UC Resiliency Planning
37
University of California RESILIENCY PLANNING
Transcript of UC Resiliency Planning
University of California RESILIENCY PLANNING
NITTY GRITTY
MY ROLE
RESILIENCY BIG PICTURE
PLANNING APPROACH
Challenges & Successes
Amina Assefa UC Berkeley
Systemwide Readiness LeadUniversity of California
OVERVIEW
Davis
Berkeley
MercedSanta CruzSan
Francisco
Santa BarbaraRiverside
Irvine
San Diego
LA
ANR
PROVIDE ONGOING
COORDINATIon to ensure
the successful
implementation of the
uC Ready platform
UC Ready
MISSION CONTINUITY
EMERGENCY ACTION PLANNING
IT DISASTER RECOVERY
UC Ready
MISSION CONTINUITY
EMERGENCY ACTION PLANNING
IT DISASTER RECOVERY
ENTERPRISE RISK
MANAGEMENT
TEACHING
RESEARCH
PUBLIC SERVICE
TechnicalThe
LEFT BRAIN
TRAINING ON THE TOOL ENSURE THAT ADMINS KNOW HOW TO USE THE SOFTWARE. PROMOTE USE OF THE SOFTWARE ACROSS ALL FUNCTIONAL AREAS
Technical ProgramVsTheThe
LEFT BRAIN RIGHT BRAIN
TRAINING ON THE TOOL ENSURE THAT ADMINS KNOW HOW TO USE THE SOFTWARE. PROMOTE USE OF THE SOFTWARE ACROSS ALL FUNCTIONAL AREAS
COACHING ON THE JOB HELPING NEW CONTINUITY PLANNERS UNDERSTAND THE SCOPE OF THEIR ROLE AND HOW TO BUILD A SUCCESSFUL CONTINUITY PROGRAM
FUNDAMENTAL
ABOUT WHAT
LACK OF
UNDERSTANDING
CONTINUITY IS
LACK OF
EXPERTISE AT
LOCAL LEVEL
LACK OF
EXPERTISE AT
LOCAL LEVEL
AN EXAMPLE….
UC Berkeley
Curtail Operations
What are the Essential
functions of the campus?
Curtail Operations
Campus essential Functions
(Most important things the campus does)
Continue Teaching
Continue Research
Continue Visible
Leadership
MaintainCritical
Infrastructure
Maintain the Reputation of
Campus
Maintain Relationships
w/Stakeholders
Maintain Safety & Security
MaintainEmergencyServices
Maintain FinancialStability
Maintain Basic Campus Services
Maintain Patient Care
CAMPUS ESSENTIAL FUNCTIONSStrategic Level
Continue Visible Leadership Maintain Critical Infrastructure Provide Emergency Services
CAMPUS ESSENTIAL FUNCTIONS
Continue Visible Leadership Maintain Critical Infrastructure Provide Emergency Services
Operational Level
DEPARTMENTAL ESSENTIAL FUNCTIONS
Maintain SSO
Provide Campus Voice Network
Manage Data Center
Provide medical advisement to campus
Communicable disease reporting requirements
Mass Notification SystemProvide critical legal advice
Strategic Level
EMERGENCY RESPONSE
CONTINUITY OPERATIONS
EMERGENCY RESPONSE
IT DISASTER RECOVERY
PLAN ALIGNMENT
THIS WAY
BUSINESS INTERRUPTION
TIMELINE
FIRE
UTILITY OUTAGE
IT OUTAGE
LOSS OF KEY STAFF
BUSINESS AS USUAL
BUSINESS INTERRUPTION
TIMELINE
FIRE
UTILITY OUTAGE
IT OUTAGE
LOSS OF KEY STAFF
EMERGENCY RESPONSE PLANSEMERGENCY NOTIFICATION/ALERT EVACUATION/SHELTERING-IN-PLACE RESPONSE PROCEDURES
BUSINESS AS USUAL
BUSINESS INTERRUPTION
TIMELINE
FIRE
UTILITY OUTAGE
IT OUTAGE
LOSS OF KEY STAFF
EMERGENCY RESPONSE PLANSEMERGENCY NOTIFICATION/ALERT EVACUATION/SHELTERING-IN-PLACE RESPONSE PROCEDURES
CONTINUITY PLANS
USE OF TEMPORARY OR MANUAL WORKAROUNDS TRANSFER OF CRITICAL BUSINESS ACTIVITIES TO ALTERNATE LOCATIONS ACTIVATION OF TELECOMMUTING PLANS CROSS-TRAINING OF EMPLOYEES PROTECTION OF & CONTINUED ACCESS TO CRITICAL RECORDS/DATABASES
BUSINESS AS USUAL
BUSINESS INTERRUPTION
TIMELINE
FIRE
UTILITY OUTAGE
IT OUTAGE
LOSS OF KEY STAFF
EMERGENCY RESPONSE PLANSEMERGENCY NOTIFICATION/ALERT EVACUATION/SHELTERING-IN-PLACE RESPONSE PROCEDURES
CONTINUITY PLANS
USE OF TEMPORARY OR MANUAL WORKAROUNDS TRANSFER OF CRITICAL BUSINESS ACTIVITIES TO ALTERNATE LOCATIONS ACTIVATION OF TELECOMMUTING PLANS CROSS-TRAINING OF EMPLOYEES PROTECTION OF & CONTINUED ACCESS TO CRITICAL RECORDS/DATABASES
RECOVERY OF ESSENTIAL IT APPLICATIONS AND SYSTEMS FAILOVER OF CRITICAL IT APPLICATION AND SYSTEMS TO OTHER SITES
IT DISASTER RECOVERY PLANS
BUSINESS AS USUAL
PLANNING PROCESS
THIS WAY
Identify most important things
the unit does
1
Continuity Planning Process : Preparing for the Unexpected
Determine the impacts to campus if business is
interrupted
2
Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.
