contingency planning solutions,...

25
1 Basics of Business Continuation Planning and Data Resiliency Tomorrow’s Survival Depends on Today’s Planning Les Spindler, President Greg Ensenbach, Sr. Consultant 5601 Grande Market Dr. Suite M Appleton, WI 54914 920-734-0241 888-772-2526 www.contingencyplans.com 10/16/2017 **LICENSED-ALL RIGHTS RESERVED** **Contingency Planning Solutions, Inc. ** 920-734-0241 4 Contingency Planning Solutions, Inc. CPSI (Division of Digicorp) Assists Organizations with 1. Business Continuation / Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers) 3. Unitrends-Backup/Restore 4. Computer Support Equipment 5. IT Equipment (Servers, PC’s) 6. Telecomm Equipment 7. Surveillance Equipment 8. Cabling & Wiring 10/16/2017 **LICENSED-ALL RIGHTS RESERVED** **Contingency Planning Solutions, Inc. ** 920-734-0241 5 Les Spindler 1. Certified Business Continuation Planner—DRII 2. Disaster Recovery/Business Continuation Planning Since 1989 3. IT 25+ Years 4. Assisted with Development of 100+ Corporate and Government Plans Contingency Planning Solutions, Inc.

Upload: vuongminh

Post on 29-May-2018

214 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

1

Basics of Business

Continuation Planning

and Data Resiliency

Tomorrow’s Survival Depends on Today’s Planning

Les Spindler, President

Greg Ensenbach, Sr. Consultant

5601 Grande Market Dr.

Suite M

Appleton, WI 54914

920-734-0241 888-772-2526

www.contingencyplans.com

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

Contingency Planning

Solutions, Inc.

CPSI (Division of Digicorp) Assists Organizations with

1. Business Continuation / Disaster Recovery Planning

2. Hot-Site Solutions (iSeries, pSeries & Servers)

3. Unitrends-Backup/Restore 4. Computer Support Equipment 5. IT Equipment (Servers, PC’s) 6. Telecomm Equipment 7. Surveillance Equipment 8. Cabling & Wiring

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

5

Les Spindler

1. Certified Business Continuation Planner—DRII

2. Disaster Recovery/Business Continuation Planning Since 1989

3. IT 25+ Years

4. Assisted with Development of 100+ Corporate and Government Plans

Contingency Planning

Solutions, Inc.

Page 2: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

2

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

6

Greg Ensenbach

1. Unitrends Certified Systems Administrator

2. Disaster Recovery/Business Continuation Planning Since 2009

3. IT 20+ Years

4. Assisted with Back-up & Recoveries for 100+ Corporate and Government Plans

Contingency Planning

Solutions, Inc.

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

Contingency Planning

Solutions, Inc.

Our Goal:

Assist Organizations to Prepare:

“Documented, Enterprise Wide

Business Continuation Plans

That Meet Their Recovery Time

Objectives (RTO)”

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

8

“A ship should not ride on a single

anchor, nor life on a single hope.” Epictetus (55-135) Greek philosopher

“Amateurs hope, professionals work.”

Garson Kanin (1912-1999) US playwright

“He that lives upon hope will die

fasting.”

Benjamin Franklin (1706-1790) US statesman,

diplomat

“Hope is such a bait, it covers any hook.”

Ben Jonson (1572-1637) English poet

“Hope”

a desire combined with expectation New Webster’s Dictionary

Page 3: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

3

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

9

“Hope is generally a wrong guide,

though it is very good company by the way.”

Edward Halifax (1881-1959) English statesman

“Hope is a good breakfast but bad supper.”

Francis Bacon (1561-1626) English philosopher

and statesman

“Hope springs eternal in the human

breast…” Alexander Pope (1688-1744) English poet

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

0

“ Natural Disaster Missed us??”

