The Disaster Recovery

1
The Disaster Recovery Business Resumption
Program

• Bob Gazdik PE, CSP, ARM
• Director, Technology Risk Control

2
The Executive Plan

• Where do we start?
• What should we protect?
• What should the Risk Assessment include?
• What controls are in place and what is needed?
• How much should we spend?
• Are we spending our money effectively?
• Common plan elements
• 2

3
Where Do We Start?

• Executive Vision Commitment
• Maximum loss (dollars or time) the business may
  sustain
• What effect on future growth is acceptable?
• Appoint the DR/BC Program Administrator
• Authorized to administer the program keep
  current
• Establish the DR/BC Committee
• Appropriate expertise knowledge
• Authority to commit resources
• 3

4
What Should We Protect?

• Personnel Employees, Contractors, Visitors,
  Public
• Life Safety Objectives
• Key Employee/Contractor Business Strategies
• Property Utilities, Building, Equipment ,
  Inventory
• Determine the value
• Replacement cost
• Replacement time
• The Business
• Business Interruption Impact
• Effect on Business Relationships
• 4

5
What Should the Risk Assessment Include?

• Potential Events
• Natural geological meteorological
• Human Technological accidental intentional
• Security is now integral to the process
• Vulnerability to the Event
• Location
• Controls in place
• The Potential Impact
• Loss of assets
• Impact to business or future growth
• 5

6
What Controls Are In Place and What Is Needed?

• Mitigation Goal
• Prevent occurrence or limit the impact
• Emergency Response Goal
• Safely evacuate to allow prompt emergency
  response
• Business Continuity Goal
• Maintaining critical/time sensitive operations
  during emergency
• Business Resumption Goal
• Restoration that achieves business short term
  long term goals
• 6

7
How Much Should We Spend?

• Establish Performance Expectations
• Everything works as designed
• Minimum building code may not be enough
• One of the systems/controls fails to operate
• The need for redundant systems
• The need for proper maintenance programs
• Event that overwhelms the site
• Public/Private Partnerships
• Key Personnel Back-Up Plan
• Property Business Processes Alternate Sites
• 7

8
Are We Spending Our Money Effectively?

• Achieves Executive Vision Objectives
• Short Term Long Term
• Complies with Government Regulation Legislation
• Supports Company Codes of Practice
• Training
• Exercise, Evaluation Corrective Actions
• 8

9
Common Plan Elements

• Normal Operations and Emergency Mode
• Finance, Administration Resources
• Direction, Control Coordination
• Operations Procedures
• Communication
• 9

10

• Operator Assisted Q A

Bob Gazdik PE, CSP, ARM Director, Technology
Risk Control The St. Paul