These are your unit’s essential functions. OEM does initial research and
consolidation. Presents to head of unit for discussion
and approval.
Identify resources and continuity strategies necessary to maintain and restore most
critical business functions
3
This is known as a Business Impact Analysis and its the
foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed
hands-on assistance .
OBJECTIVE
This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two
meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.
HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.
PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.
Plan Complete!
Identify most important things
the unit does
1
Continuity Planning Process : Preparing for the Unexpected
Determine the impacts to campus if business is
interrupted
2
Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.
These are your unit’s essential functions. OEM does initial research and
consolidation. Presents to head of unit for discussion
and approval.
Identify resources and continuity strategies necessary to maintain and restore most
critical business functions
3
This is known as a Business Impact Analysis and its the
foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed
hands-on assistance .
OBJECTIVE
This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two
meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.
HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.
PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.
Plan Complete!
Identify most important things
the unit does
1
Continuity Planning Process : Preparing for the Unexpected
Determine the impacts to campus if business is
interrupted
2
Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.
These are your unit’s essential functions. OEM does initial research and
consolidation. Presents to head of unit for discussion
and approval.
Identify resources and continuity strategies necessary to maintain and restore most
critical business functions
3
This is known as a Business Impact Analysis and its the
foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed
hands-on assistance .
OBJECTIVE
This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two
meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.
HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.
PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.
Plan Complete!
Identify most important things
the unit does
1
Continuity Planning Process : Preparing for the Unexpected
Determine the impacts to campus if business is
interrupted
2
Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.
These are your unit’s essential functions. OEM does initial research and
consolidation. Presents to head of unit for discussion
and approval.
Identify resources and continuity strategies necessary to maintain and restore most
critical business functions
3
This is known as a Business Impact Analysis and its the
foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed
hands-on assistance .
OBJECTIVE
This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two
meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.
HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.
PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.
Plan Complete!
IDENTIFY PRIORITIES
Identify most important things
the unit does
1
Continuity Planning Process : Preparing for the Unexpected
Determine the impacts to campus if business is
interrupted
2
Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.
These are your unit’s essential functions. OEM does initial research and
consolidation. Presents to head of unit for discussion
and approval.
Identify resources and continuity strategies necessary to maintain and restore most
critical business functions
3
This is known as a Business Impact Analysis and its the
foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed
hands-on assistance .
OBJECTIVE
This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two
meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.
HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.
PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.
Plan Complete!
Identify most important things
the unit does
1
Continuity Planning Process : Preparing for the Unexpected
Determine the impacts to campus if business is
interrupted
2
Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.
These are your unit’s essential functions. OEM does initial research and
consolidation. Presents to head of unit for discussion
and approval.
Identify resources and continuity strategies necessary to maintain and restore most
critical business functions
3
This is known as a Business Impact Analysis and its the
foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed
hands-on assistance .
OBJECTIVE
This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two
meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.
HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.
PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.
Plan Complete!
IDENTIFY PRIORITIES
IDENTIFY STRATEGIES
1.
LOSS OF BUILDING
2.
LOSS OF STAFF
3.
LOSS OF IT NETWORK
RESILIENCY
MovingTHE NEEDLE
RESILIENCY
MovingTHE NEEDLEChallenges
Too much focus on the “plan” as a document rather than as a process
Training and exercises are more response driven without a focus on continuity
Continuity exercises harder to implement.
RESILIENCY
MovingTHE NEEDLEChallenges
Too much focus on the “plan” as a document rather than as a process
Training and exercises are more response driven without a focus on continuity
Continuity exercises harder to implement.
Successes
UC Ready Software
UC leading the way. New spotlight on continuity.
New &
Improved!
Robust reporting and additional functionality
HELP!
Build A
CULTURE OF
RESILIENCE
Final takeaways
CAN’T DO IT ALONE
Integration is Key
SUPPORT LOCAL
EFFORTS
