h1n1 & it continuity

H1N1 and Beyond ConferenceH1N1 and Beyond Conference

Beyond

morTarTechnology & Business

SurvivalH1N1 & Beyond

Christopher

Duffy, CISSP

H1N1 and Beyond Conference

“Enhance Communications & Information Technology Infrastructures as needed to support employee telecommuting and remote customer access”

checklist item #23

www.pandemicflu.gov

H1N1 and Beyond Conference

Goals

• Minimize Disruptions• Ensure Services• Appear Invisible• Plan for the Worst

“Address workforce absenteeism rates of 40% or higher” -Roberta Witty, Gartner Group 4/26/09

H1N1 and Beyond Conference

Focus

• External Communications• Internal Communications– Phone– Email– Chat?

• Meetings• Projects

H1N1 and Beyond Conference

Impact

• IT– Staffing– Data Centers

• Staff– Customer Facing– Teleworking– Physical Labor

H1N1 and Beyond Conference

Assessments

• Staff• Expertise• Core Technologies & Services• Inventory– Hardware– Peopleware– Bandwidth

H1N1 and Beyond Conference

Do it NOW!Communications continuity will ONLYWORK if based on technologies that arecurrently in use.

Technologies instituted during a pandemic will produce catastrophic failures.

H1N1 and Beyond Conference

Technical Definitions• Enterprise-

A network comprised of smaller networks/satellites which interface with each other as well as a central database and many workstations.

• VPN-Virtual Private Network. Creates a secure connection or tunnel between two networks using ( Home and the Office) the Internet.

• PSTN- Public Switched Telephone Network. Worldwide telephone network.

• POTS-Plain Old Telephone Service. Voice grade service for home and small business. Also referred to as Analog

H1N1 and Beyond Conference

Technical Definitions• PBX

Private Branch eXchange. Telephone network used within an enterprise. Telephone system is within the organization rather than depend on the phone company. Common in larger businesses.

• SOHO

Small Office Home Office. A small home office or virtual office environment, connected to larger organization with same services and technologies.

H1N1 and Beyond Conference

Enterprise Network

Internet

SOHO

Corporate

H1N1 and Beyond Conference

VPN Types

• Hardware– Both Ends

• Software– Client– Web Based

H1N1 and Beyond Conference

Encrypted VPN Tunnel

VPN Head-end Router

VPN Remote Router

Internet

Teleworkers have the same services at home as at their office desktop

Phone

How VPN Works

CorporateNetwork

Wired or Wireless LANAccess Point Hacker/Virus

Denied Access

H1N1 and Beyond Conference

VPN Big Picture

H1N1 and Beyond Conference

CIO Focus• Prioritize critical applications & functions

– What is essential– What can be taken off IT’s plate

• Identify staffing for critical applications / functions • Build depth through cross training • Work with HR to create alternative work schedules and a

web-worker program • Continuity planning for your computer systems and

workforce • Maintain a healthy work environment

– Hand Sanitizers & Tissues• Staff workstations• By Elevators• Common Areas

H1N1 and Beyond Conference

Risks • Extended Network– Outside of Physical Control• Theft• Software• Home Networks

• Data– Remote Access

• Staff

H1N1 and Beyond Conference

Remote Control• Laptops– Master Images– Endpoint Control– Physical Control

• Software– On a Stick– Secure Web download site

• VPN• Virus

– Remote Support Tools

H1N1 and Beyond Conference

IT Prep 101• Internal Relationships

– Human Resources– Facilities– Help Desk

• Calling Trees– Include IM– Web Email

• Data Centers– Direct & Remote Access

• Stress Test– Web Apps– VPN– Teleworking– Citrix /Remote– Virtual Applications– Web Conferencing

H1N1 and Beyond Conference

IT Prep 201

• Broadband @ Home• X Train• Critical Vendors– What is their plan– How can they help

• Degradation Plan– Staffing Levels & Hours– What Point is critical Mass

PEOPLE FIRST!

H1N1 and Beyond Conference

Good Stuff

• Resources– http://www.pandemicflu.gov/professional/business/index.html#critical

• Web Communications– Cisco Webex www.webex.com

– Adobe Connect www.adobe.com/products/acrobatconnectpro

– Citrix Gottomeetings www.gotomeetings.com

– Conferencecall www.conferencecall.com

– Dimdim www.dimdim.com

• Shared Spaces– Google docs docs.google.com

– Projectspaces.com www.projectspaces.com

H1N1 and Beyond Conference

More Good Stuff

• Voice– Skype www.skype.com

• Endpoint Control– Control Guard www.controlguard.com

• Theft Control– Computrace www.absolute.com

H1N1 and Beyond Conference

Conclusion

• Start Now• Stress Test• Coordinate with HR• Leverage– Master DR Plan– Staff Relationships