IT Infrastructure Partnership Program (ITP) 0 April 24, 2008 Don Kendrick, Senior Manager of Security Operations, VITA Annual Disaster Recovery Test

IT Infrastructure Partnership Program (ITP) 1 Transferred mainframe data center operations from Richmond Plaza Building (RPB) to Commonwealth Enterprise Solutions Center (CESC), a Tier III facility, minimizing facility outage risks. Completed Southwest Enterprise Solutions Center (SWESC) facility providing a dedicated facility for CESC disaster recovery. Completed build out of equipment to accommodate 2008 test –Duplicate SunGard equipment –Complete infrastructure and test equipment gaps –Test and validate data replication (SAN replication, virtual tape replication/copy) April test geared to duplicate testing efforts at SunGard Significant preparation and coordination with 19 agencies Disaster Recovery – 2008 test preparation

IT Infrastructure Partnership Program (ITP) 2 Disaster Recovery – participating agencies Office of the Governor Department of Social Services State Board of Elections State Compensation Board State Corporation Commission Department of Taxation Virginia Department of Emergency Management Virginia Department of Transportation Department of Professional and Occupational Regulation Department of Corrections Department of Fire Programs Department of Human Resource Management Department of Motor Vehicles Department of Accounts Department of Planning & Budget Virginia Retirement System Department of Rehabilitative Services Virginia Employment Commission Department of the Treasury

IT Infrastructure Partnership Program (ITP) 3 Infrastructure restored within first 24 hours (one exception) Agency tests commenced throughout Saturday and completed prior to midnight (one exception) Successes –Proved infrastructure can be restored at SWESC –Agencies could resolve hardware and applications issues beyond the 72-hour test window (not possible at SunGard) What does this mean? –Disaster recovery facility and data contained within the Commonwealth –Virginia does not have the risk of competing with others at SunGard facilities in the event of a disaster –Disaster Recovery solutions can be tailored to requirements –Hardware is maintained in conjunction with production hardware throughout the year, not just during DR testing Disaster Recovery 2008 test results

IT Infrastructure Partnership Program (ITP) 4 Publish detailed results and lessons learned from 2008 tests Formal decision to not renew SunGard contract –Formal concurrence from SunGard users will be solicited prior to contract term. Full-fledged disaster recovery process support under development Additional services at SWESC available 2 nd – 3 rd quarter 2008 Disaster recovery – next steps