enterprise continuity management program 1david lindstedt ([email protected])[email protected]...

24
Enterprise Continuity Management Program 1 David Lindstedt ( [email protected] ) Enterprise Continuity Management Program Program Overview to the BCP Advisory Board 01/15/09

Post on 19-Dec-2015

220 views

Category:

Documents


2 download

TRANSCRIPT

Enterprise Continuity Management Program

1David Lindstedt ([email protected])

Enterprise Continuity Management Program

Program Overview to the BCP Advisory Board

01/15/09

Enterprise Continuity Management Program

2

Agenda

• Continuity Plan Status and Objectives:– 2008– 2009– Beyond…

• LDRPS 10 Migration

• Annual “Reflections”

• BCP Federation

• Questions?

Enterprise Continuity Management Program

3

Continuity Plan Status and Objectives

2008 FEMA-Led University-Wide Tabletop Exercise

Enterprise Continuity Management Program

4

New ECMP Team Member!

• Matt Baldwin, CBPC• Over six years BCP experience with Nationwide and

Chase • Wealth of expertise with business continuity, IT DR,

and strategic direction

Enterprise Continuity Management Program

5

OSU Plans in LDRPS (194 new in 2008)Area Current LDRPS Plans

Business and Finance* 67

CFAES (Columbus) 23

County Extension Offices* 89

Department of Athletics 24

Office of Academic Affairs* 16

Office of the CIO 14

Office of Human Resources 14

Office of Research 7

Pandemic Flu (all areas) 61

Regional Campuses (incl. all Wooster / ATI) 47

Student Life 57

Other (University Communications, etc.) 5

Templates, BEAP, etc 41

Total 459

Enterprise Continuity Management Program

6

Active Work Group Status

Enterprise Continuity Management Program

7

4-Year Non-Academic Rollout Schedule

Enterprise Continuity Management Program

8

Partnerships and Collaboration

• Planning Partners– B&F = Gabrielle Reissland – County Extension Offices (88) = Aletha Reshan – OAA = TBD (Q1 09?)

• Business Resilience Group (BRG)– Emergency and preparedness reps from across the

university and medical center– Shared resources, information, expertise, and lessons

learned– Enterprise-wide coordination – (2009 = Virtual EOC software customization and

administration)

Enterprise Continuity Management Program

Flow of Incident Response

AC

TIO

N

(+ O

wne

r)

Evacuation / Shelter-in-Place

(All Affected)

Emergency Response (Fire Dept., Public

Safety, EHS, Others)

Gui

ding

D

ocum

ent

Business Continuity (Individual Units /

Departments)

University Emergency Operations Center (EOC) if needed

(University Leadership)

Building Emergency Action

Plan [formerly EOEP] (EHS)

Federal, State, Local, and OSU

Guidelines

Comprehensive Emergency

Management Plan (Emergency Management Coordinator)

Continuity Plans (Individual Units /

Departments)

Time

Enterprise Continuity Management Program

10

LDRPS 10 Migration

Enterprise Continuity Management Program

11

L10 Conversion and Upgrade

• Requirement = Migrate from the LDRPS 9.1 platform to the redesigned 10 platform by December 2008

• 954 plans and 849 users from 10 universities successfully migrated

• Go Live = 07/21/08 • On time and on budget!!

ID Task Name Work Actual Work RemainingWork

Duration Start Finish

0 LDRPS 10 Upgrade Project 1,027.82 hrs 1,027.82 hrs 0 hrs 57.11 wks? Thu 7/5/07 Wed 8/13/08

Enterprise Continuity Management Program

12

Advantages of New L10 System

• New look and feel (takes “old” users some getting used to)

• “Tighter” navigation• 100% customized plan navigator steps• Spell check!! • Better enterprise-level reporting capabilities

Enterprise Continuity Management Program

13

New Dependency Mapping Capabilities(will take time to build, implement, and report)

Enterprise Continuity Management Program

14

OSU L10 User Support Web Site and Training Videos

Enterprise Continuity Management Program

15

Annual “Reflections”

2008 OHR Cross-Departmental Integrated Tabletop Exercise

Enterprise Continuity Management Program

16

Vision

• The ECM Program will:– Serve as industry experts– Collaborate with all

“university resilience” entities– Partner with all areas to:

• Complete an SEM and BCP plan• Review and update the plans every six months• Exercise all plans annually

– Provide leadership in the Central Ohio community

Enterprise Continuity Management Program

17

Our Efforts are Having a Positive Effect!

• Anecdotal Evidence:– Tunnel fire

• Those who had plans…• …and those who did not.

– Wind storm

Enterprise Continuity Management Program

18

What We’ve Done Well

• Flexible schedules and nimble response

• Templates, cheat sheets, and “quick start” guides

• Train-the-trainer (and early adopter)

• Leader in Higher Ed• Publications and

presentations• Many accomplishments

(see handout)

Enterprise Continuity Management Program

19

Concerns for 2009

• Participation (170 cancelled workgroup sessions in 2007 and 2008)

• Bringing completed areas back for six-month updates and annual exercises

• Bringing on the Schools and academic areas• Synthesizing and prioritizing processes and functions

across silos

Enterprise Continuity Management Program

20

Recommendations from the BCP Steering Committee to CIO Starkoff

• Charge a member (existing or new) of the University Emergency Operations Center (EOC) to address continuity management concerns

• Encourage OSU Senior Leadership to “strengthen and promote” the university’s commitment to continuity planning

• Encourage Vice Presidents’ review and involvement

• Establish the Enterprise Continuity Management program as an OSU “Office”

• Hire a 4th FTE for the Enterprise Continuity Management program

• Encourage Board of Trustees members to inquire about continuity plans

• Coordinate with the OSUMC

Enterprise Continuity Management Program

21

BCP Federation

2008 Student Health Center Tabletop Exercise

Enterprise Continuity Management Program

22

Reminder of Objectives

• Share costs (determined by percent of institution’s total operating budget)– LDRPS software annual license– LDRPS administration (mostly = OSU ECM

Program staff)• Share best practices

– Quarterly conferences – Annual “summits”

• Note: Renegotiation of MOU = July, 2009

Enterprise Continuity Management Program

23

BCP Federation

• Program underway:– CSU– MU (dropping out of BCP Fed)– OU– WSU

• Program starting:– UA

• Program pending:– NEOUCOM– UT– YSU– Shawnee State University– Ohio Board of Regents

• OSU continues to provide support for all institutions:– Regular SOR data

imports (employees, vendors, etc.)

– Customizations– LDRPS v10 expertise– General leadership

• Top issues:– Funding– July ’09 renewal of MOU

Enterprise Continuity Management Program

24

Questions and Discussion

2008 RecSports Tabletop Exercise