Chapter 7- slide 1 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Chapter 7 Enterprise Infrastructure, Metrics, and Business Continuity Planning Prof. Anita Beecroft, Kwantlen Polytechnic University in British Columbia created the original slides for Chpt 7 Prof. Tim Richardson, University of Toronto created the additional slides on off-site back-up and business continuity planning in March 2011

Chapter 7- slide 2 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup – a historical context In 47 B.C. Julius Caesar commanded his troops to burn the famous library at Alexandria

Chapter 7- slide 3 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup – a historical context In A.D. 391 the library was burnt again, this time by a Christian emperor named Theodosius I Theodosius was the last emperor to rule over both the eastern and the western halves of the Roman Empire easternwesternRoman Empire

Chapter 7- slide 4 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup – a historical context In A.D. 642 Omar, the Caliph of Baghdad had his army burn down the library all excellent lessons in the importance of off-site backups. If there had been a back-up of some documents after the original fire, the world would have a priceless archeological resource

Chapter 7- slide 5 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup a Snug Fit for Adidas Canada Adidas Canada has a head office, distribution centre, showroom and many stores throughout Canada. From all of these locations, a great deal of data is generated. The backup of this data was outsourced to Storagepipe, a company in Toronto. Storagepipe backs up Adidas Canadas data daily, weekly and monthly. Adidas does its own inhouse backup at year-end.

Chapter 7- slide 6 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup a Snug Fit for Adidas Canada 1. Adidass agreement with StoragePipe is part of a business continuity plan. 2. Offsite storage provides a measure of protection for the companys crucial data and information.

Chapter 7- slide 7 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Business Continuity The ability for a business to continue is important in an intensely competitive environment If business was NOT so competitive, you could take time to recover from an event/disaster, and re- develop business with your customers

Chapter 7- slide 8 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Business Continuity Because business IS competitive, compounded by the effects of the Economic Environment Technological Environment Political – Legal – Regulatory Environment Social – Cultural Environment Geographic Environment Weather extremes Time zones Climate changes

Chapter 7- slide 9 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup Business Continuity 1. To create a possibility of Business Continuity we use 2. Contingency Planning 3. See alriskcontingencyplanning.htm alriskcontingencyplanning.htm

Chapter 7- slide 10 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup Business Continuity 1. What sort of personal continuity plan do you have for your car, apartment, and other important parts of your life?

Chapter 7- slide 11 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Offsite Backup a Snug Fit for Adidas Canada 3. When was the last time you were dealing with a company and someone said, Im sorry but our computer systems are down right now, so I cant help you? 4. How did that make you feel? 5. How did you react?

Chapter 7- slide 12 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Business Continuity Planning Business continuity planning (BCP) is a rigorous and well-informed organizational methodology used to develop a business continuity plan. In the past, this plan only addressed the steps an organization would follow to recover from a disaster or extended disruption. Now the BCP may be more all-encompassing addressing all aspects of the organization. BCP, like the systems development life cycle has consecutive phases. LO4

Chapter 7- slide 13 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto Business Continuity Planning Methodology LO4

Chapter 7- slide 14 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto BCP Phases 1. The organizational strategic plan gives the relative importance of resources, processes, systems and other assets. 2. Analysis includes impact analysis (risk assessment), threat analysis (recovery details for various threats)and impact scenario analysis (worst-case scenarios for each threat). At the conclusion of this phase, a requirement recovery document outlines critical and non-critical IT systems, information, threats and worst-case scenarios for each type of disaster. LO4

Chapter 7- slide 15 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto BCP Phases 3. The design phase results in a disaster recovery plan based on a disaster recovery cost curve. LO4

Chapter 7- slide 16 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto BCP Phases 3. Design (continued) During the design phase, a collocation facility may be rented. This facility would include office space and telecommunications equipment. Backup information could also be stored at this facility. Some organizations rent a hot site which is a separate and fully equipped facility. In the event of a problem, employees could relocate here and begin working immediately. A cold site is rented space that has no computer equipment. LO4

Chapter 7- slide 17 Prof. Anita Beecroft, Kwantlen Polytechnic University, B.C. Prof. Tim Richardson, University of Toronto BCP Phases 4. During the implementation phase, IT systems are evaluated to make sure disaster recovery is adequately addressed. Procedures, rental agreements and training are implemented. 5. During testing the disaster recovery plans for various scenarios are tried out. 6. For maintenance, systems continue to be monitored, supported and maintained especially when new threats are identified.