“We were Lucky that we could restore from Backups, Took long time…”

“We were VERY Lucky the Tornado Missed us by ¼ Mile”

“We were Lucky when the Pipe leaked that it only affected 4 Servers”

”Tugging Person’s Red Beard”

“Lottery”

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

1

1. Developed Prior To An “EVENT”

2. Documents a PLAN To Prevent Loss Of Life and Minimize Injury And Property Damage

3. Separate Document

4. Includes

A. Evacuation Plans

B. Bomb Threat Plans

C. Domestic Violence Plans

D. Hazmat Plans

E. Shelter in Place

F. Severe Weather Plans

Page 4: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

4

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

2

EMERGENCY

1. Short Term - 3 Days Or Less

2. May Involve Risk to Personnel

3. Facility Damage Not Widespread

4. Does Not Create Extended Disruption to Business Operations

5. Examples: Malfunction of Electricity, Gas, Water, Telecommunications, Computers, Chemical Leakage, Water Leakage, Minor Fire

6. Use BCP Teams/Roles to Recover

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

3

DISASTER

1. Longer Term - More Than 3 Days 2. Sudden, Calamitous; Some Have

Forewarning, React Immediately 3. Facility MAY Have Damage 4. May Involve Injuries Or Death 5. Extended Significant Disruption to

Business Operations

1) Local 2) Regional 3) Service

Have you Recently Tested your BC/DR Plan?

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

3

Page 5: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

5

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

5

Weyauwega, WI

March 4, 1996

Service Disaster

3 Weeks - 5 days - 8 hours - 13 minutes

1 Business Destroyed

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

6

LOCAL EVENTS

1-31-13; Echo Foods Fire-Burlington

7-06-13; Milwaukee Courthouse Fire

3-08-14; St. Lawrence Seminary Fire

4-07-14; Re-open Ken’s Sports-Tornado 8-13

4-07-14; Re-open Futeks- Lightening Fire 4-12

7-18-14; Comfort Inn Hotel Fire-FDL

8-08-14; Preble High School Fire

9-04-14; Ridgeway Trailer Fire-GB

9-26-14; Paper Products Facility-GB

11-07-14; Green Bay Southwest High School

11-19-14; SCA Tissue Paper Machine Fire

12-25-14; Green Earth Warehouse Fire-GB

12-25-14; Spectrum Maintenance Fire-GB

1-1-15; Kirby Vacuum Business Fire-Appleton

2-10-15; Waterline Break SCA Plant-Menasha

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

7

1. Developed Prior to an “EVENT”

2. Documents a Plan to Restore IS/IT Services ONLY

3. NOT ENTERPRISE WIDE

4. Includes

A. Equipment; NOT REPLACEMENT

B. Operating Systems Restoration

C. Application Systems Restoration

D. Data Restoration

E. Service to Business Units??

F. (Does not Address Recovery of the IT Business Unit )

G. Does not Address Relocation to AWS

H. Does not Detail Personnel Roles

Page 6: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

6

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

8

1. Developed Prior To An “EVENT”

2. ENTERPRISE WIDE (Exec’s Direct)

3. Documents Steps For Prioritized Resumption Of Business Functions & Infrastructure Within Organization

4. Documents Infrastructure Required to Resume Business Functions (Facility, IS/IT, Salvage & Communications, etc.)

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

1

9

LOSS OF FACILITY AND

CONTENTS 1. Structure Destroyed

2. Computer Services

3. Telecommunications

4. Business Unit Functions

5. Vital / Transaction Records

6. Equipment

7. Reference/Paper Materials

8. Stock, Raw Materials

9. “SMOKING HOLE”

