Contingency Planning and Disaster Recovery for BOMA

Transcription

1 Contingency Planning and Disaster Recovery for BOMA Steve Elliot President & CEO Elliot Consulting

2 Hazards & Vulnerabilities

3 Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES

4 Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES INCIDENT COMMAND CONTROL & CONTAINMENT DAMAGE ASSESSMENT INCIDENT FACILITIES RESTORATION BUSINESS RESTORATION

5 Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES INCIDENT COMMAND CONTROL & CONTAINMENT Restored Business Processes DAMAGE ASSESSMENT INCIDENT FACILITIES RESTORATION BUSINESS RESTORATION

6 Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES INCIDENT COMMAND CONTROL & CONTAINMENT Restored Business Processes 1. CUSTOMER SERVICE DAMAGE ASSESSMENT INCIDENT FACILITIES RESTORATION BUSINESS RESTORATION LEVEL OF TOLERANCE

7 What Should We Do?

8 Before, During and After

9 Types of Plans Business Contingency Proactive Process Disaster Recovery Reactive Process Enterprise-wide IT / Facilities-Focus Strategic Plan Break-Fix Plan Business and People Things and Recovery Time

10 Basics of Contingency Planning Who? What? When? Where? How? Why?

11 Scenario-Based Planning How Many Types of Plans Do We Need? Denial of access to facilities Denial of access to systems & information Loss of staff (Health, Hiring, Catastrophe) Loss of critical vendors or supply chain disruption

12 Practical Lessons Learned: Before, During and After

13 Elements of a Business Resiliency Plan Protect Protect Protect Protect the People the Information and Systems the Physical Facilities the Critical Business Operations Challenge and Confirm your Assumptions

14 Proactive Planning: #1 - Protect The People Communicate the plan Cross-train / Alternates Special skills of employees Balance Family vs. Job Corporate HR Policies Loyalty / Community Image Grief Counseling

15 Proactive Planning: #2 - Protect The Information Data protection Virtualization / Off-site & core applications Voice communications Vital Records Work-around procedures? Remote Worker options? Network security

16 Insurance Proactive Planning: #3 - Protect The Facilities Physical security & safety Protect equip. / merchandise Secure hazardous materials Pre-arrange key contractors Alternate work locations

17 Proactive Planning: #4 - Protect Critical Business Operations Enterprise risk management All hazards approach SPF s & Dependencies Inspect what you expect Assemble Grab n Go Kits Stockpile emergency supplies Sources of cash

18 Crisis Management: What should we do in first 24 hours? Incident Management Team Assess the threat / response Evacuate / Assemble / Headcount Notification & Communication Command center Flexibility & Options Media spokesperson

19 Recovery & Restoration: Standard Practices Staff recall strategy Damage Assessment Team Re-entry requirements Photos of damage Dave Smith ABC, Inc. Recovery contractors Activate IT & business unit recovery Restore business operations

20 Recovery & Restoration: How long before life is back to normal? Access to office Utilities restored Phone service / Data network Locate employees Contact suppliers & customers Hidden mold damage Insurance settlements Acceptable data loss Denial of access to facilities Downtime Tolerance

21 What s Your Plan?

22 Steve Elliot, President & CEO Elliot Consulting, Inc