February 2007 Schenker AG Alexander Tsolkas CSO Business Continuity Management BCM tools in...

February 2007

Schenker AG

Alexander Tsolkas

CSO

Business Continuity Management

BCM tools in operation: Tool based Business Continuity and Disaster Recovery Planning

London, 1.Feb.2007

2Schenker AG; Alexander Tsolkas; Feb.2007, London

Agenda

• Agenda

• Intro

• Overview of the market leaders

• Tool ranking

• Tool list prices

• Example of a tool based IT DRP

• Advantages and disadvantages of a tool based IT DRP

• Discussion


Intro

• 65,5% of the organisations did not update their business continuity plan for the last 10 years

• 26,32 % did update their BCP 1 to 3 times in the last 10 years

• Less than half fullfil an appropriate quantity of their BCP targets • 54% of the CIO’s plan to change their BCP strategy

• 65% expect a raise in costs for IT BCP

Quelle: Gartner Research a KPMG study 2002


Overview of the market leaders

• Vendors

Strohl SystemsBinomial InternationalCoop-SystemseBRP Solutions Inc.BRProactive Inc.Business Protection SystemsEverGreenGrapevine SoftwareMIR3SunguardTAMP SystemsCAPT


Strohl Systems

• LDRPS 10

License does not expireWeb hosting optionsRuns on SQL ServerSmall solution for 5 to 30 usersProfessional solution for 5 to 50 usersBuilt-in methodology and guidance based on a long experienceUser prompts to enter data Modules: BCP, Corporate Crisis Management, Business Process Recovery

Application Recovery, Site Event ManagementDrag and drop functionalityTransparent tree structure User and group administration >200 predefined standard reports which describe plansCustomizable plan navigation which guides the user through the plan specificallySecure data management via encryptionBackup via standby serversTool uses a basic Windows formatTree navigation function Strong consideration of business processes


Strohl Systems

• Incident Manager 3.0

Powered by ESI’s WebEOC – web basedStrong influence during development through experience with LDRPSScope:

-Life Safety-Impact Assessment-Recovery and Restoration

Pinboards offer the possiblity to digitise and electronically organise information and problems collected in an analog way

Transparent tree structure Incident management on the basis of :

- Coordination – via control over the situation with tracking possibility- Communication – Chat client, eMail and Incident Escalation Management- Methodology – Best Practices via ICS (Incident Command System)- Scalable – runs on a Laptop as well as in an IPC

Status reports of the crisis situationEvaluation of the situation and priorisation of procedures Enhanced function for monitoring groups, processes and situations IM 3.0 offers status displays, markers and pinboardsMapTac integrated


Binomial International

• Phoenix

For the development of BCPs on the basis of WindowsFree selection which database to be usedQuick and easy creation of the single components of the BCPEasy input of information and good information managementEasy updates of the planMulti user systemCooperation of different business departments and units possiblePhoenix modules

-Phoenix Corporte Edition-Phoenix for Banks-Phoenix for Credit Unions-Phoenix for Biotechnology-Phoenix for Community Hospitals-Phoenix for Hospitals-Phoenix for ISPs-Phoenix Small Business Edition


Coop Systems

• myCoop 5.3

Supports 7 phases in a web based systemEasy to useLow costsContent can be importedEasy to learnObject class technologyCan be customized during the complete life cycle of the system

-Languages-Regions-Currencies-Integration into other systems

Modules-Start, Analysis, Creation, Training, Exercise, Maintenance, Execution, Security-Regional parameter settings, Integration, Hosting


eBRP Solutions

• eBRP Toolkit

Offered modules are: -Risk assessment

o Physical, personal related, business processes, technological systems-Business impact analysis

o Critical resources, recovery time, customers vendors, finance, dependencies-Technology modelling

o Hardware inventory, software inventory, network, applications, users-Plan development & maintenance

o Unlimited amount of plans, built-in web links, built in data links, check list development, plan linkage, print feature of plans in parts or completely, eMail notification

-Featureso Web based, unlimited amount of users, role based, access controls, traceability,

import of data sheets, Web services, >100 built-in standard reports


BRProactive Inc.

• BRProactive

Tour guide for usersUses Microsoft Word for planning and editingVery good help functionsNo database know how necessary Integrated full recovery: Main business area, Voice, IP, LAN, Mid-range systems 8 predefined recovery team plans, which can be added initially with informationResource planning and notification sequence integrated Industry standards are provided consequently and have been considered during developmentAction based approachPassword security Import and export function for filesPredfined forms which can be used


Business Protection Systems

• Business Protector Gateway

Web based with browser interfaceSpecifically for risk management and BCPScalableOutsourced service or own operationFast reaching of the targetsHigh quantity of plans and reports in documents (on-line formats and *.pdf)Decentral planning with central controlAutomatic notification optionsOn-line reports, notification trees, emergency proceduresRelational databaseSimple document managementConnection to external links, documents and databases


Evergreen Data Continuity Inc.

