1. Mary W. Anaya Stephanie R. Gallegos November 19, 2008
Department of Information Technology Business Continuity – Phase I Disaster Recovery Assessment and Feasibility Study Certification Request
Mary W. Anaya
Stephanie R. Gallegos
November 19, 2008

2. Overview Strategic Plans – State of NM/DoIT Business Need
Creation of the Office of Business Continuity
Rational
Project Phases
Request for Certification
11/21/2018

3. Strategic Plan State of New Mexico
3. Improve Delivery of Services to the Citizens of NM
C. Improve the reliability of state IT systems and further develop business continuity plans in case of disasters
1) Complete a Business Continuity assessment and feasibility study for redundancy of the most critical information technology based services and applications
Department of Information Technology
Goal 5 – Improve the State’s Infrastructure to Support Secure and Reliable Enterprise Information Technology Services
H. In coordination with other state agencies, key stakeholders and the ITC, update the Disaster Recovery Plan and perform periodic disaster recovery tests
Office of Business Continuity
Priority
2. Attain project Certification
3. Release a contract for the DoIT DR Assessment & Feasibility Study
4. Conduct the detail Business Impact Analysis
6. Attend formal training for BC and DR
11/21/2018

4. Strategic Plan (cont.) Department of Information Technology
Goal 5 – Improve the State’s Infrastructure to Support Secure and Reliable Enterprise Information Technology Services
G. Provide planning methodology for how DoIT will recover and restore partially or completely interrupted critical functions within a predetermined time after a disaster or extended disruption and to prepare for future incidents that could jeopardize the state’s core systems.
Office of Business Continuity
Priority
5. Visit other states that have recognized BC/DR successful plans and well developed standards and best practices
7. Develop a Business Continuity Program (BC)
9. Develop Enterprise Guidelines, Standards and Policies
State of New Mexico
3. Improve Delivery of Services to the Citizens of NM
C. Improve the reliability of state IT systems and further develop business continuity plans in case of disasters
2) Develop a comprehensive strategy for business continuity and disaster recovery.
11/21/2018

5. Office of Business Continuity
July 1, 2007,
an Office of Business Continuity
was established.
11/21/2018

6. Mission Statement Vision Statement
A Business Continuity Program that strives to maintain continuity of operations for the State’s mission critical services by sustaining a high level of standards and excellence.
Mission Statement
Provide the planning methodology for how the Department of Information Technology will recover and restore partially or completely interrupted critical function(s) within a predetermined time after a disaster or extended disruption.
Prepare for future incidents that could jeopardize the State’s core mission critical systems.
11/21/2018

7. Rationale for FY09 Appropriation Request
Assessment and Feasibility Study
Determine the best approach for redundancy for the states most critical Information Technology based services and applications
To determine the most cost effective means of providing this service
The foundation for a well planned BC program for the state will be developed to minimize risk to human, economic, and legal consequences and provide orderly path to resumption of regular service
11/21/2018

8. Rationale for FY09 Appropriation Request
Identify Mission Critical systems for the state that need to be accessible in the event of a disaster in order to keep state business running
FIRST AND FOREMOST, SYSTEMS THAT PROVIDE LIFE, HEALTH, AND PUBLIC SAFETY WILL HAVE THE HIGHEST PRIORITY
Meet the states mission critical applications DR Requirements for restoring services within the Agencies needs.
11/21/2018

9. Project Governance Structure
11/21/2018

10. Schedule for Business Continuity
Phase I
In FY09 DoIT received $250,000 for a Disaster Recovery Assessment and Feasibility Study for redundancy of the most critical information technology-based services and applications
January Visit sites that are recognized in BC/DR
State Government Sites – Arizona, Oregon, and Colorado
Commercial – IBM, SunGard, Data Foundry
February 2009 – Agency Staff Training
March 2009 – Process Feasibility Study Contract
March through May 2009 – conduct Feasibility Study
April 2009 – Office of BC attend formal training and attain certification
June 2009 – Complete Analysis and Recommendation documentation
Cost Benefit Analysis
Critical Application Analysis
Disaster Recovery Enterprise Site Recommendation
11/21/2018

