BCP_Pres01.pdfVIP专享VIP免费原创优质

BusinessContinuityPlanningPresentationandDirectionThomasBronack,presidentDataCenterAssistanceGroup,Inc.1518020thAvenueWhitestone,NY11357Phone:(718)591-5553Email:bronackt@dcag.comWhatisBusinessContinuityPlanning?Planningtoensurethecontinuationofoperationsintheeventofacatastrophicevent.Businesscontinuityplanninggoesbeyonddisasterrecoveryplanningtoinclude:•theactionstobetaken,•resourcesrequired,and•procedurestobefollowedtoensurethecontinuedavailabilityofessentialservices,programs,andoperationsintheeventofunexpectedinterruptions.4/19/2012BusinessContinuityPresentation2KeyElements•DisasterRecovery•BusinessRecovery•ContingencyPlanning•CrisisManagement4/19/2012BusinessContinuityPresentation3BusinessContinuityPlan•IdentifyRisks-TriagetoassessallprocessesAllbusinessfunctionsDataSuppliersInfrastructure•DevelopPlansforEverything•TestandExercisethePlans•LayerBusinessPlan&DisasterPlan4/19/2012BusinessContinuityPresentation4CreateaBusinessContinuityManagementTeam•LeadbyTopManagement.•ProjectMonitoredbytheBoardofDirectors.•RegularStatusReportingtoManagement.•Broad-basedPlanningProject.•AwarenessforEveryone.KeyPlayersSeniorOfficialsInternalAuditRiskManagementLegalFinance/BudgetProcurementSafetyOthers?4/19/2012BusinessContinuityPresentation5BusinessContinuityProcess•Assess-identifyandtriageallthreats(BIA)•Evaluate-assesslikelihoodandimpactofeachthreat•Prepare–planforcontingentoperations•Mitigate-identifyactionsthatmayeliminaterisksinadvance•Respond–takeactionsnecessarytominimizetheimpactofrisksthatmaterialize•Recover–returntonormalassoonaspossible4/19/2012BusinessContinuityPresentation6ProjectReporting/Tracking•UsesummaryreportsformanagementMeasurableandquantifiableprogressRiskratingPrioritizationRegularreporting(weeklyorbi-weekly)Sortonpriority,progress,time-to-completion4/19/2012BusinessContinuityPresentation7BIAReviewFactorsAllHazardsAnalysisLikelihoodofOccurrenceImpactofOutageonOperationsSystemInterdependenceRevenueRiskPersonnelandLiabilityRisks4/19/2012BusinessContinuityPresentation8ProcessInventoryandTriageThepurposeoftheBIAisto:Identifycriticalsystems,processesandfunctions;Establishanestimateofthemaximumtolerabledowntime(MTD)foreachbusinessprocessAssesstheimpactofincidentsthatresultinadenialofaccesstosystems,servicesorprocesses;and,Determinetheprioritiesandprocessesforrecoveryofcriticalbusinessprocesses.4/19/2012BusinessContinuityPresentation9PrioritizeRiskFactorsPersonalSafetyRiskServicesRiskOperationalRiskRevenueRiskLiabilityRiskGoodWill(Societal)Risk4/19/2012BusinessContinuityPresentation10RiskAnalysisMatrixHighMediumLowLowMediumHighAreaofMajorConcern4/19/2012BusinessContinuityPresentation11RiskRiskNumericFactorRatingScoreDegreeofH8ProcessmustfunctionforcoreoperationsOrganizationalM6ProcessrequiredfordailysettlementDependenceL3ProcessisnotcriticaltodailyoperationsProbabilityH0Probability>0.5thatalternativeprocesswillworkofSuccessfulM2Probability<0.5thatalternativeprocesswillworkAlternativeL3NoplansforalternativeprocessDependenceH5BusinessfunctionsdependhighlyonprocessonM3BusinessfunctionsdependsomewhatAutomationL1Manualoperationpossiblew/openaltyCriticalityofH4Criticalbusinessfunction-coreprocessBusinessM2Secondaryline-of-businessProcessL0NotacriticalprocessExplanationBCPRiskRatingMethodologyRiskRating...