Business Continuity/Disaster Recovery Planning Berkeley County Chamber of Commerce 7/20/12

Transcription

1 Business Continuity/Disaster Recovery Planning Berkeley County Chamber of Commerce 7/20/12 Ben Fleming, Jr. Santee Cooper Manager, Transmission Operations

2 Agenda Importance Purpose Basic Necessities Program Management IT Disaster Recovery Plan

3 Importance Up to 40% of businesses impacted by natural or human caused disaster never reopen Customer expectations Insurance is only partial solution it does not replace lost customers Perception is reality need to be able to reach out to customer base as quickly as possible

4 Purpose Protect the safety of employees, visitors, contractors and others at risk from hazards at the facility. Plan for persons with disabilities and functional needs. Maintain customer service by minimizing interruptions or disruptions of business operations Protect facilities, physical assets and electronic information Prevent environmental contamination Protect the organization s brand, image and reputation

5 Basic Necessities Fresh Water Supplies 1 gallon per person per day plus water purification tablets Food canned foods (soups, stews, chili, pasta, fruits & vegetables), energy bars, dried foods, nuts, peanut butter, instant coffee/tea, disposable plates, cups and utensils and non-electric can opener Flashlights with fresh and spare batteries, portable radio with fresh and spare batteries, cell phones with chargers, candles & matches First Aid Kits/Medications Fuel for portable stoves/grills, lanterns, generators, chainsaws Electrical Uninterruptible power supply (UPS), standby or portable generators CAUTION Treat all downed power lines as energized Do not come into close proximity

6 Power Restoration

7 Plan Development One BCP for organization or multiple with each business unit creating its own (must be integrated) Include suppliers and large customers in planning process We update our plans annually and train employees on their responsibilities twice per year

8

9 Planning Risk Assessment Business Impact Analysis Hazard Prevention & Deterrence Risk Mitigation

10 Risk Assessment

11 Business Impact Analysis Lost Sales & Income Delayed Sales & Income Increased Expenses (overtime, outsourcing, expediting costs, etc.) Regulatory Fines Contractual penalties or loss of contractual bonuses Customer dissatisfaction or defection Delay of new business plans

12

13 Hazard Prevention & Deterrence Hazard Prevention Resources OSHA, Local Fire Department, Insurance Company, etc. Deterrence: a strategy to prevent criminal activity secure all entrances, lighting, up to date security system, educate employees (local law enforcement can be an excellent resource) For hurricanes, board or shutter windows Cyber Security Anitvirus and anti-spyware software plus strong firewalls

14 Risk Mitigation Address shortcomings identified in previous steps: implement recommendations, ensure that insurance coverage is adequate. Make identified improvement in physical and cyber security Uninterruptible Power Supplies (UPS) and/or standby generator for critical equipment Business Continuity Plan

15 Implementation Resource Management Emergency Response Plan Crisis Communication Plan Business Continuity Plan Information Technology Plan Employee Assistance & Support Incident Management Training

16 Testing & Exercises Train personnel; clarify roles and responsibilities review every six months Reinforce knowledge of procedures, facilities, systems and equipment Improve individual performance as well as organizational coordination and communications Evaluate policies, plans, procedures and the knowledge and skills of team members Reveal weaknesses and resource gaps Comply with local laws, codes and regulations Gain recognition for the emergency management and business continuity program

17 Program Improvement Program Reviews from testing & exercises and from actual incidents Lessons learned from other businesses Best Practices FEMA l/santeecooper/mybusiness l/santeecooper/aboutus/poweroutages/schurrica nebrochure2010.pdf

18 IT Disaster Recovery Plan Compile inventory of hardware, software applications, and data IT Recovery Strategies developed to anticipate the loss of one or more of: Computer room environment Hardware Connectivity to a service provider Software applications Data and restoration Data Backup

19 IT Recovery Strategies Internal Recovery Strategies multiple sites hardware, software applications, and data mirrored between the two sites Vendor Supported Recovery Strategies data centers that provide hot sites Data Backup performed as frequently as necessary to ensure that if data is lost it is not unacceptable to BIA can be accomplished using hardware (security & offsite storage issues must be addressed) or by vendor supported storage in the cloud

20 QUESTIONS?