enterprise continuity management program 1david lindstedt ([email protected])[email protected]...
Post on 19-Dec-2015
220 views
TRANSCRIPT
Enterprise Continuity Management Program
1David Lindstedt ([email protected])
Enterprise Continuity Management Program
Program Overview to the BCP Advisory Board
01/15/09
Enterprise Continuity Management Program
2
Agenda
• Continuity Plan Status and Objectives:– 2008– 2009– Beyond…
• LDRPS 10 Migration
• Annual “Reflections”
• BCP Federation
• Questions?
Enterprise Continuity Management Program
3
Continuity Plan Status and Objectives
2008 FEMA-Led University-Wide Tabletop Exercise
Enterprise Continuity Management Program
4
New ECMP Team Member!
• Matt Baldwin, CBPC• Over six years BCP experience with Nationwide and
Chase • Wealth of expertise with business continuity, IT DR,
and strategic direction
Enterprise Continuity Management Program
5
OSU Plans in LDRPS (194 new in 2008)Area Current LDRPS Plans
Business and Finance* 67
CFAES (Columbus) 23
County Extension Offices* 89
Department of Athletics 24
Office of Academic Affairs* 16
Office of the CIO 14
Office of Human Resources 14
Office of Research 7
Pandemic Flu (all areas) 61
Regional Campuses (incl. all Wooster / ATI) 47
Student Life 57
Other (University Communications, etc.) 5
Templates, BEAP, etc 41
Total 459
Enterprise Continuity Management Program
8
Partnerships and Collaboration
• Planning Partners– B&F = Gabrielle Reissland – County Extension Offices (88) = Aletha Reshan – OAA = TBD (Q1 09?)
• Business Resilience Group (BRG)– Emergency and preparedness reps from across the
university and medical center– Shared resources, information, expertise, and lessons
learned– Enterprise-wide coordination – (2009 = Virtual EOC software customization and
administration)
Enterprise Continuity Management Program
Flow of Incident Response
AC
TIO
N
(+ O
wne
r)
Evacuation / Shelter-in-Place
(All Affected)
Emergency Response (Fire Dept., Public
Safety, EHS, Others)
Gui
ding
D
ocum
ent
Business Continuity (Individual Units /
Departments)
University Emergency Operations Center (EOC) if needed
(University Leadership)
Building Emergency Action
Plan [formerly EOEP] (EHS)
Federal, State, Local, and OSU
Guidelines
Comprehensive Emergency
Management Plan (Emergency Management Coordinator)
Continuity Plans (Individual Units /
Departments)
Time
Enterprise Continuity Management Program
11
L10 Conversion and Upgrade
• Requirement = Migrate from the LDRPS 9.1 platform to the redesigned 10 platform by December 2008
• 954 plans and 849 users from 10 universities successfully migrated
• Go Live = 07/21/08 • On time and on budget!!
ID Task Name Work Actual Work RemainingWork
Duration Start Finish
0 LDRPS 10 Upgrade Project 1,027.82 hrs 1,027.82 hrs 0 hrs 57.11 wks? Thu 7/5/07 Wed 8/13/08
Enterprise Continuity Management Program
12
Advantages of New L10 System
• New look and feel (takes “old” users some getting used to)
• “Tighter” navigation• 100% customized plan navigator steps• Spell check!! • Better enterprise-level reporting capabilities
Enterprise Continuity Management Program
13
New Dependency Mapping Capabilities(will take time to build, implement, and report)
Enterprise Continuity Management Program
15
Annual “Reflections”
2008 OHR Cross-Departmental Integrated Tabletop Exercise
Enterprise Continuity Management Program
16
Vision
• The ECM Program will:– Serve as industry experts– Collaborate with all
“university resilience” entities– Partner with all areas to:
• Complete an SEM and BCP plan• Review and update the plans every six months• Exercise all plans annually
– Provide leadership in the Central Ohio community
Enterprise Continuity Management Program
17
Our Efforts are Having a Positive Effect!
• Anecdotal Evidence:– Tunnel fire
• Those who had plans…• …and those who did not.
– Wind storm
Enterprise Continuity Management Program
18
What We’ve Done Well
• Flexible schedules and nimble response
• Templates, cheat sheets, and “quick start” guides
• Train-the-trainer (and early adopter)
• Leader in Higher Ed• Publications and
presentations• Many accomplishments
(see handout)
Enterprise Continuity Management Program
19
Concerns for 2009
• Participation (170 cancelled workgroup sessions in 2007 and 2008)
• Bringing completed areas back for six-month updates and annual exercises
• Bringing on the Schools and academic areas• Synthesizing and prioritizing processes and functions
across silos
Enterprise Continuity Management Program
20
Recommendations from the BCP Steering Committee to CIO Starkoff
• Charge a member (existing or new) of the University Emergency Operations Center (EOC) to address continuity management concerns
• Encourage OSU Senior Leadership to “strengthen and promote” the university’s commitment to continuity planning
• Encourage Vice Presidents’ review and involvement
• Establish the Enterprise Continuity Management program as an OSU “Office”
• Hire a 4th FTE for the Enterprise Continuity Management program
• Encourage Board of Trustees members to inquire about continuity plans
• Coordinate with the OSUMC
Enterprise Continuity Management Program
21
BCP Federation
2008 Student Health Center Tabletop Exercise
Enterprise Continuity Management Program
22
Reminder of Objectives
• Share costs (determined by percent of institution’s total operating budget)– LDRPS software annual license– LDRPS administration (mostly = OSU ECM
Program staff)• Share best practices
– Quarterly conferences – Annual “summits”
• Note: Renegotiation of MOU = July, 2009
Enterprise Continuity Management Program
23
BCP Federation
• Program underway:– CSU– MU (dropping out of BCP Fed)– OU– WSU
• Program starting:– UA
• Program pending:– NEOUCOM– UT– YSU– Shawnee State University– Ohio Board of Regents
• OSU continues to provide support for all institutions:– Regular SOR data
imports (employees, vendors, etc.)
– Customizations– LDRPS v10 expertise– General leadership
• Top issues:– Funding– July ’09 renewal of MOU