BCM and Security ROGSI/DMS Präsentation ROGSI/DMS Suite for Corporate Survival ROGSI/Business Impact Analysis TOP 7 Best Practices for Business Continuity Günter Glessmann ROG GmbH

BCM and Security TOP 7 - Best Practice 1.Automate every aspect of your BC plan 2.Don’t assume that your virtualized infrastructure enjoys full protection from service interruptions 3.Planning for business continuity is important, but not nearly as important as testing 4.Consider your strategy for data center location 5.Prioritize your business continuity functions to avoid overspending 6.Think of disaster recovery and business continuity as a managed service 7.Be sure to integrate mobility as a core element in your business continuity plan

BCM and Security TOP 7 - Best Practices

BCM and Security TOP 1 - Automate every aspect of your BC plan  Automate every aspect of your BC plan  Define automated failover and recovery processes  Plan for recovery at remote data centers (if no own second site)  Plan that data center employees were stranded at home  Plan that they are unable to access public transportation  Plan that roads are blocked due to downed trees  Plan any other access to data center site  Failover, recovery and restore steps need to be automated

BCM and Security TOP 1 - Automate every aspect of your BC plan – success story  We investigated all action plan to cope the worst case scenarios, always parting from our BCP plan in Rogsi.  Everyone is accepting the one and only definition of the criticality, embedded in the BCP-plan "Never waste a good crisis" and "every crisis gives opportunities".  The homework capacity was considerably enhanced, sleep-in, hotels, early arrivers, laissez-passer vouchers, etc.  The day itself, none of the pessimistic previsions came out.  We came to an activation rate of 47,2 %, 1/3 inside the buildings, 2/3 from home.

BCM and Security TOP 2 - Virtualized infrastructure is no protection from interruptions  Don’t assume that your virtualized infrastructure enjoys full protection from service interruptions  Plan to check access to application when one site is down  Plan to check current data  Plan switch to other server, if one site is down  Check backup strategy  Check backup data (not only strategy)  Test Recovery of backup - data  Virtualized infrastructure has to be checked and tested

BCM and Security TOP 3 - Planning is important, but not nearly as important as testing  Business continuity testing is a sensitive subject  22% of companies never test their business continuity plan  22% say they only test once a year  What's about the other 56% - what do they do?  Ensure to immediately enable availability of mission-critical applications  Test to enable mission-critical applications and procedures  If application don't failover to “backup” server  Critical work will stop  Meter will start running on your losses

BCM and Security TOP 4 - Consider your strategy for data center location  Consider your strategy for data center location  60% of North American companies with more than $50 million in revenue have more than one data center  Approximately 40% of midsize / large companies have only a single data center  Analyse the requirements of applications and processes  Recover Time Objective  Recover Point Objective  Data Loss  Based on this results create a strategy for your data center sites

BCM and Security TOP 5 - Prioritize your business continuity  Prioritize your business continuity functions to avoid overspending  Execute a BIA in depth to  Know the core business  Know the mission critical processes  Know the financial risks from an outage  Know dependencies between different processes  Know critical resources related to processes  Know workarounds for critical processes  Know the RTO and RPO  Outage of one process can stop the whole business  Know your business

BCM and Security TOP 6 - Think BC and DR as a managed service  Build DR and BC as a managed service – internal or external  Infrastructure, Security, Platforms, Network, Customer support  Select a partner or define BC-Department for BC and DR  IT services partner can help you recover from a service interruption  There are major difference between partner offerings  Hosted hardware  Disaster recovery tools  Managing services  Maintaining documentation

BCM and Security TOP 7 - Integrate mobility as a core element  Be sure to integrate mobility as a core element in your business continuity plan  Plan to execute your core application at any backup site  Plan to send out employees to any external place  Transportation  Hotel  Communication  Plan virtual workforces for more flexibility  Don't allow/accept know how in single persons

BCM and Security Any Question?