BusinessContinuityandDisasterRecoveryTrends,Considerations,&LeadingPracticesNovember13,2014Presentedby:JonBronson–LosAngelesTreyMacDonald–Atlanta©2014ProtivitiInc.CONFIDENTIAL:Thisdocumentisforyourcompany'sinternaluseonlyandmaynotbecopiednordistributedtoanotherthirdparty.2JonBronsonisaManagingDirectorinProtiviti'sLosAngelesRiskConsultingpractice.HehasledmanybusinesscontinuityengagementsacrossthecountryandisasubjectmatterspecialistindevelopingBCMprograms.JonisaCertifiedBusinessContinuityProfessional(CBCP),CertifiedInformationSystemsAuditor(CISA),andaCertifiedProjectManagementProfessional(PMP).Hehasover17yearsoflarge-scaleprojectmanagementexperiencecomplementedbyanEngineeringMaster'sdegreefromtheUniversityofSouthernCalifornia.Today’sPresentersTreyMacDonaldisaDirectorinProtiviti’sAtlantaInformationTechnologyConsultingpractice.Hehasmorethan20yearsofexperienceintheInformationTechnology,FinancialServices,HealthCare,RiskManagementandInsurance,andEnergy/Utilitiesindustries.Hehasworkedinprofessionalservicesforthelast19years,focusingonITStrategy,BusinessContinuityManagement,Infrastructuremanagement,DataLifecycleManagement,SoftwareArchitecture,andDatabaseDesignandAdministration.Treyhashelpeddesign,developandimplementoptimizedITstrategies,infrastructure,anddisasterrecoveryenvironmentsformultipleclientsinkeyindustriesandhasservedasanarchitectandadministratorforseverallargescaletechnologyenvironments.©2014ProtivitiInc.CONFIDENTIAL:Thisdocumentisforyourcompany'sinternaluseonlyandmaynotbecopiednordistributedtoanotherthirdparty.3AgendaBusinessContinuityManagement–TheBasicsContinuityLandscape–Whathaschanged?KeyLessonsLearnedKeyProgramDevelopmentandEvaluationConsiderationsBusinessContinuityManagement-TheBasics©2014ProtivitiInc.CONFIDENTIAL:Thisdocumentisforyourcompany'sinternaluseonlyandmaynotbecopiednordistributedtoanotherthirdparty.5AStandardApproach?AGooglesearchon‘BusinessContinuityManagement’returns9,610,000results©2014ProtivitiInc.CONFIDENTIAL:Thisdocumentisforyourcompany'sinternaluseonlyandmaynotbecopiednordistributedtoanotherthirdparty.6BusinessContinuityis……thedevelopmentofstrategies,plansandactionswhichprovideprotectionoralternativemodesofoperationforthoseactivitiesorbusinessprocesseswhich,iftheyweretobeinterrupted,mightotherwisebringaboutaseriouslydamagingorpotentiallyfatallosstotheenterprise.1CrisisManagementPlanThecrisismanagementplanprovidesthekeycommunicationmechanismsnecessarytoensureemployeesafety,provideinitialinformationanddirection,andorganizeongoingactions.2DisasterRecoveryPlan(IT)ThedisasterrecoveryplantypicallyreferstotheplansinplacetorestoreessentialInformationTechnology(IT)systemsandapplicationsthatenablecriticalbusinessprocesses.3BusinessResumptionPlanThebusinessresumptionplansarespecifictoeachcriticalbusinessfunctionandarticulatethespecificstepsnecessarytoenabletherespectiveprocess(e.g.payroll).©2014ProtivitiInc.CONFIDENTIAL:Thisdocumentisforyourcompany'sinternaluseonlyandmaynotbecopiednordistributedtoanotherthirdparty.7BusinessContinuityManagementMethodology©2014ProtivitiInc.CONFIDENTIAL:Thisdocumentisforyourcompany'sinternaluseonlyandmaynotbecopiednordistributedtoanotherthirdparty.8ISO22301ISO27031CobiTFFIECFRBHIPAAFERCDRIIInstituteaprocessthatincludescrisismanagement,businessresumptionplanningandITdisasterrecoveryAssesscurrentmitigat...