Business Continuation Plan Program Overview

1
Business Continuation Plan / Program Overview

• State CIO Council Meeting
• June 24, 2008

2
Lottery Business Continuation Plan / Program
Overview Topics

• Lottery BCP overview
• BCP development process and planning assumptions
• BCP Components
• BCP Activation Process
• Lottery Network / Disaster Recovery
  Infrastructure Overview
• Business Continuation Management Program
  Overview, Current priorities

3
BCP Development Process Overview (FY 04)

• Gap Analysis (existing Disaster Recovery Plans,
  etc.)
• Threat/Risk Analysis
• Failure or Loss Scenario
• Impact and Probability Rating
• Business Impact Analysis (BIA) Process
• Identify business functions for all Lottery
  business units
• Determine frequency, impact, Recovery Time
  Objective (RTO), etc.
• Prioritized and approved by Lottery Executive
  Team
• 1 Priorities focused on recovery of critical
  gaming operations / revenue generation
  capabilities

4
BCP Planning Assumptions

• Plan content is focused on recovery of our
  revenue-generating capabilities resulting from a
  disaster in which the administrative offices and
  primary Data Center are no longer operable and
  therefore requires activation of the Backup Data
  Center in Burns, Oregon.
• Lottery worst-case vs. State worst-case
• Due to the nature of the Lotterys business and
  planning assumptions, this includes the IT
  infrastructure and software applications required
  to operate the Lotterys games.

5
BCP Development Process

• Plan Development Critical content based on BIA
  priorities and best practices
• Plan Overview and Activation Procedures
• Emergency Procedures Life Safety
• IT Recovery Procedures
• Emergency Purchasing Procedures
• Team and Vendor Directories
• Business Unit Plans Procedures
• Forms / Logs, Inventory, Organizational Charts,
  etc.
• Maintenance and Distribution Procedures
• Initial BCP Distribution and Awareness

6
BCP Activation Procedures
7
(No Transcript)
8
Business Continuation Management Program FY
08-09

• Overview
• Current Priorities
• Improve recovery capability for the Lotterys
  Video Lottery, On-line, and Internal Control
  System (ICS) systems, Lotterys gaming network
  and critical business systems
• Maintain and distribute current BCP content
• BCP Awareness Training
• BCP testing Conduct table-top exercise (BCP
  Activation), Conduct recovery tests Video
  Lottery System Recovery, etc.
• Content Development Phase 3 and Phase 4
  Business functions, etc.
• State of Oregon BCP project participation

9
Lottery Business Continuation Plan / Program

• Q A?