2 Gordon Barber March 14, 2003 Focus Group Committee Chairs F Cable: John Thrower (Cox Communications) F CLECs: Robert Smith (McLeod USA) F Equipment Manufacturers: Greg Garrett (Lucent) F IECs: Dante Hawkins (Sprint LD) F ILECs: Jim Sampson (Qwest) F Industry Services and Consulting: Maria Estefania (ATIS) Choa-Ming Liu (Telcordia) F Satellite: Bill McHargue (Hughes Network System) F Wireless: Rich Moczygemba (ATT Wireless)

3 Gordon Barber March 14, 2003 DR/MA Committee Representation F 62 Industry Representatives  >1000 Years experience F 13 Business Segments  Service Providers, Network Operators, Equipment Providers, Government, etc. F 34 Companies/Government Entities  5K to 100K Employees  Single State to Global Footprints  New Entrants to Companies With Decades of Experience

4 Gordon Barber March 14, 2003 Mission F Prepare and institute mechanisms for distributing Contact Information for telecommunications industry personnel essential to telecommunications services restoration F Report on the viability of past or present Mutual Aid Agreements and develop and report on any additional perspectives that may be appropriate to facilitate effective telecommunications restorations F Create Best Practices which focus on Business Continuity and Disaster Recovery

5 Gordon Barber March 14, 2003 Deliverables F Mechanism for Contact Information for industry personnel to ensure effective communication during restoration (August 2002) F Usefulness of Mutual Aid Agreements and additional efforts necessary to facilitate service restoration (August 2002) F Best Practices for Business Continuity and Disaster Recovery (March 2003)

6 Gordon Barber March 14, 2003 Summary of Statistics F >5000 Participant Hours in Working Meetings Developing Best Practices F 36 Best Practice Recommendations carried over from NRIC V F 68 New Best Practice Recommendations

7 Gordon Barber March 14, 2003 Principles and Guidance in Disaster Recovery BPs F Practices already implemented F Developed by industry consensus F Best Practices are verified by a broader set of industry members F Sufficient rigor and deliberation F Not all Best Practices are appropriate for all service providers F Best Practices are dynamic and must be frequently reviewed, updated, and refined F Best Practices are totally ineffective unless implemented and can never be implemented quickly enough

8 Gordon Barber March 14, 2003 Format of Best Practice Recommendations F Business Continuity  Emergency Preparedness Mitigation /Prevention Preparedness  Disaster Recovery Response Recovery Resumption Restoration/Return

9 Gordon Barber March 14, 2003 Business Continuity Template

10 Gordon Barber March 14, 2003 Example of Best Practices FG 1D: F Service Providers, Network Operators and Equipment Suppliers should formally document their business continuity process F Key areas for consideration include:  Plan Scope  Responsibility  Risk Assessment  Business Impact Analysis  Plan Testing  Training and Plan Maintenance

11 Gordon Barber March 14, 2003 Example of Best Practices FG 1D: F Service Providers and Network Operators should consider entering into Mutual Aid agreements with partners best able to assist them in a disaster situation using the templates provided on the NRIC and NCS websites URLs NRIC: NCC:

12 Gordon Barber March 14, 2003 Example Best Practice FG 1D: F Service Providers and Network Operators should consider when/where feasible maintaining sufficient hardware spares for critical elements to continue service after an incident without need to obtain spares from Equipment Suppliers

13 Gordon Barber March 14, 2003 Example Best Practice FG 1D: F Disaster Recovery Exercises should include deployment of emergency mobile assets and should be conducted to train as many technicians and support personnel as possible in as realistic a manner as possible

14 Gordon Barber March 14, 2003 Example Best Practice FG 1D: F Service Providers, Network Operators, and Equipment Suppliers should identify the need for Chemical, Biological, Radiological, Nuclear (CBRN) response via internal hazardous material response team or contracting with external HazMat response and remediation vendor to safely respond to aftermath of Weapons of Mass Destruction attack.

15 Gordon Barber March 14, 2003 Example Best Practice FG 1D: F Service Providers and Network Operators should ensure that an adequate number of portable power generators are available consistent with the deployment of additional remote terminals.

16 Gordon Barber March 14, 2003 Example of Best Practice FG 1D: F No single point of failure should exist in paths linking network elements deemed critical to the operation of a network (with this design, two or more simultaneous failures or errors must occur to cause a service interruption).

17 Gordon Barber March 14, 2003 Example of Best Practice FG 1D: F Service Providers, Network Operators, and Equipment Suppliers should ensure deployment of Government Emergency Telecommunications Service (GETS) cards to appropriate Disaster Recovery personnel. Appropriate training and testing should be provided as necessary.

18 Gordon Barber March 14, 2003 Example Best Practice FG 1D: F Service Providers, Network Operators, and Equipment Suppliers should ensure that Telecommunications Service Priority (TSP) records and data bases are reconciled annually.

19 Gordon Barber March 14, 2003 Recommendation NRIC VI-1D-02 F The federal government should support an outreach program to expand awareness and use of NCS priority services including Telecommunication Service Priority (TSP), Government Emergency Telecommunications Service (GETS), Wireless Priority Service (WPS) and Shared Resources HF Radio Network (SHARES) by State and Local Organizations, including Public Safety entities, as well as applicable private sector organizations.

20 Gordon Barber March 14, 2003 Questions?