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

0

IT Disasters: 1. Human Error

2. Water

3. Fire

4. Communications Failure

5. Black Out – Loss of Power

6. Halon / Gas Dump

7. Earth Quake

8. Terrorism / Hacking

9. Equipment Failure-Power

Units, Air Units, Routers,

Switches

Page 7: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

7

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

1

1. Plan Development

A. Corporate Project

B. Requires Senior Management

Commitment

C. Formal Project - Realistic Goals

and Timelines, Budget

2. Plan Maintenance

A. Ongoing

B. Priority/Budget

3. Plan Execution

A. Recovery

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

2

1. Duplicate Normal Everyday Operations-Redundant Office

2. Generate The Same Level Of Service (Immediately)

3. Be Cost Effective Over The Short-term

4. Short, General Document

5. Keep All Employees Working (Immediately)

6. Be Hidden Or Responsibility Of A Couple People

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

3

COMMAND CENTER: 1. Meeting Location For Leadership

2. Used For ERP & BCP Occasions

3. Separate From Facility

4. Locations--2 Local, 2 Regional

5. May Occupy From 7-30 Days

6. May Contain ERP Or Startup Materials

ALTERNATE WORK SITE: 1. Meeting Location For Recovery Functions 2. Used For BCP Occasions 3. Space To Support Critical People 4. Equipment To Support Critical Functions 5. May NOT Be Like Current Facility-tables 6. Locations--2 Local, 2 Regional 7. May Occupy For 1-6 Months

Page 8: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

8

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

4

1. Document An Enterprise-wide Plan

2. Accept Facility, Equipment And Contents May Be Totally Destroyed

3. Spread Planning/Recovery Roles And Responsibilities To Numerous People

4. Review Risk / Insurance Coverage

5. Avoid Addressing Only IS/IT Or IS/IT Assuming Responsibility Of Project

6. Prevent Lost Customers-communication

7. Plan For Lack Of Critical Equipment That Will Not Be Immediately Available

8. Protect Vital/Transaction Records

9. Consider Dedicated AWS Or Hot-sites

10. Update, Exercise And Test Annually

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

5

1. Goals, Assumptions-RTO’s & Strategy

2. Teams/BU’s For Planning / Recovery

3. Assigning Roles

4. Kick-off Meeting For Team Members

5. Gathering Current Information &

Making Decisions To Ensure Critical

Functions Resume Within RTO’s

6. Reviews & Updates-goals/Standards

7. Audits / GAP Analysis

8. Executive & Project Team Approvals

9. Prepare Manuals

10. Training/Mock Disaster Exercises

11. Update Schedules & Actions Lists

CPSI Methodology

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

6

1. Know That BCP Document Will Be Used—You Just Don’t Know When

2. Organization-Wide Support

3. Evaluate and Mitigate Risk, Update Insurance

4. Team Personnel A. Know the Organization Well

B. Good Planners, Decision Makers, Communicators

Page 9: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

9

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

7

RPO--Recovery Point Objective; How much data can you afford to lose? (Disaster, Emergency, Service)

RTO—Recovery Time Objective; How Fast do you need to recover each Application, Servers, Mid-Range, etc. Usually use Hourly Time Brackets; 1, 4, 8, 15, 22, 31+

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

8

1. Plan for a Worst Case Scenario:

Total Loss Of Facility and All Contents

2. Be realistic concerning what can REALLY be accomplished

3. Set RTO’s that will keep your organization in business—ONLY DOING MOST CRITICAL BUSINESS FUNCTIONS

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

2

9

1. Facility is totally destroyed

2. Local Disaster—Everyone Available

3. Owners Want Business To Continue

4. Neighboring Facilities Were Not

Affected

5. Other Company Locations Were Not

Affected

6. Normal Utilities Available to Alternate

Work Site Locations (Electricity, Gas,

Telecommunications, Water, Sewer)

Page 10: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

10

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

0

1. Alternate Work Site Available in 4-8 hours

2. Hot-Site/Warm Facilities Available In 12-24 Hours

3. Backup Copies Of Appropriate Software And Data Files Are Safe.

4. Back-Ups Available For All Systems –Lost Data?

5. Core Servers (?) Available In 4-6 Hrs 6. Critical Servers (?) available 8-12 Hrs 7. 10 PC’s Available in 8-10 Hrs 8. 3 Dedicated Printers Available 8-10 Hrs 9. 2 Network Printers available 16-28 Hrs

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

1

1. Simple EVENT, No Rules, Assumptions / RTO’s = All Available Day 1 / Hour 1

2. Definitions, Plan Construction

3. No Schedule – Do as Time Available

4. Overloaded Personnel

5. Others doing Planning Roles-No Recovery Roles Listed

6. Over view Teams Skipped

7. Poor Choice of Supporting Organizations--Assistance

8. Training/Mock Disaster & Tests not Completed or Unrealistic

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

2

Business Units

4 7

Infrastructure Teams

Facilities Telecommunications (Voice and Data)

