1 evaluating business continuity planning tools greater boston acp january 9, 2008 john w....

1

Evaluating Business Continuity Planning Tools

Greater Boston ACP

January 9, 2008

John W. Grochowalski

Evaluating Business Continuity Planning Tools Slide 2

Overview

Company (Vendor Information) Software Structure Data Collection Plan Development Recovery/Testing Automated Notification Questions


Company (Vendor Information)

Years in Business Software Version(s) Technical Support/Hours of Operation Releases per Year Consulting Services

–Business Impact Analysis–Business Recovery Plan–Data Center Recovery Plan–Plan Testing–Plan Audit


Company (cont.)

Existing Customer Base Training

– On-site– Web– Vendor Location

Proven Methodology?


Software Structure

SSL Secure/Encryption User Access: Single/Multiple Administrative Privileges

– Dedicated– Concurrent

License/Hosted


Software Structure (cont.)

Data/Text Driven Report Writer (Customization) All Encompassing or Modularization

–Data Collection–Planning–Test Module–Notification



Ease of Use– Navigation/Layers to Get Data– Access to Other Websites– Screen/Field Customization– Relational Databases– Links to other Applications (i.e., PeopleSoft,

Lawson, etc.)

Create Hierarchal Structure



Plan Types– Location– Types of Plan (Business, Data, or Crisis

Management)– Organizational Unit by Person/Responsibility

Create User Profiles/Contact Lists– Job Description– Responsibilities– Personal Attributes (CPR Trained, 4-Wheel Drive

Vehicle, Multi-Lingual, etc.)


Data Collection

Assigned Task Data Collection

–Surveys –Develop RTOs (Recovery Time Objectives)–Develop Minimum Resource Requirements–Compliancy (i.e., FFIEC, HIPAA, etc.)–Loss/Cost Analysis–Graphical/Metric Displays–Rollup Capability–Administrative Analysis


Data Collection (cont.)

Dependencies– Link Key Resources to Application, People,

Hardware, Etc.– Create Visio Diagrams/Attach to Plans

Document Manager– Manage Existing Documents Across Multiple

Plans


Plan Development

Hierarchical Structure– By Department/Location– By Process and Application– By Hardware

Plan Templates– IT Recovery– Business Recovery– Crisis Management


Plan Development (cont.)

Edit Capabilities– Import/Export– Word Processing– Data Integration– Single Screen Access to Data and Text

Review and Approval– Management Approval of Plans– Automated Notices for Plan Updates (Email)

Audit History: Show Revisions


Recovery/Testing

Create Unlimited Test Scenarios Use Internal Clock to Monitor Time and to Date

Stamp All Test/Recovery Scenarios Activate Single or Multiple Procedures

– Logs (Document Additional Information)– Current Issues (Assign New Tasks to Personnel)– White Boards (Visio Diagrams, Maps, and Displays)

Archive Events/Tests for Future Reference Develop Final Test/Recovery Report


Automated Notification

Size of Company/Number of Users Identify Contact(s)

– Single – Group

Unlimited Message Capabilities Customizable Messages Default Messages Send Messages to Multiple Devices (Phone,

Cell Phone, Blackberries, FAX, Email)


Automated Notification

Text to Voice Translation Multilingual Enable a Conference Bridge PIN Requirements Administrative Control

– Monitor Responses


Questions?