorganisation and the impacts to businessoperations that those threats – if realized– might cause, and which provides aframework for building organisationalresilience with the capability for aneffective response that safeguards theinterests of its key stakeholders,reputation, brand, and value-creatingactivities”.© Business Continuity Institute © Agenci Ltd 2012
  9. 9. What does BCM deliver?Business continuity processes are designed to:• ensure people safety.• make sure staff are able to cope with the disruption.• minimise any risk of disruption to services.• ensure we can maintain our essential services.• ensure that if a disruption does occur, the main priority will be the recovery of key services within agreed timeframes.• Provide clear communications to staff, customers, stakeholders and management. People safety is your number one © Agenci Ltd 2012
  10. 10. What BCM is notBCM is not:• about “everything”.• just about IT disaster recovery.• about mitigating every possible threat to the business but aims to have an agreed response to un-predictable incidents.• just about reacting to an incident but preparing in advance.• not a professional specialist discipline but should be part of the business process in Business As Usual (BAU) © Agenci Ltd 2012
  11. 11. © Agenci Ltd 2012
  12. 12. Embedding BCM Embedding BCM in the organisation’s culture means: Understanding what is critical to our Business and the threats to our people or our processes Identifying options for recovering from incidents (large or small) that could disrupt Business as Usual BCM Policy and Making plans that enable buildings to be Programme Management quickly evacuated and Business Critical functions to be resumed as quickly as possible. Clearly defining roles and responsibilities Ensuring staff in all business areas and sites are involved in producing these plans and are trained to implement them. People and plans should be tested on a regular basis to: provide assurance plans will be effective as a training aid to improve the © Agenci Ltd 2012
  13. 13. Components of BCMEffective Business Continuity is built on 7 P’s:1. Programme – proactively managing the process2. People – roles & responsibilities, awareness &education3. Processes – all organisational processes,including ICT4. Premises – buildings & facilities5. Providers – supply chain, including outsourcing6. Profile – brand, image, reputation7. Performance – benchmarking, evaluation & © Agenci Ltd 2012
  14. 14. Business Continuity PlansBusiness Continuity Plans Definition: “A documented collection of procedures and information that have been developed, EMERGENCY MANAGEMENT CRISIS MANAGEMENT CONTINGENCY PLANS DISASTER RECOVERY PLANS BUSINESS RESUMPTION PLANS SPECIALIST PLANS – (e.g. Pandemic) Other? compiled and maintained in readiness for use in an incident, to enable an organisation to continue to deliver its important and urgent activities, at an acceptable and pre-defined level” • BCP can exist at any level from the whole organisation down to procedural detail within a department • BCP can be scoped by product, location, department and scenario • We cannot plan for everything – so ensure plans cover what is needed and at the right level • Plans do not need to be large and complicated - they need to be appropriate © Agenci Ltd 2012
  15. 15. Virtualisation benefits• Recovering from disaster related to IT infrastructure to improve up-time.• Better feasibility and recoverability for the infrastructure.• Can allow the IT function to dedicate more time supporting functional recovery.• When implemented correctly can assist DR process by shortening Recovery Point Objective and Recovery Time Objective.• Improves portability to a range of physical infrastructure.• When delivered for end-user devices can deliver quick turnaround during the Work Area © Agenci Ltd 2012
  16. 16. Summary• Like Risk Management, the responsibility for BCM rest on everyone’s shoulder and not just the BCM Manager.• Virtualisation is a great enabler for the technology recovery but there is much more to BCM.• BCM is the clear way to demonstrate to stakeholders that the company has prepared, and can effectively manage interruptions to it’s Business.• Having a embedded and tested BCM in the business demonstrate pro-active management and in many cases provide improvement opportunities.• Industry data proves that interruptions are inevitable for all organisations. "He who fails to plan is planning to fail“ Winston Churchill (and others!) © Agenci Ltd 2012
  17. 17. Questions? ? © Agenci Ltd 2012