2012 MITA-ATA Annual Conference August 6-8, 2012 Disaster Recovery Planning for Telecommunications Companies

Definition of Disaster “An unforeseen combination of circumstances that threatens the continued existence of the business and requires immediate action.” 2

Disaster Planning In other words -- What do we do, IF……….. 3

Murphy’s Law: Whatever can go wrong, will go wrong – And it will do so at the worst possible time. 4

O’Brien’s Corollary: Murphy was an optimist. 5

Disaster Plans Four Phases of a Disaster  Pre-Disaster  Emergency Response  Recovery  Post-Recovery 6

Pre-Disaster Planning: (Planning for the Disaster Event) Step 1: Identify Your Disasters 7

Failure to Plan is Planning to Fail 8

Identify Disasters (1)  Natural Disasters  “Neighborhood” Exposures  Fraud or Embezzlement  Regulatory  “Key” Person  Loss of Services 9

Loss of Services: Loss of Key System Components  Main Office  Key Central Office(s) or CO Equipment  Key Towers  Billing & Accounting Systems  EDP System(s) 10

Identify Disasters (2)  Access to Valuable Papers  Access to Internet  Loss in Excess of Limits  Legal Exposures 11

Legal Exposures:  Wrongful Discharge  Sexual Harassment  Discrimination  Violence in the Workplace  Negligent Entrustment 12

Identify Disasters (3)  Public Relations  Terrorism / Sabotage Target People, Information, Transportation Goal: Create Panic and Disruption 13

Terrorism / Sabotage:  External and Internal Terrorists  Apathy and Ignorance  Signs of Criminal Activity  Pre-Incident Warnings  Hoax Effect  Evaluate Daily Routines 14

Pre-Disaster Planning: (Planning for the Disaster Event) Step 2: Develop Action Plans 15

Emergency Action Plan “A detailed plan developed specifically for your company outlining emergency response procedures and defining employee responsibilities and actions.”  Required by OSHA –  Who does What in an emergency 16

Develop Action Plans  Identify Assets to be Protected  Assign Realistic Probabilities  Decide Human Resource Issues  Assign Functional Responsibilities (with Back-ups) 17

Action Plans Should Be:  Clear  Concise  Easily Understood  Easily Referenced – Including From Offsite Locations 18

Action Plans Should Include:  Methods of Communicating  Site Security  Emergency Response Actions  Methods of Containing Hazards  Evacuation Procedures  Shut Down Procedures  Response Team Assignments 19

Emergency Response Team: Duties  Becomes Operating Management Team to Execute the Recovery Plan  Calls the Plan into Action  Evaluates Disaster Situation  Implements Appropriate Segments of Plan 20

Emergency Response Team:  Emergency Response Coordinator  Financial Officer  Public Relations Officer  Human Resources Officer  Facilities Manager  IT Manager  Production Manager  Insurance / Risk Management Officer 21

Pre-Disaster Planning: (Planning for the Disaster Event) Step 3: Develop Control Measures 22

Develop Control Measures:  Adequate Insurance  Engineering Controls  Cross Training  Service Agreements  Equipment Availability 23

Develop Control Measures:  Time Element Losses  Insurance Marketplace  Security Issues  Contact List 24

Develop Control Measures: Contact List  Suppliers  Employees & Family  Contractors  Business Partners  Local Authorities / Responders  Mutual Aid Providers  Insurance Contact 25

Develop Control Measures: Contact List  FCC – Federal Communications Comm. Disaster Info Reporting System (DIRS) Found on FCC website  DHS – Dept. of Homeland Security Status of Service in your Operating Area Criminal or National Security Implications 26

Develop Control Measures: Contact List Information  Company Name  Contact Name  Alternate Contact Name  Office Phone  After Hours / Cell Phone  What Equipment / Service Provided 27

Pre-Disaster Planning: (Planning for the Disaster Event) Step 4: Implement The Plans 28

Implement Action Plans  Communicate!  Involve All Levels Workers Management  Clear Expectations for Continuity  Part of New Employee Orientation  Refresher Training 29

Pre-Disaster Planning: (Planning for the Disaster Event) Step 5: Test Action Plans 30

Test Plan Components: Employees are 1 st Line of Defense  Fire Protection Plan  Fire Alarms  Fire Detection Systems  Evacuation Plan  Employee Training  Accountability – Who is at Work? 31

Test Plan Components: Fire Dept. & Public Responders  Learn Your Plan Components  Learn Your Facilities’ Layout  Locate Hazardous Materials  Locate Confined Spaces  Improve Safety Performance 32

Test Plan Components:  Action Plans are Living Documents  Human Relations Considerations  Pollution Exposures  Recover Safely 33

Overlooked Losses During Recovery  Overhead  Company Direct Costs  Employee Costs 34

Disaster Planning Summary  Adequate Risk Transfer  Procedures & Auditing  Training  Testing  Cost Accounting  Avoid Disaster Fraud 35

Planning References: “Disaster Recovery Journal” magazine web site: “ User ID: “drj” Password: “world” NFPA 1600 – “Standard on Disaster / Emergency Management and Business Continuity Programs”,

Planning References “Principal Emergency Response and Preparedness” OSHA R, 2004 “How to Prepare for Workplace Emergencies”, OSHA Bulletin

Planning References “Emergency Management Guide for Business & Industry”, FEMA, Publication141 “Emergency Planning Guidebook”, Building Owners & Managers Assoc. 38

Thank you. Any Questions?