business continuity: getting your ducks in a row
TRANSCRIPT
The National Center for Campus Public Safety
CampusPublicSafetyOnline
Tuesday,March21,20172:00-3:00pmET
BusinessCon=nuity:Ge@ngYourDucksinaRow
with
KristaM.DillonDirectorofOpera=onsforSafetyandRiskServices
UniversityofOregon
The National Center for Campus Public Safety
The Goal We want to be able to do tomorrow
what we were doing yesterday
No matter what happens today. Paul Dimond, Kuali Ready Council Chair
4
The National Center for Campus Public Safety
Why Business Continuity • To protect people and property • Resume critical operations / work
processes – Deliver teaching, research, service
• To minimize downtime to retain clients / customers (e.g., students)
5
The National Center for Campus Public Safety
Why Business Continuity • Direct damage only one factor:
– Recovery highly dependent on external environment
• How are you connected to the community, region, state?
– Significant loss from disruption of flow of supplies or goods
6
The National Center for Campus Public Safety
Not just for catastrophic losses • Extended staff downtime due to illness or
vacation • Relocation (planned or unplanned) • Indoor Air Quality issues • Infrastructure / utility disruption
7
The National Center for Campus Public Safety
Not just for catastrophic losses • Beyond your 4 walls: regional or national
incidents • Reputational Impacts • ??? • Ever growing expectations for continued
service.
8
The National Center for Campus Public Safety
Characteristics of BCP • Pre-determined and Static:
– Essential Functions – Vital Records – Succession and Delegated Authority – Continuity Facilities
10
The National Center for Campus Public Safety
Characteristics of BCP • Dynamic, requiring situational
management – Resource Conflicts for Essential Functions – Succession and Delegation in improbable
events – Limits to Continuity Facilities in region-wide
disasters – Communications when first tier systems
inoperable
11
The National Center for Campus Public Safety
1. Access you Functions • What are our tasks – functions –
programs? • And what do those functions require?
– Describe your functions – Process and procedures – Utilities – Supplies and equipment – Programs and data
13
The National Center for Campus Public Safety
1. Access you Functions • And what do those functions require?
– Personnel and training – Vendors or third parties – Interdependencies (internal and external) – Peak load or cyclical work flow
14
The National Center for Campus Public Safety
Impact Assessment • If you couldn’t do the function / task, what
is the impact at: – 1 day; 1 week; 1 month
• Consider, for example: – Life and health – Contractual or financial obligations, liability – Reputation – Funding – Infrastructure
15
The National Center for Campus Public Safety
Maximum Allowable Downtime (MAD)
• Recovery Time Objective (RTO) – How long until things REALLY begin to get
difficult • Recovery Point Objective (RPO)
– How much is needed to stay somewhat functional?
• Maximum Tolerable Period of Disruption (MTPD) – How long until recovery is no longer possible?
17
The National Center for Campus Public Safety
Coping Strategies • Ask: “What do we do if…”
– We don’t have our people? – We don’t have our building / space? – We don’t have our inputs?
There are no non-essential staff, but some functions can be deferred.
18
The National Center for Campus Public Safety
Lessons Learned • Displaced for nearly a year • Potential business interruption claim of
$250K • Business processes slowed • Initially laid off student workers during
immediate clean up efforts • But……
– They had a plan!
22
The National Center for Campus Public Safety
Graduate Teaching Strike • Graduate Teaching Fellows went on strike
Fall 2014 during finals week. • Critical functions performed:
– Grading exams – Proctoring exams – Responsible for entire courses: content, exam
development, proctoring and grading • Impact Assessment
23
The National Center for Campus Public Safety
Graduate Teaching Strike: Coping Strategies
• General: – ID staff to greet classes prior to finals week – ID staff to proctor exams
• Academic: – Extended grading deadline – Cancel course hours in dead week that weren’t tied
to exam – Modify final exams to expedite grading – Forgo final and take existing grades – Hire temporary staff to grade
25
The National Center for Campus Public Safety
Umpqua Community College • Business Continuity without a plan
– Payroll – Insurance coverage scope and resources – What is the financial tipping point for
upcoming events? – When will other activities/events resume? – Continuation of security services separate
from the incident – Impact assessment for utilities, IS systems
29
www.margolishealy.com www.nccpsafety.org [email protected]
1.866.817.5817 www.bja.gov