Salvage/

Assessment

Transportation Information

Services

Hardware

Systems Software

Application Software

Data Center

Operations

Business Function Recovery Review Team

Record Recovery Review Team

Executive Leadership Team

Business Continuation Project Team

6 5 3 2 1

Page 11: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

11

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

3

1. Business Units

2. Review Teams

3. Infrastructure / Support Teams

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

4

Business Units (Departments)

1. Finance

2. Community Relations

3. Compliance

4. Executive

5. Food & Nutrition

6. Purchasing

7. Human Resources/Payroll

8. Marketing

9. Medical Records

10.Patient Services

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

5

1. Scope: Their Business Functions 2. Plan Guided By Assumptions-RTO’s 3. Determine Priority for Resuming

Business Functions (BIA) 4. Identify Resources (Personnel,

Space, IS/IT, Telecomm, Equipment) Required to Resume Prioritized Business Functions

5. Detailed steps to perform RECOVERY of Business Functions

Page 12: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

12

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

6

PLANNING: 1. Document CURRENT Business

Functions 2. Prioritize Recovery of Business

Functions 3. Script Recovery Procedures 4. External Call List 5. Processing Requirements 6. Paper; Vital & Transaction Records-

Inventory, Location, Criticality, Backup, Reconstruction Plan

7. Production Equipment 8. Forms – Inventory, Replacement,

Off-site 9. Reference Materials (Books &

Manuals, Reference material, Reports)—Inventory, Location, Replacement, Off-site

10. Regulatory Reporting

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

7

1. Business Function Recovery Review Team

2. Record Recovery Review Team

A. Scope: Total Organization

B. Plan Guided by Assumptions-RTO’s

C. Respond To Business Unit Needs, Assist With Data Gathering, Decision Making, Priorities

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

8

PLANNING: 1. Teams / Assumptions/RTO’s 2. Review CURRENT Business

Functions, Priorities and Scripts for Accuracy and Completeness for “ALL” Business Units

3. Provide Corporate Perspective on Priority of Business Functions (AWS, Assumptions/RTO’s, Critical)

4. Coordinate AWS Plans of Business Units and Infrastructure Teams; (Facilities, IS/IT, Telecomm)

5. Determine Recovery Roles, Priority, & Script Team Recovery Roles

Page 13: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

13

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

3

9

PLANNING: 1. Establish Record Retention Policy 2. Reviews Business Units Inventory

A. Transaction Records B. Vital paper Record C. Forms D. Reference Material, Books /

Manuals & Reports E. Criticality and Reconstruction

3. Plans for “ALL” Paper Documents for Accuracy, Backups, Criticality, Location, Reconstruction

4. Items Off Site in Starter Box 5. Determine Recovery Roles, Priority,

& Script Team Recovery Roles

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

0

1. Executive Leadership

2. Business Continuation Planning Project

3. Facilities

4. Transportation Logistics

5. Salvage - Damage Assessment

6. Telecommunications

7. IS / IT A. Hardware B. Applications C. Systems Software D. Operations

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

1

PLANNING: 1. Teams /

Assumptions/RTO’s 2. Plan for Continuation of

Leadership 3. Succession Planning—BCP 4. Plan Communication to

External Publics--Media 5. Approve Overall BCP 6. Determine Recovery Roles,

Priority, & Script Team Recovery Roles

Page 14: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

14

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

2

PLANNING: 1. Project Management—Assumptions-

RTO’s, Resources, Timelines, Communication, RESULTS

2. Manage Action Points

3. Call Chains/Scripts: Emergency, Command Center & Employee

4. Employee Personal Information

5. External Providers—Commitments

6. Risk Analysis / Risk Prevention

7. Review/Update Insurance Coverage 8. Determine Recovery Roles, Priority,

& Script Team Recovery Roles

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

3

PLANNING:

1. Teams / Assumptions/RTO’s

2. Current Facility Information (Layouts, Services, Security)

3. External Call Lists

4. Command Center—Locations

5. Alternate Work Site—Locations, Layout, Security

6. ERP / Prevention & Testing

7. Determine Recovery Roles, Priority, & Script Team Recovery Roles

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

4

PLANNING: 1. Assumptions/RTO’s 2. Current Hardware / Software –

Inventory and Criticality, Documentation, Backups

3. Plan To Replace / Recover Hardware And Software (Suppliers, Time & Equipment)

4. Develop, Document and Test Back Up And Restore Procedures

5. Recovery Site: Hot Site / Alternate Work Site /Warm Site

6. Determine Recovery Roles, Priority, & Script Team Recovery Roles

Page 15: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

15

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

5

Responsible for 1. Mainframes

2. Midrange

3. LANS/WANS/Servers

4. PC’S

Functional Areas in EACH 1. Hardware

2. Applications Software

3. Systems Software

4. Data Center Operations

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

6

1. External Call List 2. Hardware; Present 3. Electrical Connections/Cables 4. Production Equipment & Needs 5. Reference Material, Manuals &

Reports Inventory & Needs 6. Vendor Commitments 7. Assist Salvage; Recoverable 8. Assist IT Functional Areas 9. Determine Hardware Priorities 10. Obtain Temporary Hardware 11. Set-ups; Command, AWS, New 12. Replacement Hardware

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

7

1. External Call List 2. Applications/Systems Software 3. Licenses / Passwords 4. Document, Test Back-ups 5. Critical IT Applications Jobs 6. Forms Inventory & Needs 7. Reference Materials, Manuals &

Reports Inventory & Needs 8. Procedures to Restore Software 9. Set-ups; Command, AWS, New 10. Testing; Batch, Real-Time 11. Replacement Software 12. Monitor Recovery-Assist

Page 16: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

16

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

8

1. External Call List 2. Critical Operations Jobs

A. Key Functional Areas B. Business Units C. IT

3. Security of Data Center 4. Back-up Functions & Media 5. Forms Inventory & Needs 6. Reference Materials, Manuals

& Reports Inventory & Needs 7. Service & Supply BU Needs 8. Assist Set-ups & Run

Hardware

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

4

9

PLANNING: 1. Know Where Things Are – Paper,

Equipment, Utilities: Priorities 2. Video Record Facility & Contents 3. Understand Insurance Policies &

Coverages 4. Understand Claim / Salvage

Priorities / Procedures 5. Identify and Establish External

Contacts (Restoration Vendors, Public Authorities)

6. Determine Recovery Roles, Priority, & Script Team Recovery Roles

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

5

0

PLANNING:

1. Teams / Assumptions/RTO’s

2. Current Telecomm Information (Equipment, Lines, Software, Vendors, Backups, Documentation)

3. Plan To Restore Communications (Lines To Transfer, Equipment, Software)

4. REPLACEMENT-- Telecomm Information (Equipment, Lines, Software, Vendors, Backups, Documentation)

5. Determine Recovery Roles, Priority, & Script Team Recovery Roles

Page 17: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

17

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

5

1

PLANNING:

1. Identify Transportation Needs (People, Equipment, Storage)

2. Determine Transportation Resources (Buses, Trucks, Moving Companies)

3. Determine Recovery Roles, Priority, & Script Team Recovery Roles

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

5

2

$48 million damage in 12 counties

44 homes destroyed & 1390 damaged

25 businesses destroyed & 32 damaged

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

5

3

Wisconsin Flooding

July, 2010

$xx million

damage in xx WI

counties

xx homes

destroyed

xx homes and

non-residential

buildings

damaged

Page 18: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

18

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

5

4

DISASTER CALL CHAIN INSTRUCTIONS

The Initiator calls Emergency Contact List to Discuss Event.

Emergency Contact Notifies the Project Team to Discuss Event

Project Team Notifies Executive Team to Discuss Event

Business Units Execute Plans

Teams Execute Plans

Executive Team Determines Command Center & Project Team Notifies Command Center Call List.