• Mitigator

Overall business continuity managementComplete company inventoryBusiness impact analysis IT Risk AssessmentApplication recovery points based on lost dataRecovery analysis based on business requirements versus IT capabilities Impact analysis based on a malfunction, application failure or general failureRecovery strategies including cost calculation based in inventory dataOverall business and operative continuity and disaster recovery plans for all company

locationsCreation of recovery teams and task assignment to team membersTest and maintenance of the BCP or DRPAssists for SOX 404 complianceFinancial and operative risks can be drawn from operative failuresTons of reportsAfter installation Mitigator provides loaded potential risks, recovery team tasks and 1000 best

practice proposals


Grapevine

• Full Command

Transform existing plans in living documentsThe process of finding, insertion, registration, evaluation, approval und supporting of

personnel, of resources and documentation is simplified.Distribution and standardisation of the content of plans over many organisations Plans can be edited directly by the means of a browserMaitenance of accurate plan dataTesting of plansAnalysis of vulnerabilities and risksReportingSecure authentication and accesses


MIR3

• Enterprise

Company wide communication for the major Business, Disaster Recovery, Business ContinuityRole based access control Intelligent messaging systemWorks with Oracle DBs, Peoplesoft applications, MS-Active Directory, SunGard,

Paragon/ePlanner/Revolution, Strohl’s LDRPS and LDAP ImplementationsSupport for MS-Outlook for Telefone, GSM, Email, Pagers, SMS, Fax and Satellite telefone

systemsMaintenance of Remote- and international business locations, IPCs and WANs


Sungard

• Business Continuity Solutions

Business and Technology Profile SolutionBusiness Impact Analysis SolutionEnd-User Recovery Solution Information Availability Assessment SolutionManaged Tape Backup SolutionSystem Recovery SolutionVaulting and Business Continuity Solution

Paragon-BCP development-“What if” scenario development (simulation) -Messaging, Eskalation-Maintainance of plans-Database oriented


TAMP Systems

• Disaster Recovery System DRS

ScalableCustomizable reportingDecentral planning possibilitiesRole based access controlAutomatic plan updates (via external interfaces)Pratical approach for application functionality to maintain plans without complicationsSimple user guidance


Heine & Partner – Info AG

• Continuity Action Planning Tool

MS-Access basedRegistration and maintenance of resources

-Organisational units, persons emergency teams, business functions, technology, software, data inventory, connections, other aids, dangerous goods

Development of action plans- Emergency scenarios and recovery strategies, activities and action plans (graphical user interface)

Output document manager-Print lists ( report generator for multiple formats)-Free textpages-Emegency handbooks and table of content

Administration-Logging of user activities-User access control and authentication

Special functions-Layout of the print output-Customization of data and field names-Data import and export


Tool ranking

• Vendors (personal ranking list)

1 eBRP Solutions Inc. – eBRP Toolkit2 Strohl Systems, LDRPS 3 Sunguard – Business Continuity Solutions4 MIR3 – Enterprise5 EverGreen – Mitigator6 Heine & Partner – Continuity Action Planning Tool 7 Grapevine Software – Full Command8 Coop-Systems – myCoop9 Strohl Systems , Incident Manager10 BRProactive Inc. – BRProcative 11 Business Protection Systems - Business Protector Gateway12 Binomial International – Phoenix13 TAMP Systems – Disaster Recovery System


Tool list prices

• Hersteller

Strohl Systems, LDRPS 115.000 €, Incident Manager 3.0 38.000 €.Binomial International – Phoenix ca. 80.000 €Coop-Systems – myCoop ca. 7000 EuroeBRP Solutions Inc. – eBRP Toolkit ca. 350.000 € BRProactive Inc. – BRProcative 26.000 €Business Protection Systems - Business Protector Gateway 150.000 € EverGreen – Mitigator 120.000 € Grapevine Software – Full Command 27.000 €MIR3 – Enterprise from ca. 140.000 €Sunguard – Business Continuity Solutions – varies from module to module TAMP Systems – Disaster Recovery System - no price providedHeine & Partner – Continuity Action Planning Tool 10.000 € SU, 80k Enterprise


Example of a tool based IT DRP

• Heine & Partner CAPT – Continuity Action Planning Tool


Advantages and disadvantages of a tool based IT DRP

• Pros

Standardized and customized format of all plansSimple maintenance and update of plans (via integrity of the software)Cental policy of the tool and decentral maintenanceWeb based access from all over Access to plans is simple and availability is higherCustomizable layout of lists/reports and plansPrintout of plans in parts which are requiredPartly plans for dedicated groups can be printed out

• Cons

Expensive first time investmentCosts for trainingRequirement of a handbook Interfaces most often do not provide what is wished in terms of applications and dataGeneral limitations due to the fact that is is a toolAdditional costs for administration, hosting and maintenance, backup, etc.


Discussion

Questions

Alexander TsolkasCSO

Schenker [email protected]

www.schenker.com

Opinions

February 2007 Schenker AG Alexander Tsolkas CSO Business Continuity Management BCM tools in...

Documents

Transcript of February 2007 Schenker AG Alexander Tsolkas CSO Business Continuity Management BCM tools in...