rebuilding after a disaster can be proactive

32
September 23, 2003 September 23, 2003 Copyright © 2003 Tim Salaver, Dana Software, Inc. Copyright © 2003 Tim Salaver, Dana Software, Inc. 1 Rebuilding After a Disaster Rebuilding After a Disaster Can Be Proactive Can Be Proactive MTP4031 MTP4031 Tuesday, 9:15 a.m. Tuesday, 9:15 a.m. Tim Salaver Tim Salaver Dana Software, Inc. Dana Software, Inc.

Upload: tim-salaver-mba-pmp-cssmbb-csm

Post on 20-Aug-2015

166 views

Category:

Business


0 download

TRANSCRIPT

September 23, 2003September 23, 2003 Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 11

Rebuilding After a Disaster Rebuilding After a Disaster Can Be ProactiveCan Be Proactive

MTP4031MTP4031Tuesday, 9:15 a.m. Tuesday, 9:15 a.m.

Tim SalaverTim Salaver

Dana Software, Inc.Dana Software, Inc.

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 22

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 33

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 44

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 55

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 66

The Disaster Plan ChecklistThe Disaster Plan Checklist

The checklist helps managers to The checklist helps managers to put together a disaster plan for put together a disaster plan for their organization. It covers their organization. It covers physical disasters, such as fires, physical disasters, such as fires, severe weather, acts of God, severe weather, acts of God, floods, or terrorist attacks.floods, or terrorist attacks.

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 77

The Disaster Plan (DP) The Disaster Plan (DP) DefinitionDefinition

A DP aims to prevent or reduce A DP aims to prevent or reduce the likelihood of a disaster the likelihood of a disaster occurring by identifying threats occurring by identifying threats and taking the necessary and taking the necessary preventative action, and to preventative action, and to ensure that if a disaster does ensure that if a disaster does strike, the organization is strike, the organization is prepared to deal with it prepared to deal with it effectively.effectively.

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 88

Alternative ReferencesAlternative References

Disaster RecoveryDisaster Recovery Business ContinuityBusiness Continuity Contingency PlanningContingency Planning Emergency PreparednessEmergency Preparedness

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 99

Disaster Plan PurposeDisaster Plan Purpose

Having a disaster plan forces Having a disaster plan forces you to make decisions before a you to make decisions before a disaster strikes, allowing you to disaster strikes, allowing you to spend the first critical days after spend the first critical days after a disaster dealing with the a disaster dealing with the situation instead of deciding how situation instead of deciding how to deal with it.to deal with it.

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1010

AdvantagesAdvantages

Supports the continuity of Supports the continuity of operationsoperations

Mitigates the financial Mitigates the financial consequencesconsequences

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1111

Del Monte CorporationDel Monte Corporation

Toxic PCB (Polychlorinated Toxic PCB (Polychlorinated Bicarbonate) contamination affects Bicarbonate) contamination affects first 7 floors of world headquarters, first 7 floors of world headquarters, including the Data Center.including the Data Center.

Took 14 months to recover and over Took 14 months to recover and over $5 million in 1984 dollars.$5 million in 1984 dollars.

Data Center temporarily relocated.Data Center temporarily relocated. Have you ever been involved in a Have you ever been involved in a

disaster?disaster?

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1212

DisadvantagesDisadvantages

Poor planning or an out-of-date Poor planning or an out-of-date plan may be worse than no plan plan may be worse than no plan at all.at all.

The planning process can be The planning process can be time-consuming.time-consuming.

““Failure to plan is planning to Failure to plan is planning to fail.”fail.”

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1313

Action ChecklistAction Checklist

1.1. Establish a Disaster Planning TeamEstablish a Disaster Planning Team

2.2. Carry Out a Risk AssessmentCarry Out a Risk Assessment

3.3. Draw Up a Disaster PlanDraw Up a Disaster Plan

4.4. Pilot the PlanPilot the Plan

5.5. Communicate and Implement the Communicate and Implement the PlanPlan

6.6. Monitor, Revise, and Improve the Monitor, Revise, and Improve the PlanPlan

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1414

Establish a Disaster Planning Establish a Disaster Planning TeamTeam PersonnelPersonnel FacilitiesFacilities Public RelationsPublic Relations Information TechnologyInformation Technology General ManagementGeneral Management DP AdvisorDP Advisor Identify and prioritize the Identify and prioritize the

business continuity activitiesbusiness continuity activities

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1515

Carry Out a Risk AssessmentCarry Out a Risk Assessment

Evaluate and analyze Evaluate and analyze vulnerabilitiesvulnerabilities

Distinguish between immediate Distinguish between immediate and long term needsand long term needs

List extra resources requiredList extra resources required Appoint a loss adjuster for Appoint a loss adjuster for

insurance claim processinsurance claim process

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1616

Risk Assessment DocumentsRisk Assessment Documents

Insurance coverageInsurance coverage Building and equipment Building and equipment

maintenancemaintenance Detection, alarm, and intrusion Detection, alarm, and intrusion

preventionprevention Safety and Fire PrecautionsSafety and Fire Precautions Document and Media storage Document and Media storage

systemssystems

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1717

Personal DisasterPersonal Disaster ss

Hard drive crash in a foreign country Hard drive crash in a foreign country The information is far more valuable The information is far more valuable

than the hardwarethan the hardware Cell phonesCell phones PDAsPDAs The Post-it Note Back-upThe Post-it Note Back-up What can be done to minimize riskWhat can be done to minimize risk

