Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity...
Transcript of Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity...
![Page 1: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/1.jpg)
FORDHAM UNIVERSITY THE JESUIT UNIVERSITY OF NEW YORK
Calvin Graham
IT Risk Analyst
Business Continuity
Planning (BCP)
![Page 2: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/2.jpg)
Business Continuity Planning (BCP)
How to preserve critical business functions in the face of a
disaster.
Fordham IT Risk & Integrity 2
![Page 3: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/3.jpg)
Disasters Do Happen to Us!
Fordham IT Risk & Integrity 3
![Page 4: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/4.jpg)
Disasters Do Happen to Us!
Fordham IT Risk & Integrity 4
![Page 5: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/5.jpg)
Disasters Do Happen to Us!
Fordham IT Risk & Integrity 5
![Page 6: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/6.jpg)
Disasters Do Happen to Us!
Fordham IT Risk & Integrity 6
![Page 7: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/7.jpg)
Disasters Do Happen to Us!
Fordham IT Risk & Integrity 7
![Page 8: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/8.jpg)
Disasters Do Happen to Us!
Fordham IT Risk & Integrity 8
![Page 9: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/9.jpg)
Disasters Do Happen to Us!
Fordham IT 9
![Page 10: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/10.jpg)
The BCP domain addresses:
Continuation of critical business processes when a disaster destroys business processing capabilities
Preparation, testing and maintenance of specific actions to recover normal processing (the BCP)
Fordham IT Risk & Integrity 10
![Page 11: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/11.jpg)
Fordham IT Risk & Integrity 11
Disasters – natural, man-made
Fire, snow, flood, hurricane, tornado, earthquake, volcanoes
Plane crashes, vandalism, terrorism, riots, sabotage, loss of
personnel, etc.
Anything that diminishes or destroys normal business
processing capabilities
![Page 12: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/12.jpg)
Fordham IT Risk & Integrity 12
Disasters are defined in terms of the
business
If it harms critical business processes, it may be a disaster Time-based definition – how long can the business stand the pain? Probability of occurrence
![Page 13: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/13.jpg)
Fordham IT Risk & Integrity 13
Broad BCP objectives - CIA
Confidentiality – still important
Integrity – still important
Availability – the main focus
![Page 14: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/14.jpg)
BCP objectives
Create, document, test, and update a plan that will:
• Allow timely recovery of critical business operations
• Minimize loss
• Meet legal and regulatory requirements
Fordham IT Risk & Integrity 14
![Page 15: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/15.jpg)
Scope of BCP
Used to be just the data center
Now includes:
• Distributed operations (Westchester / Lincoln Center)
• Personnel, networks, power
• All aspects of the IT environment
• Business Units / Departments
Fordham IT Risk & Integrity 15
![Page 16: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/16.jpg)
Creating a BCP
Is an on-going process, not a project with a beginning and an end
• Creating, testing, maintaining, and updating
• “Critical” business functions may evolve
The BCP team must include both business and IT personnel
Requires the support of senior management
Fordham IT Risk & Integrity 16
![Page 17: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/17.jpg)
The five BCP phases
Project management & initiation
Business Impact Analysis (BIA)
Recovery strategies
Plan design & development
Testing, maintenance, awareness, training
Fordham IT Risk & Integrity 17
![Page 18: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/18.jpg)
Just a Brief Look Back @ Sandy & The
Winter Storm
What did we learn?
• Communications plans are key.
• Prepare your homes & family.
• The University has an Emergency Management Plan & Team.
• Ensure your contact data in Banner is up to date.
• Including cellphones.
Fordham IT Risk & Integrity 18
![Page 19: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/19.jpg)
Communications
Ensure that you and your staff have the Fordham University
emergency phone number.
“Like” the Fordham University Facebook Page.
If you twitter, follow Fordham University; @fordhamnotes
Fordham IT Risk & Integrity 19
![Page 20: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/20.jpg)
Personal Preparedness
Make a family plan.
Utilize public information sites.
• Red Cross
• Safe & Well Website (www.redcross.org/prepare/location/home-family)
• CDC
• Emergency & Preparedness & Response
(www.emergency.cdc.gov/preparedness)
• FEMA
• Prepare. Plan. Stay Informed. (www.ready.gov/make-a-plan)
Fordham IT Risk & Integrity 20
![Page 21: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/21.jpg)
Fordham University’s Emergency
Management Plan
The University’s EMP is lead by John Carroll, Associate Vice
President for Safety and Security.
Fordham University’s response to all emergencies and crisis
response falls under the direction of the Associate Vice
President for Safety and Security.
A copy of the EMP is located in each BCP Plan hosted on CPO-
Tracker.
Fordham IT Risk & Integrity 21
![Page 22: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/22.jpg)
Contact Data
It is critical that your Fordham University contact data is up to
date.
Review it at least quarterly.
Located on the My Information channel within the Portal.
Fordham IT Risk & Integrity 22
![Page 23: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/23.jpg)
What Should Be in Your BCP ?
Document internal key personnel and backups
Identify who can telecommute.
Document external contacts.
Document critical equipment.
Identify critical documents
Fordham IT Risk & Integrity 23
![Page 24: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/24.jpg)
What Should Be in Your BCP ?
Identify your contingency location.
Make a "How-to".
Put the information together!
Communicate.
Fordham IT Risk & Integrity 24
![Page 25: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/25.jpg)
What Should I do with My BCP
Test It!
Plan to change the plan.
Review and revise.
Fordham IT Risk & Integrity 25
![Page 26: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/26.jpg)
What Is Fordham IT Doing to Help You?
Dedicated DR Coordinator – Calvin Graham
Provide Training (CPO Tracker)
Provide Consulting
Fordham IT Risk & Integrity 26
![Page 27: Business Continuity Planning (BCP) - Fordham University€¦ · · 2018-04-16Business Continuity Planning (BCP) ... Testing, maintenance, awareness, training ... A copy of the EMP](https://reader031.fdocuments.in/reader031/viewer/2022022511/5addc7e67f8b9aeb668d6132/html5/thumbnails/27.jpg)
Next Steps
Review your current BCP.
If you don’t have one, reach out to Calvin Graham
• 718-817-0703 or [email protected]
Setup a training / information session to get started.
Fordham IT Risk & Integrity 27