Michell Consulting Group Presents:

Hurricane Preparedness

What Happens after Your IT service provider gets hit by a bus?

Ideas!

Step 1 – Send flowers. Step 2 – Invoke the DETAILED plan that

you already had in place to ensure continuance after the situation.

Step 3 – Business as usual!

Or…

If you DIDN’T have a Disaster Recovery Plan in place… Accept the fact that you’re

going to lose time, money, reputation and clients.

Agenda FACTS about lack of Disaster Recovery

Planning Understanding the impact to your

business TYPES of Disaster STEPS to Protect your business Questions

FACTS About Lack of DR Planning

40% of the companies were out of business within 6 week

40% of enterprises that experience any disaster go out of business within five years (Gartner)

FACTS About Lack of DR Planning

10 years ago it cost the average company $100,000- $1,000,000/year for desktop oriented disasters. This cost continues to grow exponentially!

Your safety net for:

What is Disaster Recovery

Power failure

Underground cable cuts or

failures

Fire, flood, hurricanes, and other natural

disasters

Mistakes in system

administration

Virus, hacking,

internal or external

When Talking About Disaster Recovery

Our Solutions: Backup Restore Replace Direct Employees to new

location

Disaster Recovery Planning

A plan to restore ALL of these components must be in place.

The system must be able to put them back together if your business is to survive a disaster.

DR focusing only on the technical components. Consider:

Lost productivity and idle employees Missed service level agreements Diminished reputation for customer service Increased technical support costs for onsite repair Loss of customer confidence Legal Liabilities Regulatory Fines Downward stock prices …and more…

Do You Know the Cost for Downtime?

Business Continuance Planning

BCP addresses: Risk of lost

revenue and productivity

Plan of action for continuing the business, NOT computers.

Business Continuance Planning

Example of items that typical planning might leave out:

Business

processes

Roles &Responsibilities

What happens at the absence of Key Individuals

Sources and Consumer’s Data

Order of Recovery

Documented Procedures

Reconstitution

Left Out Items

Rarely documented Typically defined only in the

combined knowledge of key employees (this is true of the “big picture” as well as details of each departmental process)

One of the most difficult things to put back if key employees are not available.

Business Processes & Procedures

Business Roles & Responsibilities

Making decision to invoke plan

The Second in Charge

Being responsible for each element of plan

Exception Handling

Decision of Priorities

Signature Authority

Absence of key individuals A more difficult thing to consider Mental notes Revenge (sabotage or withholding information)

Key Individuals

Business Data Flow

Sources and Consumers of Information. Detailed data flow Detailed process

flow Updated

documentation

Business Recovery Time Frames

Set expectations up front.

Help to design budgets. Assign priorities for

recovery.

Create documentation so that a contractor can start your business

Create policies and procedures for updating

Business Documentation

Business Reconstitution

When is a disaster over?

How to go back to business as usual?

What steps need to be taken?

Business Continuance PlanningNow lets talk about the things that typical planning “almost always” leaves out:

Mental notes Periodic testing Updating procedures and plan content Moving DR Planning to the DR site Details, Details, Details!!!

32% of all data lost is due to human error.

Business Testing & Documentation

Business Continuance Planning Moving Planning to

the DR Site A method is needed

that will: Bring knowledge

together Document it Enable processes to be

reconstructed (possibly without the help of key employees)

Enforce periodic testing and updating of the plan.

Summary

Continuance Planning Defines and Documents:

Department Processes

Source of Data

Consumers of Data

Relationships

Cost Ramifications

Budget Justification

Recovery Criteria

Solution Design

Documentation

Assistance with Testing & Updating

SummaryPlanning is approached in phases:Process Analysis

• Data Flows

Risk Analysis• Cost/Effective

Disaster Recovery

• Traditional Technical Component

Implementation and Testing

• Annual or After Significant Changes

Summary

Continuance Planning can

be Implemented:

By

Unit

To Practical Extents

As Single Phase

In Phases

Thank You!

QUESTIONS?

Jeffrey Robles▪ www.michellgroup.com▪ jrobles@michellgroup.com▪ Work: (305) 592 – 5433▪ Cell: (305) 562 – 3775

Thank You!