1 / 14

CIOassist Technologies Your CIO on Demand…

CIOassist Technologies Your CIO on Demand…. Business Continuity Planning Our Offering. CIOassist Technologies ( www.cioassist.in ) rajesh.bhatia@cioassist.in. LEGAL/REGULATORY Contractual Requirements SLAs Regulatory Requirements. REVENUE Direct Loss Deferred Losses

manjit
Télécharger la présentation

CIOassist Technologies Your CIO on Demand…

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. CIOassist TechnologiesYour CIO on Demand… Business Continuity PlanningOur Offering CIOassist Technologies (www.cioassist.in) rajesh.bhatia@cioassist.in

  2. LEGAL/REGULATORY • Contractual Requirements • SLAs • Regulatory Requirements • REVENUE • Direct Loss • Deferred Losses • Compensatory Payments • Lost Future Revenue • Billing Losses • Investment Losses • PRODUCTIVITY • Loss Of Productivity • Employees Impacted @ X Burdened Hourly Rate • FINANCIAL PERFORMANCE • Lost Market Share • Revenue Recognition • Cash Flow • Lost Discounts • Payment Guarantees • Stock Price • Credit Rating • REPUTATION • Customers • Suppliers • Financial Markets • Banks • Business Partners • Etc. • OTHER EXPENSES • Temporary employees, • Equipment Rental, • Overtime, • Extra Shipping Costs, • Travel Expenses, • Etc. Why Business Continuity? The Cost of Downtime

  3. BCP Phases BCP Is an on-going process, not a projectwith a beginning and an end Project Management and Intonation Conduct Business Impact Analysis Develop Recovery Strategies Plan, Design and Development Testing, maintenance, awareness and training

  4. Project Initiation: Understand Your Business 1 Testing Maintenance Awareness Training Conduct Business Impact Analysis to identify Recovery Point (RPO) Service Delivery (SDO) Recover Time (RTO) Maximum Tolerable Outage (MTO) 5 2 3 Plan, Design and Development 4 Develop Strategies for Supply & Technology Recovery Data Recovery BCP Phases BCP

  5. Project Initiation • Developing and approval of BCP policy • Define BCP committee • operational units representatives • senior management • IT security • IT specialized experts, and optionally support units like (technical affairs) • Define BCP project scope and objectives • Provide the necessary project funds and resourses

  6. Business Impact Analysis Collect data through interviews, survey, documenting business functions, transactions, activities Develop hierarchy of business functions and apply a classification scheme to indicate each individual function’s criticality level. Identify the resources that these functions depend upon Calculate Maximum Tolerable Outage (MTO) for these functions Identify vulnerabilities and threats to these functions Calculate risk for each different business function Document findings and report them to management

  7. Business Impact Analysis Recovery Time Objective (RTO): Time duration organization can wait between point of failure and service resumption Service Delivery Objective (SDO): Level of service in Alternate Mode Maximum Tolerable Outage: Max time in Alternate Mode Disaster Recovery Plan Implemented Regular Service Regular Service Alternate Mode SDO Time… Restoration Plan Implemented RTO Interruption Maximum Tolerable Outage

  8. Business Impact Analysis Recovery Point Objective Recovery Time Objective Interruption Interruption • 1 1 1 Hour Day Week • 1 1 1 Week Day Hour How far back can you fail to? How long can you operate without a system? One week’s worth of data? Which services can last how long?

  9. Business Impact Analysis High Level Look at a Recovery Effort Lost Data Move to Alternate Site Resume Business Return Home Vital Records Restore Technology Capability Notifications Restore Communications (If necessary) Restore Business Functions Data Synchronization Data Recovery Objective Recovery Time Objective

  10. Recovery strategies • Supply and technology recovery • Network and computer equipment • Voice and data communications resources • Human resources • Transportation of equipment and personnel • Environment issues (HVAC) • Data and personnel security issues • Supplies (paper, forms, cabling, and so on) • Documentation • Data recovery • Restoring Backed-up data

  11. Recovery Strategies Identifying the Optimum Strategy Service Downtime * Hot Site Cost * Warm Site Alternative Recovery Strategies Optimum Cost * Cold Site Time

  12. Recovery strategies Business process recovery Facility recovery

  13. Plan Design and Development All finding and decisions to be developed and documented. Submission of document for approval Define execution procedure(s) for the plan.

  14. Testing, maintenance, awarenessand training BCP Is an on-going process, not a projectwith a beginning and an end • Validating that decisions are suitable and correct by performing • Checklist Test • Structured Walk-Through Test • Simulation Test • Parallel Test • Full-Interruption Test • Maintaining the plan • Make business continuity a part of every business decision • Insert the maintenance responsibilities into job descriptions • Perform internal audits that include disaster recovery and continuity • documentation and procedures to update the plan. • Integrate the BCP into the change management process • Training and awareness programs are an integral part of the BCP process

More Related