summit 2008 business_continuity

Business Continuity: More than disaster recovery…

Presented by:Greg Turmel

Jeff Hinds

TN-Summit 2008 Tennessee Board of Regents

DBA Collaborative

Tennessee SummitOctober 13‐14, 2008Seeing the New Horizon

Technical DBA 3.6 Business Continuity: More Than Disaster Recovery

Abstract:A high level discussion about how business continuity is more than disaster recovery. Your IT business continuity plan must involve issues across a broad range of IT centric topics. This discussion will touch on the type of topics that should be included in your plan. Some of these topics can include issues of government regulation, hardware andsoftware contracts, staff roles and responsibilities, and many others. Your business continuity plan should include how to deal with a changing environment and how your business will respond. Do you have a business continuity plan?


DBA Collaborative

What is Business Continuity?

Business Continuity is the activity performed by an organization to ensure that critical business functions will be available to customers, suppliers, regulators, and other entities that must have access to those functions. These activities include many daily chores such as project management, system backups, change control, and help desk. Business Continuity is not something implemented at the time of a disaster; Business Continuity refers to those activities performed daily to maintain service, consistency, and recoverability.


DBA Collaborative


The foundation of Business Continuity is the policies, guidelines, standards, and procedures implemented by an organization. All system design, implementation, support, and maintenance must be based on this foundation in order to have any hope of achieving Business Continuity, Disaster Recovery, or in some cases, system support. Business continuity is sometimes confused with disaster recovery, but they are separate entities. Disaster recovery is a small subset of business continuity.


DBA Collaborative


The term Business Continuity describes a mentality or methodology of conducting day‐to‐day business, whereas Business Continuity Planning is an activity of determining what that methodology should be. The Business Continuity Plan may be thought of as the incarnation of a methodology that is followed by everyone in an organization on a daily basis to ensure normal operations.


DBA Collaborative

What is Business Continuity?The components of the Business Continuity methodology required for manifestation into a documented plan include:

1. Policies 2. Guidelines 3. Standards 4. Procedures 5. Resource Planning and Deployment 6. Organizational Structure 7. Business Impact Analysis 8. Security Management 9. Document Management 10. Change Management 11. Audit Management 12. Service Level Agreements 13. Other Components 14. Planning


DBA Collaborative

Considerations of Business Continuity Planning

•Business Impact and Risk Analysis

•Service Level Agreements (Vendor support)

•Business Goals and Objectives

•Changes to Policies, Standards, Procedures, Objectives, etc…


DBA Collaborative

What shapes your Business Continuity Plan?

•Policies and Procedures•Local, State, and Federal Regulations•Industry Best Practices•Competition•Local Resources•Etc…..


DBA Collaborative

Business Continuity Plan should include (examples):•Disaster and Recovery (Most though of)

•Changes in staffing (retirements, etc..)•Hardware changes•Business logic (where is it?)•Changes in Production (Decreases and Increases)

•Changes in Government•Training•Etc….


DBA Collaborative

Who should be included?


DBA Collaborative

Security

Library Services

IT Office

Telecommunications

Financial Aid Offices

Finance and Payroll

HR Users

Bursars' Office

Many, Many Others

College Deans

Facilities Services

Public Relations

Is Business Continuity just for the IT Office?No!

While IT must “Ensure Continuity of Operations”, other parts of the business must also “Ensure Continuity of Operations”.

IT is not the primary user of the systems.

The End Users community must also have plans should changes affect their business; staffing, Regulations, etc.


DBA Collaborative

So what about the IT Business Continuity Plan.

We have disaster recovery…….


DBA Collaborative


We have disaster recovery…….

What about Change Management?•Hardware and software patches/configurations•Version upgrades•Reporting requirements


DBA Collaborative


What about changes in •Staffing•Enrollment levels•Management•Service Level Agreements (Vendor support)

•User requirements•etc…..


DBA Collaborative

Product Mix.

`


DBA Collaborative

Move to Production


DBA Collaborative

Value of Strategic CapabilitiesIT can provide


DBA Collaborative

What is included in your Business Continuity Plan?•Backup and Recovery . . . •Management and management philosophies•Product Mix•Personnel and Job Roles and Duties•Policies, Procedures, Standards, •User acceptance testing•Security and Audit requirement•Local, State, and Federal Regulations•Institutional Environment changes•etc.


DBA Collaborative

Who should be included in the planning?


DBA Collaborative

Functional Users

Operations Manager/Staff

Networking

Data Security Manager

Business Analysts

DBAProject Manager

System Administrator

Luminis Manager

Public Relations

And many,many more

Recap: IT Business Continuity document plan includes….

1. Policies 2. Guidelines 3. Standards 4. Procedures 5. Resource Planning and Deployment 6. Organizational Structure 7. Business Impact Analysis 8. Security Management 9. Document Management 10. Change Management 11. Audit Management 12. Service Level Agreements 13. Other Components 14. Planning


DBA Collaborative

References:

•Ensuring continuity of operations: Are you ready?http://blogs.techrepublic.com.com/itdojo/?p=177&tag=nl.e101

•The Business Continuity Institutehttp://www.thebci.org/

•Contingency Planning Worldhttp://www.business-continuity-world.com/

•Business Continuity Planning & Disaster Recovery Planning Worldhttp://www.disasterrecoveryworld.com/


DBA Collaborative

summit 2008 business_continuity

Technology

business continuity plan

business continuity

ensure continuity

disaster recovery

vendor support

business

recovery

regents