Disaster Declared

Team Primary / Alternate Notifies Team Personnel

Command Center Meeting is Held Final Discuss of Event

BCP Project Team Notifies Primary / Alternate of each Business Unit & Team of the Disaster

Status meeting

Disaster Not Declared – continue with Emergency Clean-up Plans

Executive & Project teams meet to discuss the Event

Primary / Alternate of each Business Unit and Team Attends the Disaster Status meeting

Business Unit Primary / Alternate Notifies Business

Unit Personnel

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

5

5

1. Decisive Leaders

2. Risk, Insurance, Mitigation

3. Safeguard Critical Paper Materials

4. Adequate Recovery Resources

A. Command Centers

B. Alternate Work Sites

C. Production Equipment

D. Computer Systems

E. Telecommunication Systems

F. Critical Paper Materials

5. Written Vendor Commitments- “TRUST YOU WILL HELP”

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

6

1

WISCONSIN TORNADOES

2011

April 10 - 15 tornadoes

May 22 – 11 tornadoes

THOUGHTS:

Average annual tornado count = 23

June Most active month in Wisconsin

Dane County leads raw numbers

Marathon County is #2 with 36

Wisconsin Currently 10th on

Touchdowns

Page 19: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

19

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

6

2

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

6

3

WISCONSIN TORNADOES

April 10, 2011 15 Tornadoes touched down setting new one-day

record for tornadoes in April.

Adams, Brown, Forest, Lincoln, Outagamie,

Winnebago, Waupaca

1 EF3-Lincoln (max wind speed 140 mph)

2 EF2 (max wind speed 135 mph)

9 EF1 (max wind speed 110 mph)

Preliminary Damage Estimates:

Outagamie County--Kaukauna:

200 homes sustained $4.7 million in damage

Adams County:

Residential damage over $1.4 million

Damage to Businesses $882,000

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

6

4

Page 20: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

20

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

6

5

WISCONSIN TORNADOES

May 22, 2011

64 Tornados reported in US

11 Tornadoes touched down in Wisconsin

Touchdowns in Barron, Green Lake, La

Crosse, Monroe, Juneau, Price, Counties

2 EF2 (max wind speed 135 mph)

3 EF1 (max wind speed 110 mph)

6 EF0 (max wind speed

Longest on Ground for 37 Miles

Gunderson Luthern Hospital (La Crosse)

Spared Direct hit; Joplin Missouri Not LUCKY

(161 People Killed)

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

0

1. Ongoing Plan Updates (Semi-Annual-E / Annual-Manuals)

2. Comprehensive Test Of The Plan At Least Annually

3. Modify The Plan Based on Test Results

4. Periodic Training for Key Recovery Personnel (Annual Mock Disaster Exercise)

5. Periodic Training for Others

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

1

WISCONSIN TORNADOES

2013

August 7 - 6 tornadoes

Northeast WI:

5 – EF1 ; New London thru

Hortonville

August 21 – Straight Line Winds

Northeast WI;

Shawano Thru Bonduel

90-100 MPH Winds

Page 21: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

21

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

2

6 Tornadoes within 45 Minutes

All within Straight-line Winds

Traveled Northwest-Southeast

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

3

1. Call List: Employee, Service Personnel, Supplier, Customers, Insurance, Cleaners

2. Recovery Sites-Local & Regional Command, Alternate, Temporary

3. Off Site Storage: Daily/Weekly Backups, Forms, Reference Materials, Equipment, Video Tape

4. Documentation: Reference Materials, Books & Manuals, Reports, Forms, BCP Plan, Procedures

5. Inventory of Equipment: Office Assets, Servers, PC’s. Printers, Routers, Telecommunication & Production Equipment

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

4

1. Inventory of Files/Desks: Reference Materials, Books & Manuals, Reports, Forms, Procedures

2. Inventory of all Software: Mainframe, Midrange, LAN’s, PC’s & Telecommunications

3. Business Unit Recovery Procedures: Critical Functions, Personnel, Vendors, Telecommunications, Computers, Procedures, Forms, Manuals, Vital Records

4. File Reconstruction Procedures: Vital/Transaction Records, Reference Materials, Books & Manuals, Reports Recovery

Page 22: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

22

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

5

Backing Up Only Your Data Poses Significant Risk @ OS Level Rebuilding OS Involves Many

Pieces OS Media Drivers Patches Legacy Software Updates “Bare-Metal” Backup Provide Faster Backups/Restores Reduced Backup Time

