Contingency Planning and Disaster Recovery for BOMA Steve Elliot President & CEO Elliot Consulting
Hazards & Vulnerabilities
Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES
Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES INCIDENT COMMAND CONTROL & CONTAINMENT DAMAGE ASSESSMENT INCIDENT FACILITIES RESTORATION BUSINESS RESTORATION
Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES INCIDENT COMMAND CONTROL & CONTAINMENT Restored Business Processes 1. 2. 3. 4. 5. 6. DAMAGE ASSESSMENT INCIDENT FACILITIES RESTORATION BUSINESS RESTORATION
Continuity of Business Operations Normal Business Processes SALES MANUFACTURING SHIPPING & RECEIVING FINANCE INFORMATION TECHNOLOGY HUMAN RESOURCES ENVIRONMENT H&S FACILITIES UTILITIES INCIDENT COMMAND CONTROL & CONTAINMENT Restored Business Processes 1. CUSTOMER SERVICE 2. 3. 4. 5. 6. DAMAGE ASSESSMENT INCIDENT FACILITIES RESTORATION BUSINESS RESTORATION LEVEL OF TOLERANCE
What Should We Do?
Before, During and After
Types of Plans Business Contingency Proactive Process Disaster Recovery Reactive Process Enterprise-wide IT / Facilities-Focus Strategic Plan Break-Fix Plan Business and People Things and Recovery Time
Basics of Contingency Planning Who? What? When? Where? How? Why?
Scenario-Based Planning How Many Types of Plans Do We Need? Denial of access to facilities Denial of access to systems & information Loss of staff (Health, Hiring, Catastrophe) Loss of critical vendors or supply chain disruption
Practical Lessons Learned: Before, During and After
Elements of a Business Resiliency Plan Protect Protect Protect Protect the People the Information and Systems the Physical Facilities the Critical Business Operations Challenge and Confirm your Assumptions
Proactive Planning: #1 - Protect The People Communicate the plan Cross-train / Alternates Special skills of employees Balance Family vs. Job Corporate HR Policies Loyalty / Community Image Grief Counseling
Proactive Planning: #2 - Protect The Information Data protection Virtualization / Off-site E-mail & core applications Voice communications Vital Records Work-around procedures? Remote Worker options? Network security
Insurance Proactive Planning: #3 - Protect The Facilities Physical security & safety Protect equip. / merchandise Secure hazardous materials Pre-arrange key contractors Alternate work locations
Proactive Planning: #4 - Protect Critical Business Operations Enterprise risk management All hazards approach SPF s & Dependencies Inspect what you expect Assemble Grab n Go Kits Stockpile emergency supplies Sources of cash
Crisis Management: What should we do in first 24 hours? Incident Management Team Assess the threat / response Evacuate / Assemble / Headcount Notification & Communication Command center Flexibility & Options Media spokesperson
Recovery & Restoration: Standard Practices Staff recall strategy Damage Assessment Team Re-entry requirements Photos of damage Dave Smith ABC, Inc. Recovery contractors Activate IT & business unit recovery Restore business operations
Recovery & Restoration: How long before life is back to normal? Access to office Utilities restored Phone service / Data network Locate employees Contact suppliers & customers Hidden mold damage Insurance settlements Acceptable data loss Denial of access to facilities Downtime Tolerance
What s Your Plan?
Steve Elliot, President & CEO Elliot Consulting, Inc. 813-792-8833 selliot@elliot-consulting.com www.elliot-consulting.com