Business Continuity Training

1
Business Continuity Training

• Staci Louie- Risk Management
  Services
• 278-6456 slouie_at_csus.edu

2
Objectives

• Understand the need for a plan
• Learn the terminology
• Know the key points
• Review the Business Continuity Planning software
  application
• Write a plan!

3
What is a Business Continuity Plan?

• A Business Continuity Plan is a written
  document, mandated by The Chancellors Office
  Executive Order 1014, specifically requiring the
  development and testing of procedures for
  recovering critical business systems. It is
  created to ensure the capability exits to
  continue essential functions across a wide range
  of disruptive events.

4
BC Plan Contents

• The plan contains predetermined procedures,
  guidelines, and information that an organization
  can follow to effectively and efficiently deal
  with an unexpected business disruption.
• These predetermined procedures aid response
  personnel in making decisions during and
  following a disruptive event.
• Your plan will be written using a special
  software system that will allow you to identify
  processes and write procedures that focus on
  critical system management and recovery
  procedures.

5
Disruptive Events

• Disruptive Event
• Any event (natural or human caused) which
  interferes with normal operations and degrades
  service to the point that it impacts the
  business. Examples of types and scopes of
  disruptive events
• Local facility disruptions, typically single
  buildings
• Region-wide disruptions affecting all or many
  government buildings in the region
• Disruption of a communications system
• Disruption or loss of access to vital records,
  databases, and computing systems.
• Loss of services from a vendor or another
  government agency
• Unavailability of personnel

6
From the Los Angeles TimesTravelers contend with
missed connections and tell of hours of misery
stuck on runways. A faulty switch is blamed.

• August 13, 2007A U.S. Customs computer outage
  that stranded more than 17,000 passengers at LAX
  was blamed Sunday on faulty hardware and an
  insufficient backup system that left frustrated
  travelers sitting on planes or standing in long
  lines.The computer malfunction, which began at
  2 p.m. Saturday and lasted about 10 hours, came
  on a peak summer travel day, when nearly 25,000
  international passengers arrived at the
  airport.The customs agency reported Sunday that
  17,398 passengers on 73 flights were affected by
  Saturday's outage.Many passengers were still
  angry and frustrated about their disrupted
  vacations and other trips because they had missed
  connecting flights.Some visitors from overseas
  said they were astonished by the glitch at one of
  the nation's most prominent airports."This is a
  great country -- and this happens?" said Lee
  Hong, 23, as he waited outside the Tom Bradley
  International Terminal at 330 a.m. Sunday for a
  friend from Long Beach to make a second trip to
  LAX to fetch him. Hong's flight from Singapore
  landed at 830 p.m., but he could not disembark
  until morning. This would not happen in
  Singapore, Hong said. "No. No way. We have a
  great airport."

7
From The SFGATE.comPower restored in San
FranciscoTuesday, July 24, 2007

• (07-24) 1941 PDT -- Equipment failure Tuesday
  afternoon knocked out electricity to tens of
  thousands of Pacific Gas and Electric Co.
  customers on the Peninsula and in San Francisco -
  including PGE's own office and the Financial
  District.
• The outages began around 2 p.m. and struck a
  wide swath of downtown and southeastern San
  Francisco as well as an unspecified area of the
  northern Peninsula, said PGE spokeswoman Darlene
  Chiu. All customers were back online by 4 p.m.,
  she said.
• PGE estimated that 30,000 to 50,000
  customers were affected, among them buildings
  housing scores of employees.
• The data center 365 Main -- which hosts a
  number of Internet sites, including Craigslist,
  Yelp and RedEnvelope -- also lost power, causing
  frustration among many Web surfers.
• Several of the sites posted messages to explain
  to their users that they were having
  difficulties, while others said they were
  undergoing scheduled maintenance or upgrades.

8
CAPITAL WAITED AT BRINK OF DISASTER

SACRAMENTO BEE
March 3, 1986

• Federal water managers were planning to break a
  levee on the bloated American River if just
  another inch of rain fell on the Folsom Lake
  drainage basin.
• That would have sent floodwaters surging through
  the Campus Commons- River Park area and - as the
  state maps it - probably crashing across U.S. 50
  and into the south area to inundate thousands of
  homes several miles away.
• That was the worst possibility government
  officials saw in dealing with the heaviest rains
  on record and the subsequent flood of the
  century.

9
Key Terms

• Critical Process
• Critical Processes are those essential
  functions that, if interrupted, will adversely
  impact the Universitys goal of educating
  students.
• The key to identifying critical processes is
  to determine whether the loss of the process has
  an immediate negative effect or serious long-term
  consequence to the mission of the campus if it no
  longer functions.

10
Key Terms

• There are three Procedure Types that you need
  to consider while creating your plan. You may
  need to write a procedure for each of these
  situations under each critical process.
• People Unavailable
• Facilities Unavailable
• Emergency Action (EA Procedure)

11
Key Terms

• Work-Around Procedures are manual or alternative
  activities that support critical processes when
  normal operating procedures are interrupted.
• Survival Time is the maximum amount of time
  that the critical process can be out of service
  before long-term, and perhaps irreversible, harm
  occurs
• Recovery Time is the amount of time it will
  take to get the critical process running again
  following a disruptive event.

12
Key Terms

• Resources are those items which are needed to
  support your Critical Processes.
• Responders are those people within your
  department or immediate family that will have
  an assigned responsibility in your business
  continuity plan

13
Business Impact Analysis

• Identifying your Critical Processes
• If the process were to cease functioning,
  what would the impact be on . . .
• Finances
• Internal and /or external customers
• Students
• Employees
• Policies, laws, or regulations.
• Use the Critical Process Worksheet to
  identify your departments critical processes.

14
Key Points

• Be specific and detailed.
• The goal is to develop effective procedures
  that will be functional during a disruptive
  event.

15
Key Points

• Dont rely on electronic procedures-
• they may not be available!!
• A manual back-up procedure for each critical
  process is required!

16
Be Prepared

• Your plan must be accessible during an
  emergency.
• Keep a paper copy in your office and home
• Keep a copy on your computer, laptop, server, and
  USB
• Create a Grab and Go binder

17
Lets Begin. . .www.rms.csus.edu/bcp