BCP Presentation to IT@Cork 26th April 2004

1. BCP Presentation to IT@Cork26th April 2004 Presented by Mick O’Regan Disaster Recovery Co-Ordinator Contact details: • MickFORegan@eircom.net • Mobile: 087-2897687

2. Terminology Business Continuity Planning Disaster Recovery Incident Management Emergency planning Crisis Management

4. Plan for the Worst Hope for the Best

5. DR v BCP • DR • Plan developed by IT to recover IT systems • Little or no business involvement • BCP • Business units define their critical functions • For these functions they need to define the “tools of the trade” • ie phones, IT, people, supplies etc. • Business Units need to ID their critical IT systems • Business units needs to clarify • How long they can continue without the IT systems • What loss of data they can cater for • Their ability to function without the IT systems

6. Timeline For recovery - Silver State of Recovery Incident Bus. Users working using manual systems Last good off-site backup Recover lost work & input new work since incident Back to BAU in Hot-site Synchronize systems Start of End of Reload Lost Work Reload Evaluate incident (to be reinput by Go to hot-site Reload of Last Good off-site Bus. Users) Recall tapes from off-site backup off- site storage Time to Recover Time .

7. IT Strategy for DR Platinum = Server duplication & data Mirroring Gold = Server drop-in & data mirroring Silver = Hot-site servers & data from tape backup Bronze = New server purchased & data from tape backup

8. Business options for DR Service - Time to recovery - State of recovery Platinum - less than 4 hours - little or no loss of data Gold - within 24 hours - little or no loss of data Silver - 24 to 96 hours - data to last good backup Bronze - weeks - data to last good backup

9. Pro’s and Con’s of DR options Platinum(Server duplication & data Mirroring) • Con’s - cost; error replication • Pro’s - Test & Development ; large queries; easy to test Gold(Server drop-in & data Mirroring) • Con’s - syndication risk; not easy to test • Pro’s - less costly than Platinum Silver(Hot-site servers & data from tape backup) • Con’s - cost; not easy to test • Pro’s - replacement drop-in for faulty server Bronze(New server purchased & data from tape backup) • Con’s - virtually impossible to test; high risk • Pro’s - little or no cost

10. BCP - Critical Success Factors • BCP - a continuous exercise • Senior Management support vital to success • Roles and responsibilities - must be built into job spec. ie Appraisal system ; staff turn-over • Full time v Part time v Outsource BCP Process • ID requirements - build into change cycle / projects • Put agreed DR strategy into place • Test - semi-annually • Review - quarterly

11. Types of Exercises Incident Team call-out Table top exercise Restoration test (scheduled) Restoration test (Surprise) Run live from alternative location

12. Battle Box What is a Battle Box? What should go into the Battle Box?

13. Battle Box Exercise Driving to work on a nice summers day listening to 96FM “There’s a report just coming in of a fire in …..” You round the corner to the Business park There is thick black smoke in the air The fire brigade is outside your building Gardai are setting up a cordoned off area - no entry to public UFN • Make out a list for the Battle Box before it’s too late • “It could be you”

14. To fail to plan is to plan to fail Questions