Joshua Allen, MPA Risk Management, Safety & Security Business Continuity Planning



Similar documents
Business Continuity Planning for Schools, Departments & Support Units

CONTINUITY OF OPERATIONS PLANNING

Pandemic Preparedness Plan

RLI PROFESSIONAL SERVICES GROUP PROFESSIONAL LEARNING EVENT PSGLE 125. When Disaster Strikes Are You Prepared?

Ohio Supercomputer Center

Desktop Scenario Self Assessment Exercise Page 1

Business Continuity Management Review

Business Continuity Plan

Business Continuity Plan

2014 NABRICO Conference

Continuity of Operations Planning. A step by step guide for business

Business Continuity Planning for Risk Reduction

Table of Contents... 1

BUSINESS IMPACT ANALYSIS.5

Introduction to Business Continuity Planning. PCDC Introduction. Objectives. MPCA Series on Business Continuity Planning

Independent Study Program (ISP)

TRENDS IN BUSINESS CONTINUITY AND CRISIS COMMUNICATIONS SURVEY

Business Continuity Management

UNION COLLEGE SCHENECTADY, NY EMERGENCY MANAGEMENT PROCEDURES

This presentation will introduce you to the concepts and terminology related to disaster recovery planning for businesses.

Beyond Effective Security. The Art and Science of Business Continuity Planning

With the large number of. How to Avoid Disaster: RIM s Crucial Role in Business Continuity Planning. Virginia A. Jones, CRM, FAI RIM FUNDAMENTALS

Fire Department Guide. Creating and Maintaining Business Continuity Plans (BCP)

Western Washington University Basic Plan A part of Western s Comprehensive Emergency Management Plan

Business Continuity and Disaster Recovery Planning

Business Continuity Planning for Water Utilities: Guidance Document [Project #4319]

Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD.

The Importance of Having a Plan: Business Continuity 101. August 5, 2015 Gail Moraton, CBCP Business Resiliency Manager Nashville, TN

Business Continuity Planning Toolkit. (For Deployment of BCP to Campus Departments in Phase 2)

BUSINESS CONTINUITY PLAN OVERVIEW

BUSINESS CONTINUITY PLANNING GUIDELINES

Medical Emergency Preparedness Plan

Prepared by Rod Davis, ABCP, MCSA November, 2011

Evaluating and Improving Your Business Continuity Plan

Intel Business Continuity Practices

Statement of Business Continuity Management

Application / Hardware - Business Impact Analysis Template. MARC Configuration Requirements. Business Impact Analysis

Virginia Commonwealth University School of Medicine Information Security Standard

Beyond Disaster Recovery: Why Your Backup Plan Won t Work

Business Resiliency Business Continuity Management - January 14, 2014

North Carolina Emergency Management. Preparedness, Response & Long-Term Recovery

UCF Office of Emergency Management Strategic Plan

Business Continuity Planning

Regulatory Framework for Disaster Recovery Planning for the ICT Industry

Temple university. Auditing a business continuity management BCM. November, 2015

2015 CEO & Board University Taking Your Business Continuity Plan To The Next Level. Tracy L. Hall, MBCP

Building Economic Resilience to Disasters: Developing a Business Continuity Plan

L101 Foundations of Emergency Management Wirtz, VA Oct 5-30

Business Impact Analysis (BIA) and Risk Mitigation

Business Continuity Planning (800)

Business Continuity and Disaster Planning

DISASTER RECOVERY PLANNING GUIDE

UNITED CHURCH OF CHRIST LOCAL CHURCH DISASTER PREPAREDNESS AND RESPONSE PLANNING GUIDELINES

APPENDIX XII: EMERGENCY SUPPORT FUNCTION 12 - ENERGY

Business Continuity & Disaster Recovery

Business Continuity Planning (BCP) & Disaster Recovery Planning (DRP).

Continuity Planning and Disaster Recovery

LOUISIANA REHABILITATION SERVICES LOUISIANA DEVELOPMENTAL DISABILITIES REPORT June, 2008

Business Continuity and Disaster Recovery Planning 3/16/2011. Lee Goldstein CPCP, MBCI President Business Contingency Group

Business Continuity and the Cloud. Aaron Shaver US Signal, Solution Architect

BUSINESS CONTINUITY STRATEGY

Employee Safety Training

BUSINESS CONTINUITY PLANNING

Continuity of operations for critical infrastructure. Disclosure of critical information to the government.

THE USE OF TRIZ IN BUSINESS CONTINUITY PLANNING

Western Intergovernmental Audit Forum

Enterprise Resiliency & Response Program Customer Overview May 2014

Disaster Recovery & Business Continuity Dell IT Executive Learning Series

The University of Southern Mississippi National Center for Spectator Sports Safety and Security. Sport Event Security Aware Designation

DATA RECOVERY SOLUTIONS EXPERT DATA RECOVERY SOLUTIONS FOR ALL DATA LOSS SCENARIOS.