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1818

Draw Up a Disaster PlanDraw Up a Disaster Plan

Keep it Simple and Easy to Keep it Simple and Easy to UnderstandUnderstand

Worst Case ScenarioWorst Case Scenario Learn from othersLearn from others Recovery > 1+ yearRecovery > 1+ year

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 1919

Draw Up a Disaster PlanDraw Up a Disaster Plan

Key PersonnelKey Personnel Responsibilities and limits of authorityResponsibilities and limits of authority Location of offsite DP Control CenterLocation of offsite DP Control Center Prioritized functions and activitiesPrioritized functions and activities Floor PlansFloor Plans Evacuation proceduresEvacuation procedures Precautionary measuresPrecautionary measures Recovery period jobsRecovery period jobs Directory of emergency suppliers and Directory of emergency suppliers and

location of information sourceslocation of information sources Every business operation involvedEvery business operation involved

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2020

Employees Employees

Employee contact informationEmployee contact information Counseling and aidCounseling and aid Over communicate progressOver communicate progress Alternative payroll arrangementsAlternative payroll arrangements

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2121

Cost of DowntimeCost of Downtime

IndustryIndustry Rev/hourRev/hour Rev/EE hour Rev/EE hourEnergyEnergy $2,817,846$2,817,846 $569.20 $569.20TelcoTelco $2,066,245$2,066,245 $186.98 $186.98PharmaPharma$1,082,252$1,082,252 $167.53 $167.53PSPS $ 532,510$ 532,510 $ 99.59 $ 99.59MediaMedia $ 340,423$ 340,423 $119.74 $119.74

IT Performance Engineering & IT Performance Engineering & Measurement Strategies: Quantifying Measurement Strategies: Quantifying Performance Loss, Meta Group, Inc.Performance Loss, Meta Group, Inc.

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2222

Alternative premisesAlternative premises

Reciprocal arrangements with Reciprocal arrangements with other departments and business other departments and business partnerspartners

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2323

Continuity of operationsContinuity of operations

Operational ASAPOperational ASAP Inform customers, suppliers, Inform customers, suppliers,

investors, and communityinvestors, and community Brief PR contact for media and Brief PR contact for media and

information controlinformation control

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2424

Physical Communications Physical Communications

Forward callsForward calls Ad hoc telephone directoryAd hoc telephone directory Alternative mailingAlternative mailing

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2525

Equipment and ResourcesEquipment and Resources

Critical documents and their Critical documents and their locationlocation

Store backups offsiteStore backups offsite Identify key resourcesIdentify key resources Availability of cashAvailability of cash Establish resource networkEstablish resource network Multiple DP copies and floor Multiple DP copies and floor

monitorsmonitors

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2626

Mays Chemical CompanyMays Chemical Company

7-mile area7-mile area Hot site over 25 miles awayHot site over 25 miles away Fire department responseFire department response 1,000 chemicals and food 1,000 chemicals and food

ingredientsingredients Pop tartsPop tarts If a disaster did hit, would your If a disaster did hit, would your

organization survive?organization survive?

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2727

Pilot the PlanPilot the Plan

Test run with periodic drillsTest run with periodic drills Emergency response Emergency response

cooperation during drillcooperation during drill Amend plan as necessaryAmend plan as necessary

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2828

Communicate and Implement Communicate and Implement the Planthe Plan

Presentation by DP Team Presentation by DP Team membermember

Orient new employeesOrient new employees Address concernsAddress concerns

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 2929

Monitor, Revise, and Improve Monitor, Revise, and Improve the Planthe Plan Flexible and practicalFlexible and practical Log and Review reported Log and Review reported

DisastersDisasters Can you afford to not have a Can you afford to not have a

disaster plan?disaster plan? The costs of a disaster are not The costs of a disaster are not

just financial – they include just financial – they include interruption to business, wasted interruption to business, wasted time, and lost opportunitiestime, and lost opportunities

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 3030

DOs DOs DON’TsDON’Ts

Be preparedBe prepared Learn from Learn from

others’ mistakes others’ mistakes and successesand successes

Involve staffInvolve staff Make staff Make staff

awareaware Keep copies of Keep copies of

plan in many plan in many locationslocations

Don’t be Don’t be complacentcomplacent

Don’t assume Don’t assume you’ve thought you’ve thought of everythingof everything

It’s not a It’s not a onetime task—onetime task—keep it currentkeep it current

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 3131

ResourcesResources

Association of Contingency Association of Contingency Planners (ACP)Planners (ACP)

Business Recovery Managers Business Recovery Managers Association (BRMA)Association (BRMA)

Unisys CorporationUnisys Corporation Vulnerability AssessmentVulnerability Assessment Business Impact AnalysisBusiness Impact Analysis Architecture and ImplementationArchitecture and Implementation Disaster Recovery Planning Disaster Recovery Planning

September 23, 2003September 23, 2003Copyright © 2003 Tim Salaver, Dana Software, Inc.Copyright © 2003 Tim Salaver, Dana Software, Inc. 3232

Contact InformationContact Information

Tim Salaver Tim Salaver SVP, Chief Products Officer SVP, Chief Products Officer

Dana Software, IncDana Software, Inc381 Stockton Ave381 Stockton Ave

San Jose, CA 95126San Jose, CA 95126(408) 279-3838 Main(408) 279-3838 Main

(408) 535-4337 Direct (408) 535-4337 Direct [email protected]@danasoftwareinc.com

www.danasoftwareinc.comwww.danasoftwareinc.com