1. 1 Evaluating Business Continuity Planning Tools Greater Boston ACP January 9, 2008 John W. Grochowalski

2. Evaluating Business Continuity Planning Tools Slide 2 Overview  Company (Vendor Information)  Software Structure  Data Collection  Plan Development  Recovery/Testing  Automated Notification  Questions

3. Evaluating Business Continuity Planning Tools Slide 3 Company (Vendor Information)  Years in Business  Software Version(s)  Technical Support/Hours of Operation  Releases per Year  Consulting Services –Business Impact Analysis –Business Recovery Plan –Data Center Recovery Plan –Plan Testing –Plan Audit

4. Evaluating Business Continuity Planning Tools Slide 4 Company (cont.)  Existing Customer Base  Training –On-site –Web –Vendor Location  Proven Methodology?

5. Evaluating Business Continuity Planning Tools Slide 5 Software Structure  SSL Secure/Encryption  User Access: Single/Multiple  Administrative Privileges –Dedicated –Concurrent  License/Hosted

6. Evaluating Business Continuity Planning Tools Slide 6 Software Structure (cont.)  Data/Text Driven  Report Writer (Customization)  All Encompassing or Modularization –Data Collection –Planning –Test Module –Notification

7. Evaluating Business Continuity Planning Tools Slide 7 Software Structure (cont.)  Ease of Use –Navigation/Layers to Get Data –Access to Other Websites –Screen/Field Customization –Relational Databases –Links to other Applications (i.e., PeopleSoft, Lawson, etc.)  Create Hierarchal Structure

8. Evaluating Business Continuity Planning Tools Slide 8 Software Structure (cont.)  Plan Types –Location –Types of Plan (Business, Data, or Crisis Management) –Organizational Unit by Person/Responsibility  Create User Profiles/Contact Lists –Job Description –Responsibilities –Personal Attributes (CPR Trained, 4-Wheel Drive Vehicle, Multi-Lingual, etc.)

9. Evaluating Business Continuity Planning Tools Slide 9 Data Collection  Assigned Task  Data Collection –Surveys –Develop RTOs (Recovery Time Objectives) –Develop Minimum Resource Requirements –Compliancy (i.e., FFIEC, HIPAA, etc.) –Loss/Cost Analysis –Graphical/Metric Displays –Rollup Capability –Administrative Analysis

10. Evaluating Business Continuity Planning Tools Slide 10 Data Collection (cont.)  Dependencies –Link Key Resources to Application, People, Hardware, Etc. –Create Visio Diagrams/Attach to Plans  Document Manager –Manage Existing Documents Across Multiple Plans

11. Evaluating Business Continuity Planning Tools Slide 11 Plan Development  Hierarchical Structure –By Department/Location –By Process and Application –By Hardware  Plan Templates –IT Recovery –Business Recovery –Crisis Management

12. Evaluating Business Continuity Planning Tools Slide 12 Plan Development (cont.)  Edit Capabilities –Import/Export –Word Processing –Data Integration –Single Screen Access to Data and Text  Review and Approval –Management Approval of Plans –Automated Notices for Plan Updates (Email)  Audit History: Show Revisions

13. Evaluating Business Continuity Planning Tools Slide 13 Recovery/Testing  Create Unlimited Test Scenarios  Use Internal Clock to Monitor Time and to Date Stamp All Test/Recovery Scenarios  Activate Single or Multiple Procedures –Logs (Document Additional Information) –Current Issues (Assign New Tasks to Personnel) –White Boards (Visio Diagrams, Maps, and Displays)  Archive Events/Tests for Future Reference  Develop Final Test/Recovery Report

14. Evaluating Business Continuity Planning Tools Slide 14 Automated Notification  Size of Company/Number of Users  Identify Contact(s) –Single –Group  Unlimited Message Capabilities  Customizable Messages  Default Messages  Send Messages to Multiple Devices (Phone, Cell Phone, Blackberries, FAX, Email)

15. Evaluating Business Continuity Planning Tools Slide 15 Automated Notification  Text to Voice Translation  Multilingual  Enable a Conference Bridge  PIN Requirements  Administrative Control –Monitor Responses

16. Evaluating Business Continuity Planning Tools Slide 16 Questions?