can the business depend on it for business continuity? bcs north london branch november 25 2009 andy...
TRANSCRIPT
Can the business depend on IT for business continuity?BCS North London BranchNovember 25 2009
Andy Mason MBCS CITP MBCI
Head of Business ContinuityPricewaterhouseCoopers LLP
PricewaterhouseCoopers LLP
Contents
IntroductionDowntime, what downtime?Standards, standards, standardsBusiness Continuity LifecycleWho needs computers?Incident TimelineWhat happens when IT is not available?Static infrastructure, dynamic businessConclusionQuestions
PricewaterhouseCoopers LLPNovember 2009
Slide 3BCS North London Branch
Can the business depend on IT for business continuity?
PricewaterhouseCoopers
PricewaterhouseCoopers provides industry-focused assurance, tax and advisory services to build public trust and enhance value for our clients and their stakeholders. More than 163,000 people in 151 countries across our network share their thinking, experience and solutions to develop fresh perspectives and practical advice
PricewaterhouseCoopers LLP in the UK has 16000 Partners and staff spread across 41 offices from Plymouth to Aberdeen
PricewaterhouseCoopers LLPNovember 2009
Slide 4BCS North London Branch
Downtime, what downtime?
Applications
Laptops, PCs
Data centres
Networks
Third parties
Laptops
Resilience, high availability
Seamless Auto failover, Hot start, Warm start, Cold start
Increasing complex technology
Increasing business reliance on IT
People, property and process
Can the business depend on IT for business continuity?
PricewaterhouseCoopers LLPNovember 2009
Slide 5BCS North London Branch
Standards, standards, standards
BS25999 Part 1 and 2 > ISO 22399 & ISO 22301
BS25777 > ISO 24762
ISO 20000-2 < ITIL v3
ISO 27002 < BS7799
Position for graphic or image
Can the business depend on IT for business continuity?
PricewaterhouseCoopers LLPNovember 2009
Slide 6BCS North London Branch
The Business Continuity Lifecycle
BS25999-1:2006 Code of Practice for BC Management - BCM Lifecycle
Can the business depend on IT for business continuity?
PricewaterhouseCoopers LLPNovember 2009
Slide 7BCS North London Branch
The Business Continuity Lifecycle for ICT
BS25777:2008 Code of Practice for ICT Continuity Management
Can the business depend on IT for business continuity?
PricewaterhouseCoopers LLPNovember 2009
Slide 8BCS North London Branch
Who needs computers?
Pordivnig a fmarerowk for cmmocinuatoin
Aoccdrnig to rseeacrh at Cmabirgde Uinervtisy, it deons’t mttaer waht oredr the ltteers in a wrod are wirtten, pordivnig the frist and lsat ltteer are in the rhigt pclae, bcuseae the huamn mnid deos not raed ervey lteter by istlef, but the wrod as a wlohe.
Can the business depend on IT for business continuity?
PricewaterhouseCoopers LLPNovember 2009
Slide 9BCS North London Branch
BS25999-1:2006 Incident Timeline
Business Continuity
Time Line
Tim
e Z
ero
Incident!
Overall recovery objective: Back to normal as quickly as possible
The Incident Timeline
Within minutes to hours:Staff & visitors accounted forCasualties dealt withDamage containment / limitationDamage assessmentInvocation of BCP
Incident Response
Within hours to days:Contact staff, customers, suppliers, etc.Recovery of critical business processesRebuild lost work-in-progress
Within weeks to months:Damage repair / replacementRelocation to permanent place of workRecovery of costs from insurers
Recovery - back to normal
Can the business depend on IT for business continuity?
PricewaterhouseCoopers LLPNovember 2009
Slide 10BCS North London Branch
Static infrastructure, dynamic business
Applications and services
Servers
Storage
Networks
Disaster recovery
Peaks and troughs
Ebbs and flows
Today, tomorrow, next week
Can the business depend on IT for business continuity?
PricewaterhouseCoopers LLPNovember 2009
Slide 11BCS North London Branch
Conclusion
Incidents happen
Standards can help
Simple lifecycle
Responding to disruption
Reducing the impact
Static and dynamic
Continuity counts
Can the business depend on IT for business continuity?
This publication has been prepared for general guidance on matters of interest only, and does not constitute professional advice. You should not act upon the information contained in this publication without obtaining specific professional advice. No representation or warranty (express or implied) is given as to the accuracy or completeness of the information contained in this publication, and, to the extent permitted by law, PricewaterhouseCoopers LLP, its members, employees and agents do not accept or assume any liability, responsibility or duty of care for any consequences of you or anyone else acting, or refraining to act, in reliance on the information contained in this publication or for any decision based on it.
© 2009 PricewaterhouseCoopers LLP. All rights reserved. 'PricewaterhouseCoopers' refers to PricewaterhouseCoopers LLP (a limited liability partnership in the United Kingdom) or, as the context requires, the PricewaterhouseCoopers global network or other member firms of the network, each of which is a separate and independent legal entity.
“It is not the strongest, nor the most intelligent that will survive, but those most responsive to change.”Charles Darwin