Mission Continuity Program Elements of the BETH3 Model: Loss of Human Resources



Similar documents
Mission Continuity Program Elements of the BETH3 Model: Loss of Technology

ITSM Tools Operation Continuity Plan Example

EMERGENCY MANAGEMENT POLICY

Business Continuity Planning and Disaster Recovery Planning

IT Disaster Recovery Plan Template

Contingency Planning and Disaster Recovery for BOMA

DRAFT Disaster Recovery Policy Template

NEEDS BASED PLANNING FOR IT DISASTER RECOVERY

Business Continuity Overview

Q uick Guide to Disaster Recovery Planning An ITtoolkit.com White Paper

Business Continuity Planning - A Look at Texas A&M University s Approach to Continuity Planning

BUSINESS CONTINUITY PLANNING GUIDELINES

CISM Certified Information Security Manager

How to Design and Implement a Successful Disaster Recovery Plan

<Client Name> IT Disaster Recovery Plan Template. By Paul Kirvan, CISA, CISSP, FBCI, CBCP

Clovis Municipal School District Information Technology (IT) Disaster Recovery Plan

Overview of Business Continuity Planning Sally Meglathery Payoff

Offsite Disaster Recovery Plan

Disaster Recovery Plan

Disaster Recovery and Business Continuity Plan

BUSINESS CONTINUITY MANAGEMENT PLAN

BUSINESS IMPACT ANALYSIS.5

Department of Information Technology Data Center Disaster Recovery Audit Report Final Report. September 2006

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA

Continuity of Operations Planning. A step by step guide for business

Disaster Recovery Plan Checklist

BUSINESS CONTINUITY PLAN OVERVIEW

BUSINESS CONTINUITY PROGRAM (BCP) HANDBOOK FOR DEPARTMENT BCP TEAMS

NAIT Guidelines. Implementation Date: February 15, 2011 Replaces: July 1, Table of Contents. Section Description Page

Course Outline: Course 6317: Upgrading Your SQL Server 2000 Database Administration (DBA) Skills to SQL Server 2008 DBA Skills

Disaster Recovery Policy

Business Resiliency Business Continuity Management - January 14, 2014

Emergency Operations California State University Los Angeles

Cisco Disaster Recovery: Best Practices White Paper

Business Continuity Planning Instructions

Performance Indicators for Disaster Recovery

Administering Team Foundation Server 2013

Business Continuity Plan

Comprehensive Emergency Management Plan (CEMP) Annex V CONTINUITY OF OPERATIONS PLAN (COOP)

Ohio Supercomputer Center

Eastern Illinois University information technology services. strategic plan. January,

BUSINESS CONTINUITY MANAGEMENT REQUIREMENTS FOR SGX MEMBERS NEW RULES FOR INCLUSION IN SGX-ST RULES

Disaster Recovery Planning Procedures and Guidelines

Virginia Commonwealth University School of Medicine Information Security Standard

IT Disaster Recovery and Business Resumption Planning Standards

Subject: Internal Audit of Information Technology Disaster Recovery Plan

PAPER-6 PART-4 OF 5 CA A.RAFEQ, FCA

Massachusetts Institute of Technology. Functional Area Recovery Management Team Plan Development Template

Continuity of Business

Business Continuity. Port environment

Technology Recovery Plan Instructions

Disaster Recovery Planning

BUSINESS CONTINUITY PLAN (TEMPLATE)

Course Outline: Introducing Cisco Voice and Unified Communications Administration

Attachment N CPIC Vendor Resiliency Business Continuity Planning Questionnaire

Disaster Recovery Planning Process

SAMPLE IT CONTINGENCY PLAN FORMAT

Oracle Fixed Scope Services Definitions Effective Date: October 14, 2011

Business Continuity Planning in IT

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT

Integrated Healthcare, Hospital and Medical Contingency Planning

I.T. Service Management

Overview of how to test a. Business Continuity Plan

Clinic Business Continuity Plan Guidelines

Fire Department Guide. Creating and Maintaining Business Continuity Plans (BCP)

Service Organization Controls 3 Report. Report on Hyland Software, Inc. s OnBase Online Cloud Platform, relevant to Security and Availability

Clinic Business Continuity Plan Guidelines

Disaster Recovery Planning

Data Center Assistance Group, Inc. DCAG Contact: Tom Bronack Phone: (718) Fax: (718)

Why Should Companies Take a Closer Look at Business Continuity Planning?