11. Schedule (cont.) Phase II
FY10 C2 request of $1.75M is to provide the failover capability for the Enterprise SHARE System
July 2009 – begin plans for SHARE Failover
Contract – Consultant Services
Design – Failover for SHARE
Procure Equipment
Implementation – Failover for SHARE
Test – Failover for SHARE
Phase III – Secure Funding FY2011
Enterprise Services replication
Mainframe replication
Phase IV – Secure Funding FY2011
C3 Multi-agency Request
States Mission Critical System
11/21/2018

12. Request for Project Initiation Funding - $100K (Obtained FY09)
Out of State Government Site Visits
Out of State Commercial Site Visits
In State Commercial Site Visits
Business Continuity Agency Training
IV&V Contractor
Conduct Feasibility Study
Business Continuity Staff Certification
Business Continuity Overview Training
11/21/2018 12

13. Out of State - Site visits
State Government site visits
Arizona – recommendation from Qwest
Oregon – successful Business Continuity Program
Colorado – neighboring state
11/21/2018

14. Arizona.gov
11/21/2018

15. Oregon.gov
11/21/2018

16. Colorado.gov
11/21/2018

17. Commercial Possibilities
SunGard
Data Foundry
IBM
Hewlett Packard
11/21/2018

18. New Mexico Sites
New Mexico Commercial Offerings In-state possibilities
Oso Grande
Northrop Grumman
Bigbyte
11/21/2018

19. Agency Staff Training
Three Day Staff Training Business Continuity Planning
30 seats 1 per agencies
Trainer Stuart Prager
Primary Areas of Expertise:
Business Continuity and Disaster Recovery Planning
Server Administration
Training and Education
Windows Desktop Support
Administration and Budgeting
Education:
B.S. in Education, minor in Special Education, University of New Mexico,
Albuquerque, NM (1973)
M.A. in Education, University of New Mexico, Albuquerque, NM (1980)
Ed. S. in Educational Administration, University of New Mexico, Albuquerque,
NM (1991)
Registrations, Professional Affiliations, & Clearances:
Microsoft Certified Professional (MCP),
Microsoft Small Business Specialist, 2005
Certified Business Continuity Planner, 2006
Certified Citrix Administrator, 2002
11/21/2018

20. Agency Staff Training
Day 1 - Introduction to and Proposing and Developing Support for Business Continuity Planning in your Business
The first presentation will give the student a perspective into all of the phases of developing a Business Continuity Plan.
The second portion of the class focuses on the initiation of a BCP project by involving management and staff in the establishment of the need.
Days 2 & 3 - Developing the Business Impact Analysis
This class will lead the student through the steps recommended to complete a Business Impact Analysis.
The first day of the class will be used to learn and understand the threats that a company can face.
The final portion of the class dwells on interviewing to gain information for the development of recovery time objectives and recovery point objectives.
11/21/2018

21. DoIT Staff Training 1 day DoIT Staff Training
Training will give the staff a perspective into all of the phases of developing a Business Continuity Plan.
11/21/2018

22. DoIT Business Continuity Office Training and Certification
Five Day CBRM Advanced Business Continuity Planning & Management Course
Based on industry best practices and guidelines for Business Continuity, Disaster Recovery, and Emergency Management
Certifications
Certified Business Continuity Professional (CBCP)
Mary W. Anaya (2 years BC Experience)
Associate Business Continuity Planner (ABCP)
Stephanie R. Gallegos
11/21/2018

23. Request for Project Certification Planning Phase– $150K
Feasibility Study – PCC December 2008
Project Management
Risk Management Assessment
Business Impact Analysis
Cost Benefit Analysis
Critical Application Analysis
Disaster Recovery Enterprise Site Recommendation
11/21/2018 23

24. NM Approved Vendors
11/21/2018

25. Project Costs Assessment $100,000.00 Education Site Visits
IV&V
$12,500.00
Education
Business Continuity Online Training
$995.00
Business Continuity Staff Formal Training
$10,175.00
Business Continuity Staff Certification
$1,190.00
Business Continuity Agency Training – 3 day
$25,000.00
Business Continuity Overview Training – 1 day
$10,000.00
Site Visits
Other States Government Site Visits – 6 days
$23,250.00
Out of State Commercial Site Visits – 4 days
$16,500.00
In State Commercial Site Visits
$390.00
Consulting Service
$150,000.00
Feasibility Study
Total Cost
$250,000.00
11/21/2018

26. QUESTIONS?
11/21/2018