Business Continuity: More than disaster recovery…
Presented by:Greg Turmel
Jeff Hinds
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Tennessee SummitOctober 13‐14, 2008Seeing the New Horizon
Technical DBA 3.6 Business Continuity: More Than Disaster Recovery
Abstract:A high level discussion about how business continuity is more than disaster recovery. Your IT business continuity plan must involve issues across a broad range of IT centric topics. This discussion will touch on the type of topics that should be included in your plan. Some of these topics can include issues of government regulation, hardware andsoftware contracts, staff roles and responsibilities, and many others. Your business continuity plan should include how to deal with a changing environment and how your business will respond. Do you have a business continuity plan?
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
What is Business Continuity?
Business Continuity is the activity performed by an organization to ensure that critical business functions will be available to customers, suppliers, regulators, and other entities that must have access to those functions. These activities include many daily chores such as project management, system backups, change control, and help desk. Business Continuity is not something implemented at the time of a disaster; Business Continuity refers to those activities performed daily to maintain service, consistency, and recoverability.
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
What is Business Continuity?
The foundation of Business Continuity is the policies, guidelines, standards, and procedures implemented by an organization. All system design, implementation, support, and maintenance must be based on this foundation in order to have any hope of achieving Business Continuity, Disaster Recovery, or in some cases, system support. Business continuity is sometimes confused with disaster recovery, but they are separate entities. Disaster recovery is a small subset of business continuity.
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
What is Business Continuity?
The term Business Continuity describes a mentality or methodology of conducting day‐to‐day business, whereas Business Continuity Planning is an activity of determining what that methodology should be. The Business Continuity Plan may be thought of as the incarnation of a methodology that is followed by everyone in an organization on a daily basis to ensure normal operations.
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
What is Business Continuity?The components of the Business Continuity methodology required for manifestation into a documented plan include:
1. Policies 2. Guidelines 3. Standards 4. Procedures 5. Resource Planning and Deployment 6. Organizational Structure 7. Business Impact Analysis 8. Security Management 9. Document Management 10. Change Management 11. Audit Management 12. Service Level Agreements 13. Other Components 14. Planning
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Considerations of Business Continuity Planning
•Business Impact and Risk Analysis
•Service Level Agreements (Vendor support)
•Business Goals and Objectives
•Changes to Policies, Standards, Procedures, Objectives, etc…
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
What shapes your Business Continuity Plan?
•Policies and Procedures•Local, State, and Federal Regulations•Industry Best Practices•Competition•Local Resources•Etc…..
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Business Continuity Plan should include (examples):•Disaster and Recovery (Most though of)
•Changes in staffing (retirements, etc..)•Hardware changes•Business logic (where is it?)•Changes in Production (Decreases and Increases)
•Changes in Government•Training•Etc….
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Who should be included?
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Security
Library Services
IT Office
Telecommunications
Financial Aid Offices
Finance and Payroll
HR Users
Bursars' Office
Many, Many Others
College Deans
Facilities Services
Public Relations
Is Business Continuity just for the IT Office?No!
While IT must “Ensure Continuity of Operations”, other parts of the business must also “Ensure Continuity of Operations”.
IT is not the primary user of the systems.
The End Users community must also have plans should changes affect their business; staffing, Regulations, etc.
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
So what about the IT Business Continuity Plan.
We have disaster recovery…….
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
So what about the IT Business Continuity Plan.
We have disaster recovery…….
What about Change Management?•Hardware and software patches/configurations•Version upgrades•Reporting requirements
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
So what about the IT Business Continuity Plan.
What about changes in •Staffing•Enrollment levels•Management•Service Level Agreements (Vendor support)
•User requirements•etc…..
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Product Mix.
`
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Move to Production
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Value of Strategic CapabilitiesIT can provide
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
What is included in your Business Continuity Plan?•Backup and Recovery . . . •Management and management philosophies•Product Mix•Personnel and Job Roles and Duties•Policies, Procedures, Standards, •User acceptance testing•Security and Audit requirement•Local, State, and Federal Regulations•Institutional Environment changes•etc.
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Who should be included in the planning?
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Functional Users
Operations Manager/Staff
Networking
Data Security Manager
Business Analysts
DBAProject Manager
System Administrator
Luminis Manager
Public Relations
And many,many more
Recap: IT Business Continuity document plan includes….
1. Policies 2. Guidelines 3. Standards 4. Procedures 5. Resource Planning and Deployment 6. Organizational Structure 7. Business Impact Analysis 8. Security Management 9. Document Management 10. Change Management 11. Audit Management 12. Service Level Agreements 13. Other Components 14. Planning
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
References:
•Ensuring continuity of operations: Are you ready?http://blogs.techrepublic.com.com/itdojo/?p=177&tag=nl.e101
•The Business Continuity Institutehttp://www.thebci.org/
•Contingency Planning Worldhttp://www.business-continuity-world.com/
•Business Continuity Planning & Disaster Recovery Planning Worldhttp://www.disasterrecoveryworld.com/
TN-Summit 2008 Tennessee Board of Regents
DBA Collaborative
Top Related