1. Business Continuation Plan / Program Overview State CIO Council Meeting June 24, 2008

2. Lottery Business Continuation Plan / Program Overview – Topics: Lottery BCP overview:  BCP development process and planning assumptions  BCP Components  BCP Activation Process Lottery Network / Disaster Recovery Infrastructure Overview Business Continuation Management Program: Overview, Current priorities

3. BCP Development Process Overview (FY 04): Gap Analysis (existing Disaster Recovery Plans, etc.) Threat/Risk Analysis:  Failure or Loss Scenario  Impact and Probability Rating Business Impact Analysis (BIA) Process:  Identify business functions for all Lottery business units  Determine frequency, impact, Recovery Time Objective (RTO), etc.  Prioritized and approved by Lottery Executive Team  #1 Priorities focused on recovery of critical gaming operations / revenue generation capabilities

4. BCP Planning Assumptions: Plan content is focused on recovery of our revenue-generating capabilities resulting from a disaster in which the administrative offices and primary Data Center are no longer operable and therefore requires activation of the Backup Data Center in Burns, Oregon. Lottery worst-case vs. State worst-case Due to the nature of the Lottery’s business and planning assumptions, this includes the IT infrastructure and software applications required to operate the Lottery’s games.

5. BCP Development Process: Plan Development: Critical content based on BIA priorities and best practices:  Plan Overview and Activation Procedures  Emergency Procedures – Life & Safety  IT Recovery Procedures  Emergency Purchasing Procedures  Team and Vendor Directories  Business Unit Plans & Procedures  Forms / Logs, Inventory, Organizational Charts, etc. Maintenance and Distribution Procedures Initial BCP Distribution and Awareness

6. BCP Activation Procedures

8. Business Continuation Management Program: FY 08-09 Overview Current Priorities  Improve recovery capability for the Lottery’s Video Lottery, On- line, and Internal Control System (ICS) systems, Lottery’s gaming network and critical business systems  Maintain and distribute current BCP content  BCP Awareness Training  BCP testing: Conduct table-top exercise (BCP Activation), Conduct recovery tests: Video Lottery System Recovery, etc.  Content Development: Phase 3 and Phase 4 Business functions, etc.  State of Oregon BCP project participation

9. Lottery Business Continuation Plan / Program:  Q & A?