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

6

1. ALLOWING BACKUPS TO NOT BE TESTED

2. NOT TESTING == Time & $$$

3. CURE == Technology & Best Practices

4. TAPE == Time Consuming & Unreliable

5. Solid DR Plan Includes:

A. Redundant Backups

B. Real World Data

C. Time Factors (RTO)

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

7

LACK OF ADEQUATE RECOVERY PLANNING

1. Plan for Possible Emergencies

2. Keys to Creating Successful Plan

A. DR Plans Simple Scripts

B. Checklists for Priorities/Sequence

C. One Primary Point of Contact

D. Test Often

E. Backup Your DR Plan

Page 23: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

23

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

8

NOT PLANNING FOR DISSIMILAR RECOVERY ENVIRONMENT

1. Incompatibilities Undermine Best Plans

2. Work in Lab == Fails in Real World

3. BareMetal is Best Practice:

A. BareMetal to Dissimilar is Essential

B. No BareMetal: Build New System First

Load OS, Applications, Data

4. Catalog Hardware & OS Systems-New:

A. New Hardware vs Existing

B. What Would be Ordered

C. Save Drivers & Software Required

D. Test & Measure Recoveries

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

7

9

NOT HAVING OFFSITE COPIES 1. Data is your LIFE LINE

2. Just Flip over isn’t total Reality

3. Physical Security is Often Overlooked

4. Security Threats: Viruses, Spyware, Malware

5. Natural / Service Threats

6. Archiving: Removeable Disks Best Option

7. Cloud: Short-Term & Long-Term Available

8. Best Practices:

A. 5-10 Daily Back-ups

B. 4-5 Weekly Back-ups

C. 12 Monthly Back-ups

D. ALL Annual Back-ups

E. BareMetals/OS could be Separate

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

8

0

CONFUSING STORAGE REPLICATION

& DATA VAULTING / CLOUD 1. Storage Replication

A. Replication “MIRRORING”=Dangerous

B. Errors, Corruption, Viruses=Replicate

C. Expensive Storage medium

D. Recovery; Difficult, Expensive, Time

E. Application Awareness / Consistency

2. Data Vaulting / DRaaS

A. Preferred Approach

B. Real-Time, Higher Level Integrity

C. Accurate, Complete, Recoverable

Page 24: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

24

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

8

1

ADOPTING INFLEXIBLE SOLUTIONS

1. Primary Personnel Will be Present

2. Post-Disaster Environment Will be Somewhat Different Than Expected

3. Flexibility is Key

A. Multiple Recovery Options

B. Multiple TESTED Targets

C. Back-up Personnel did Testing

D. Plan--Multiple Paths for Success

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

8

2

1. WIDESPREAD IMPACT— GLOBAL EVENT

2. LONG TERM IMPACT—MONTHS / YEARS

3. ASSUMPTIONS FOR PANDEMIC PLANNING 180 DEGREES DIFFERENT FROM DISASTER PLANNING

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

8

3

1. Completed “AFTER BCP”

2. Switches Assumptions-RTO’s

3. Requires EXECUTIVE Decisions: Policy Changes, Succession Plans, WHERE Working, Hardware, Data Lines, When NOT Report, Security, Social Distancing, Sick Leave Policy, Communication BU’s, Prevention

4. React to Services From Others: Public Services, Food Supply, Shipping/Transportation, Medical, Telephone Service, Repair Services, Supplies

Page 25: Contingency Planning Solutions, Inc.hipaacow.org/wp-content/uploads/2017/10/Spindler.Ensenbach-Hando… · Disaster Recovery Planning 2. Hot-Site Solutions (iSeries, pSeries & Servers)

25

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

8

4

“HOPE/LUCK” is NOT a substitute

for a Documented, Tested and

Executable BC/DR Plan

10/16/2017

**LICENSED-ALL RIGHTS

RESERVED**

**Contingency Planning Solutions,

Inc. **

920-734-0241

8

5

QUESTIONS ??

COMMENTS………...

Phone 920-734-0241 Fax 920-734-0268

www.contingencyplans.com [email protected]