Business Continuity Planning Guide

ANNEX 24 ESF-24 - BUSINESS AND INDUSTRY

NIST SP , Revision 1 Contingency Planning Guide for Federal Information Systems

How To Plan A Crisis Management Program

Transcription:

Joshua Allen, MPA Risk Management, Safety & Security Business Continuity Planning

Why do we (institutions of higher education, IHE) need to worry about continuity? Impact to campus, downtime Operational Continuity: Research, Athletics, Auxiliary services, Housing, Parking Business Continuity: Administrative Services Academic Continuity: Online Courses, Spacing

Business interruption: $276M Building damage: $255M External campus cleanup: $67M Clinical equipment: $52M Infrastructure: $43M IT equipment: $12M Education replacement: $5M Evacuation: $4M

Higher Education, Exposure Sweat the small stuff Decrease recovery time and continue operations Use professional standards for ALL types of disasters or crises Not just the big one Routine Efficient Effective Implementation

It s good business practice Protects assets, cuts emergency costs, protects image Part of risk management process Prevent, protect, mitigate, prepare, respond, recover Identify trends and predict risks Promotes resiliency Ability of an organization to absorb the impact of a disaster, and continue to function at a minimum acceptable level Often the outcome of effective planning

List all of the functions/processes within the unit Effect of loss of function/process Loss of revenue/increased costs (cost per day) Legal liability, fines/penalties, public harm Loss of goodwill, other intangibles Ability to operate at reduced efficiency Recovery Time Objective (RTO) Key dependencies Contingency plans

You can t do it alone! Representative of all procedures Detail orientation

Staff Processes Equipment Supplies Paper Digital Contacts Back ups

What Where How When

A COOP may be needed when all is well abroad; not just in what our field would call an emergency situation. Your COOP May Not Be a Public Record NC General Statute 132 1.6 132 1.6. Emergency response plans. Emergency response plans adopted by a constituent institution of The University of North Carolina, a community college, or a public hospital as defined in G.S. 159 39 and the records related to the planning and development of these emergency response plans are not public records as defined by G.S. 132 1 and shall not be subject to inspection and examination under G.S. 132 6. (2001 500, s. 3.1.) Possible Scenarios Natural disasters tornadoes, hurricanes, earthquakes etc Human made disasters power outages, mechanical disasters, terrorism etc Pandemics local, regional and national is your campus part of the regional or larger disaster response plan? If you do not know this, you need to find out.

Your unit s mission keep this in mind for all planning and considerations How much of what you do is dependent on your campus base of operations (your office)? How much of your office can you replicate in another location including other campus sites and from home. ID your internal emergency communication systems Be sure to be connected to your campus (or organization s) emergency notification system

Plan your emergency access to data and systems Outline and rank your unit s critical functions and who will do these in the event of an emergency define to 3 levels of responsibility Define leadership succession Determine team leader, members and recovery task plans for each team member Identify your key internal (campus) dependencies Registrar Financial Aid Dean of Students Office

Identify your key external dependencies Insurance companies Partners, third party providers or direct enrollment schools Work from home plans for each staff member review and update (if needed) regularly Have an impact analysis prepared Why? To determine what kind of impact a disruption will have (operational or financial), and the associated implications such as failure to meet regulatory obligations including fines Operational Impact Examples Responding to student applications and inquiries Recruitment (fairs, tabling)

Financial Impact Examples Depositing credit card payments received Both Financial and Operational Examples Student safety overseas Disaster Responses Paying invoices due Mitigating Circumstances i.e., power out in the city Alternate work spaces On Campus Work from Home Other Campuses Beware public or other unsecure Wi Fi hotspots Plan to Exercise your COOP

New Orleans, Louisiana Private Historically Black & Catholic University Bachelors, Masters, Doctorate Degrees Two colleges: Arts and Sciences Pharmacy 3,500 students

4 10 semester study abroad students annually 10 20 short term participants annually 7 NEW exchange agreements 10 3rd party provider affiliations

Xavier has an emergency preparedness plan It includes the maintenance all of essential functions of the University Students abroad and those in the SA application process are uniquely effected by emergency situations Going forward, my unit should have a COOP to specifically address functions and processes for study abroad

Reviewed University Emergency Preparedness Plan Interviewed key personnel on campus Director of Risk Management VP of Academic Affairs Registrar Director of Internet Technology Center Director of Financial Aid

Functions/processes within the unit Effect of loss of function/process Ability to operate at reduced efficiency Recovery Time Objective (RTO) Key dependencies Contingency plans NEXT STEPS

FEMA EMI (Emergency Management Institute) Homepage http://training.fema.gov/programs/ Online Courses are Open to US Citizens Free of Charge American University s Emergency Management and Continuity of Operations Plan (114 pages) http://www.american.edu/emergency/loader.cfm?csmo dule=security/getfile&pageid=598967 Google It! Continuity of Operations Plan University

Joshua Allen, UNC Charlotte, jalle131@uncc.edu Kerry Geffert, American Institute For Foreign Study, kgeffert@aifs.com Torian Lee, Xavier University, LA, tllee@xula.edu Brad Sekulich, UNC Charlotte, sekulich@uncc.edu This Power Point is available at https://www3.uncc.edu/secure/edabroad/coop_pr_20 12.htm.