Enterprise Continuity Management Program 1David Lindstedt Enterprise Continuity Management Program Program Overview to the BCP Advisory Board 01/15/09

Enterprise Continuity Management Program 2 Agenda Continuity Plan Status and Objectives: –2008 –2009 –Beyond… LDRPS 10 Migration Annual “Reflections” BCP Federation Questions?

Enterprise Continuity Management Program 3 Continuity Plan Status and Objectives 2008 FEMA-Led University-Wide Tabletop Exercise

Enterprise Continuity Management Program 4 New ECMP Team Member! Matt Baldwin, CBPC Over six years BCP experience with Nationwide and Chase Wealth of expertise with business continuity, IT DR, and strategic direction

Enterprise Continuity Management Program 5 OSU Plans in LDRPS (194 new in 2008) AreaCurrent LDRPS Plans Business and Finance*67 CFAES (Columbus)23 County Extension Offices*89 Department of Athletics24 Office of Academic Affairs*16 Office of the CIO14 Office of Human Resources14 Office of Research7 Pandemic Flu (all areas)61 Regional Campuses (incl. all Wooster / ATI)47 Student Life57 Other (University Communications, etc.)5 Templates, BEAP, etc41 Total459

Enterprise Continuity Management Program 6 Active Work Group Status

Enterprise Continuity Management Program 7 4-Year Non-Academic Rollout Schedule

Enterprise Continuity Management Program 8 Partnerships and Collaboration Planning Partners –B&F = Gabrielle Reissland –County Extension Offices (88) = Aletha Reshan –OAA = TBD (Q1 09?) Business Resilience Group (BRG) –Emergency and preparedness reps from across the university and medical center –Shared resources, information, expertise, and lessons learned –Enterprise-wide coordination –(2009 = Virtual EOC software customization and administration)

Enterprise Continuity Management Program Flow of Incident Response ACTION (+ Owner) Evacuation / Shelter-in-Place (All Affected) Emergency Response (Fire Dept., Public Safety, EHS, Others) Guiding Document Business Continuity (Individual Units / Departments) University Emergency Operations Center (EOC) if needed (University Leadership) Building Emergency Action Plan [formerly EOEP] (EHS) Federal, State, Local, and OSU Guidelines Comprehensive Emergency Management Plan (Emergency Management Coordinator) Continuity Plans (Individual Units / Departments) Time

Enterprise Continuity Management Program 10 LDRPS 10 Migration

Enterprise Continuity Management Program 11 L10 Conversion and Upgrade Requirement = Migrate from the LDRPS 9.1 platform to the redesigned 10 platform by December plans and 849 users from 10 universities successfully migrated Go Live = 07/21/08 On time and on budget!!

Enterprise Continuity Management Program 12 Advantages of New L10 System New look and feel (takes “old” users some getting used to) “Tighter” navigation 100% customized plan navigator steps Spell check!! Better enterprise-level reporting capabilities

Enterprise Continuity Management Program 13 New Dependency Mapping Capabilities (will take time to build, implement, and report)

Enterprise Continuity Management Program 14 OSU L10 User Support Web Site and Training Videos

Enterprise Continuity Management Program 15 Annual “Reflections” 2008 OHR Cross-Departmental Integrated Tabletop Exercise

Enterprise Continuity Management Program 16 Vision The ECM Program will: –Serve as industry experts –Collaborate with all “university resilience” entities –Partner with all areas to: Complete an SEM and BCP plan Review and update the plans every six months Exercise all plans annually –Provide leadership in the Central Ohio community

Enterprise Continuity Management Program 17 Our Efforts are Having a Positive Effect! Anecdotal Evidence: –Tunnel fire Those who had plans… …and those who did not. –Wind storm

Enterprise Continuity Management Program 18 What We’ve Done Well Flexible schedules and nimble response Templates, cheat sheets, and “quick start” guides Train-the-trainer (and early adopter) Leader in Higher Ed Publications and presentations Many accomplishments (see handout)

Enterprise Continuity Management Program 19 Concerns for 2009 Participation (170 cancelled workgroup sessions in 2007 and 2008) Bringing completed areas back for six-month updates and annual exercises Bringing on the Schools and academic areas Synthesizing and prioritizing processes and functions across silos

Enterprise Continuity Management Program 20 Recommendations from the BCP Steering Committee to CIO Starkoff Charge a member (existing or new) of the University Emergency Operations Center (EOC) to address continuity management concerns Encourage OSU Senior Leadership to “strengthen and promote” the university’s commitment to continuity planning Encourage Vice Presidents’ review and involvement Establish the Enterprise Continuity Management program as an OSU “Office” Hire a 4th FTE for the Enterprise Continuity Management program Encourage Board of Trustees members to inquire about continuity plans Coordinate with the OSUMC

Enterprise Continuity Management Program 21 BCP Federation 2008 Student Health Center Tabletop Exercise

Enterprise Continuity Management Program 22 Reminder of Objectives Share costs (determined by percent of institution’s total operating budget) –LDRPS software annual license –LDRPS administration (mostly = OSU ECM Program staff) Share best practices –Quarterly conferences –Annual “summits” Note: Renegotiation of MOU = July, 2009

Enterprise Continuity Management Program 23 BCP Federation Program underway: –CSU –MU (dropping out of BCP Fed) –OU –WSU Program starting: –UA Program pending: –NEOUCOM –UT –YSU –Shawnee State University –Ohio Board of Regents OSU continues to provide support for all institutions: –Regular SOR data imports (employees, vendors, etc.) –Customizations –LDRPS v10 expertise –General leadership Top issues: –Funding –July ’09 renewal of MOU

Enterprise Continuity Management Program 24 Questions and Discussion 2008 RecSports Tabletop Exercise