Business Continuity Planning (800)

Services Providers. Ivan Soto

Table of Contents ESF

Disaster Recovery and Business Continuity Planning Workshop. Jane Drews University IT Security Officer June 30, 2009

MANAGEMENT AUDIT REPORT DISASTER RECOVERY PLAN DEPARTMENT OF FINANCE AND ADMINISTRATIVE SERVICES INFORMATION TECHNOLOGY SERVICES DIVISION

DISASTER RECOVERY AND CONTINGENCY PLANNING CHECKLIST FOR ICT SYSTEMS

Statement of Guidance

Cornell University RECOVERY PLAN

MULTI-AGENCY EMERGENCY PREPAREDNESS AT SELECTED STATE AGENCIES. Report 2007-S-29 OFFICE OF THE NEW YORK STATE COMPTROLLER

IT Service Continuity Management PinkVERIFY

Assessment of natural hazards, man made hazards, technical and societal related risks and associated impact.

IT Contingency Planning: IT Disaster Recovery Planning

Transcription:

Mission Continuity Program Elements of the BETH3 Model: Loss of Human Resources Anita Gelburd, Project Manager April 16, 2014

4/16/2014 Loss of Human Resources Presentation 2

Purpose of today s presentation Review: University's Mission Continuity initiative Overview of the BETH3 model How it functions within the Mission Continuity effort at Penn More in-depth information about Loss of Human Resources plans 4/16/2014 Loss of Human Resources Presentation 3

Mission Continuity: vision Develop sustainable, University-wide program Uphold core missions of the University (research, teaching, service) Continue programs and systems that may be impacted or threatened in the case of a disruption to normal operations, a crisis, or a disaster. 4/16/2014 Loss of Human Resources Presentation 4

Some definitions Emergency response vs. continuity of operations Immediate actions vs. keeping critical functions of the organization going Critical functions, processes or operations Necessary to keep key University services running Incident response Usually for loss of facility Includes evacuation, e.g. Disaster recovery Recovering lost technology 4/16/2014 Loss of Human Resources Presentation 5

Mission Continuity Program (MCP) Structure Program Sponsors Executive Vice President & Provost School and Center Leadership Plan Owners Program Owners EVP Special Projects Provost Admin Affairs ISC Admin Systems MCP Roundtable Policy & Procedures Team (School and Center Representatives and Subject Matter Experts) Project Management ISC Mission Continuity Liaisons School & Center end-users Communications Web site Tools & Resources Report Development Training Knowledge Building Modules Instructor-led training Working Groups Continuity of Teaching Continuity of Research End-User Group

History: criticality filters Spring/summer 2008: criticality filters completed by Schools and Centers Contents: Inventory of critical functions and assets needed to maintain an organization s mission Information on desired or required recovery time Whether recovery plans were in place Raised awareness 4/16/2014 Loss of Human Resources Presentation 7

What we learned: oh, no! Over 2000 processes, functions or assets deemed critical i.e., needed to be restored within 5 days Nearly 30% were deemed necessary to be restored within 24 hours Over 2/3 reported there were no plans 4/16/2014 Loss of Human Resources Presentation 8

Results of the criticality filter Assembled committee to choose software ISC, OACP, PSOM, Purchasing, EVP, Provost s Office Database software Shadow-Planner selected winter 2009 Web-based Configured and piloted FY09 4/16/2014 Loss of Human Resources Presentation 9

Structure: Mission Continuity Leadership Provide structure for Schools and Centers to develop plans Work with Mission Continuity Representatives and Plan Liaisons Provide training and additional support askmc@lists: e-mail for help Website Monthly user group meetings 4/16/2014 Loss of Human Resources Presentation 10

