0105 BRPA Setting Recovery Priorities

1
Business Resumption Planners Association Overview
of a Large Scale Tabletop
John Mantsch, CBCP ABN AMRO
January 17, 2006
2
Why are you here today

• Lessons Learned from ABN AMROs Regional
  Tabletop Exercise
• Management Direction
• Internal/External Audits
• Develop, Design and Deliver a Large Scale
  Tabletop

3
Table of Contents
Basic Tabletop Recipe

• Exercise Scope
• Disruption Scenario
• Audience
• Data Collection
• Running the Exercise
• Exercise Results
• Lessons Learned

4
Exercise Scope
Getting Started

• Define the Scope
• Timeframe for Completion
• Determine Participants
• Delivery and Initiation

5
Exercise Scope
Define the Scope

• Introduction
• ABN AMRO Streamlined Tabletop Process
• Take Home Test
• Exercise Objectives
• Identify inter-department dependencies or issues
• Will determine response to the scenario
• Identify and document improvement opportunities
  within individual business continuity plans.
• Site Logistics
• Action Items
• Capture essential and critical issues and
  recommendations
• Assign and track next steps and process
  improvements
• Update Plans

6
Exercise Scope
Timeline Deliverables

• Timeframe for Completion
• Overall Timeline Six to eight weeks
  minimum
• Documentation Exercise Handbook Data
  Collection Slides Feedback Questionnaire
• Data Collection
• Site Prep

Exercise Handbook Table of Contents Introduction
Purpose of Exercise Ground Rules Due
Date Scenario Current Situation Points to
Consider Reporting Results Inquiries Appendix
A Travel Directions to Illinois Recovery
Center Appendix B Corporate Continuity Risk
Assessment Business Recovery Priorities Appendix
C Tabletop Exercise Report Template

7
Exercise Scope
Timeline Deliverables

• Determine Participants
• Identify Divisions
• Identify Responsible Representatives per Division
• Clarified Recovery Responsibilities and Roles
• Capture Tabletop Participants
• Delivery and Initiation
• Instructions and Worksheets

8
Disruption Scenario
The Event

• State Basis of Outage Scenario
• Size of Affected Area
• Length of Outage
• Unknown factors
• No Surprises

9
Disruption Scenario
The Tabletop Scenario
At 524PM on a Monday, City of Chicago officials
announce they have credible evidence that
terrorists have hidden a dirty-bomb somewhere
in Downtown Chicago. The exact location is
unknown. As a precaution, the City has ordered a
mandatory evacuation of the area bounded by
Kinzie St. on the north, the Kennedy Expressway
on the west, Roosevelt Road on the south and Lake
Michigan on the east. This evacuation affects
ABN-AMRO offices at 540 West Madison, 161 North
Clark, 79 West Monroe, and 135 South LaSalle.
The City expects that a search of all buildings
and underground infrastructure will at least
three days. The Banks Gold Crisis Management
Team met at 600 PM and ordered the activation of
the Banks recovery sites.

10
Disruption Scenario
Tabletop Assumptions
All personnel have been notified and accounted
for. There is no loss of life or job
abandonment. No employee is out due to sickness,
vacation, or personal business All personnel are
able to travel to and from your designated
recovery site. All computing systems and
environments are operating business as
usual. Network and voice communications are
operating business as usual. All telephone and
FAX circuits have been re-directed to the
appropriate recovery seats. The workstations at
your recovery site are properly stocked with
basic office supplies. Mail delivery has been
rerouted. Other businesses within the cordoned
area are not operating in their normal locations.


11
Audience
Cast of Characters

• Business Areas
• Desktop Support
• Information Technology
• Facilities
• Business Continuity Management

12
Data Collection
More Ingredients

• What Data was Collected
• How was it Compiled
• How was it Used
• How was it Organized

13
Data Collection
Sample Data Sheet

• Department Name
• Representatives
• Facility Location
• Primary Functions

Commercial Banking (Barry Guiseman)
Michelle Tavis
135 S. LaSalle Street
Facilitate/manage sale and on-going delivery of
Bank products to commercial clients
14
Data Collection
Sample Data Sheet

• Relocation Site
• CCRA Recovery

IBM Plaza, 330 N. Wabash, 17th Floor
ChicagoNote relocation site not accessible due
to mandatory evacuation ordered as per Exercise
Handbook.
Level 1 0 to 4 hours
CCRA Business Recovery Priority Using the
Corporate Continuity Risk Assessment Business
Recovery Priorities, enter your departments
recovery priority time (i.e. Level-2, 4 to 24
hrs)
15
Data Collection
Sample Data Sheet
Preparation of loan committees by RMs and Credit
Pool

• Priority Functions Recovered
• Functions Not Recovered

Approval of loan committees at Credit Committee
Approval of account overdrafts
Approval of wire transfers
Closing/funding of loan documents
Functions of all bank systems delivering product
to customers (Account analysis, FX, Derivatives,
LC issuance, Funds Management, Leasing Trust,
etc.)
Access to collateral vault
16
Data Collection
Sample Data Sheet
Recovery/availability of systems supporting -
Loan approvals (EAGLE)- Loan fundings/repayments
(AFS)- Wire transfers- Lockbox processing-
Cash management accounts and overdrafts- LC
(standby and trade) issuance- FX trading-
Derivatives trading- Cash investments (Funds
Management)- Leasing- Trust products Location
of other departments - availability of main
switchboard Delivery of paper-based documents -
ability to print mass quantities of documents and
delivered electronically

• Inter-dependency Issues/Concerns

17
Data Collection
Sample Data Sheet

• Inter-dependency Questions

• How do we identify where other departments are
  relocated (and how do we notify them of our
  temporary location)?
• How will we know when critical systems have been
  recovered?

18
Running the Exercise
Showtime

• Introductions
• How data will be displayed
• Role of Time Keeper
• Notes and Follow-ups
• Running smooth and on schedule

19
Exercise Results
Searching for Excellence

• Overall Comments
• Feedback Questionnaire
• Team Feedback
• Questionnaire Evaluation and Summary Results

20
Lessons Learned
Improving the Process

• Planning
• Primary Contacts
• Maintenance of Contacts
• Team Resources
• Top Management Support

21
Questions
For further assistance

• ABN AMRO
• John Mantsch (312-904-3226)
• john.mantsch_at_abnamro.com