Enterprise Business Continuity Planning Program

1
Enterprise Business Continuity Planning Program

• Lynn Beaton
• June 2, 2009

2
Summary of Program

• Of the 72 agencies and boards involved with BCP
• 79 will have met the goals
• 18 will have substantially met goals
• 3 will not have met the goals

3
Vendor Fair

• Will be held June 23rd from 1 4 pm in Labor
  Industries Building, Room 260 (right here!)
• Encourage agency BCP Coordinators, Disaster
  Recovery Coordinators, procurement specialists to
  attend

4
Participating Vendors

• eBRP Solutions
• Iron Mountain
• Agility
• Quantivate
• Integra Telecom

• SunGard
• Sprint Nextel
• Incentra Solutions
• Kinetic Technology Solutions

5
What do you need to do?

• First Identify your Critical Business Functions
  (CBFs)
• Second Document your functions
• Third Identify your Recovery Time Objectives
  (RTOs)
• Fourth Develop recovery procedures

6
Essentially, ask yourself these questions

• What do you do?
• How long can you go without doing it?
• What steps would you take to bring back your
  functions?

7
First What are your Critical Business Functions?

• Definition
• Business functions or information that could not
  be interrupted or unavailable for one month or
  less without significantly jeopardizing the
  mission of the agency, and the health, welfare or
  safety of Oregonians.
• Your BCP should restore those functions you
  identify as critical to your organization

8
Second Document those functions

• Statutory requirements
• Processes that support your functions
• Associated computer systems
• Essential records
• Key staff
• Dependencies
• Vendors
• Required Office Equipment

9
Third Identify Recovery Time Objectives

• This is the point at which your functions must be
  recovered in order to
• Comply with statutory requirements
• Maintain needed revenue or
• Protect the health and welfare of the public.
• Ask yourself What is the maximum amount of time
  your function can be down?
• Dont make this goal as short as possible give
  yourself as much time as you can.

10
Fourth Develop Recovery Procedures

• These are the steps your organization would take
  to recover your functions
• Just use common sense to identify these steps!
• Ask another staff person to review the steps to
  ensure that they are clear.

11
Recovery Steps

• For example
• Step 1 Ensure staff and public safety
• Step 2 Assess the situation
• Step 3 Notify staff, commissioners, etc.
• Step 4 Activate BCP
• Step 5 BCP Recovery Team meets at alternate site
• Step 6 Staff relocates to alternate site

12
Testing Requirements

• By June 30, 2009
• Desk Check Testing for all critical business
  functions
• By December 2009
• Tabletop Tests for all critical business functions

13
Reminders

• Website
• http//www.oregon.gov/das/eispd/bcp
• Next Meeting
• Tuesday, June 2nd, 9-1130am
• LI Building, Room 260

14
Contact us

• Lynn Beaton
• Manager, Enterprise BCP Program
• [phone]
• lynn.beaton_at_state.or.us
• Katie Bechtel
• Planner, Enterprise BCP Program
• [phone]
• katie.bechtel_at_state.or.us
• http//www.oregon.gov/das/eispd/bcp