Structure, cont.: Schools and Centers 1. Determine their organization s planning strategy and needs Centralized vs. distributed model; PSOM probably do a combination Staff needing training 2. Develop Mission Continuity Foundation Plans 3. Enter plans into Mission Continuity system 4. Test and maintain plans 4/16/2014 Loss of Human Resources Presentation 11

4/16/2014 Loss of Human Resources Presentation 12

Foundation Plan Components defined by Provost and EVP Critical processes and functions Call lists Roles and responsibilities Building/facility information Necessary equipment and supplies Key technology and system applications Vital documents Key third-party vendor/partner information 4/16/2014 Loss of Human Resources Presentation 13

Foundation Plan Methodology: BETH3 Loss of Building Loss of Equipment Includes vital documents Loss of Technology Loss of Human Resources Loss of Third-party Vendors/Partners 4/16/2014 Loss of Human Resources Presentation 14

Loss of Human Resources plans Two categories: 1. Loss of key personnel, e.g.: Management People who have no back-ups/redundancy Those designated as essential staff 2. Loss of large percentage of personnel, e.g.: Flu epidemic 4/16/2014 Loss of Human Resources Presentation 15

HR considerations Adequate planning often requires actions in advance of outage or emergency, rather than just reactive procedures Storing job descriptions/instructions Determining and training back-up personnel Training people in using workarounds Consider alternatives Temporary workers? May involve interaction with vendors or other external partners 4/16/2014 Loss of Human Resources Presentation 16

Loss of key personnel Determine who they are Determine what they do Load information into Shadow-Planner or Box or both Determine strategy if they re not there, e.g.: Determine critical responsibilities Develop workarounds Distribute responsibilities 4/16/2014 Loss of Human Resources Presentation 17

Loss of large proportion of staff Check for flu epidemic plans from 2009 as a starting point Determine critical office functions Determine who among remaining staff can perform these Determine workarounds if possible Decide about temporary staff replacement if possible 4/16/2014 Loss of Human Resources Presentation 18

Continuity of Operations Determine critical functions Identify workarounds in advance Make sure people are trained in using them Identify alternatives Make sure there can be a smooth transition to the alternative system Develop and activate communications plan if necessary, including internal communications Contact people who use the technology Regularly Send regular updates 4/16/2014 Loss of Human Resources Presentation 19

Foundation Plan Structure Plan structure in database (Shadow-Planner) Triggers, Actions, Responsible persons, Procedures When, What, Who, How How it looks in the database 4/16/2014 Loss of Human Resources Presentation 20

Triggers: often time-related Duration Technology unavailable for: 3 hours 1 day 1-3 days 3 days - 1 week 1-3 weeks 3 weeks to 1 semester Time of year Summer vs. academic year Time of day During business hours After hours 4/16/2014 Loss of Human Resources Presentation 21

Sample plans: Continuity of Teaching/Research Committees assembled 2009-2010 Representatives from undergraduate Schools and several Centers Concerned with continuity of instruction or research in the event of any kind of outage Total of 10 sample plans (BETH3) usable by any School Also usable by Centers as plan templates 4/16/2014 Loss of Human Resources Presentation 22

Constructing a plan Start with Pre-Planning Questionnaire (PPQ) Available on Mission Continuity website Use for Interviews Ask relevant people to complete all or part of it Make into plan in a spreadsheet template Template available on Mission Continuity website Cut and paste information into Mission Continuity tool 4/16/2014 Loss of Human Resources Presentation 23

Mission Continuity training and support Knowledge Link -- Mission Continuity Planning Curriculum: Mission Continuity Knowledge Building module Mission Continuity: Shadow-Planner Application Information Security and Privacy PLUS: Additional site visits and workshops on demand Website Monthly user group meetings askmc@lists 4/16/2014 Loss of Human Resources Presentation 24

Finding us Website: www.upenn.edu/missioncontinuity Questions? askmc@lists.upenn.edu Shadow-Planner: http://missioncontinuity.upenn.edu 4/16/2014 Loss of Human Resources Presentation 25