Presentation on theme: "Department of Information Technology Office of Business Continuity"— Presentation transcript:
1 Department of Information Technology Office of Business Continuity Disaster Recovery Assessment and Feasibility Study Close Out Certification RequestJuly 28, 2010Presented by:Mary Wanda Anaya, Business Continuity ManagerStephanie Gallegos, Business Continuity Analyst
2 Business Continuity Program Vision StatementA Business Continuity Program that strives to maintain continuity of operations for the State’s mission critical services by sustaining a high level of standards and excellence.Mission StatementProvide the planning methodology for how the Department of Information Technology will recover and restore partially or completely interrupted critical function(s) within a predetermined time after a disaster or extended disruption.Prepare for future incidents that could jeopardize the State’s core mission critical systems.
3 FY 2008 C2 AppropriationThe Department of Information Technology received $250,000 for aDisaster Recovery (DR) Assessment and Feasibility Study to determine the best approach for redundancy for its most critical Information Technology (IT) based services and applications. The purpose of this project was to determine the most cost effective means of providing this service.DR Assessment -Threat and Risk AssessmentEnterprise Applications ( , Share, Mainframe)Site Visits – Colorado, Arizona, & OregonFeasibility Study – Critical Applications AssessmentBC-DR Questionnaire to Executive AgenciesDetermine 12 Top Critical ApplicationsInterview 10 Agencies (Business & IT Staff)Provided the BC and DR RecommendationsTraining – Business Continuity ClassesFormal BC Class and CertificationBusiness Continuity Awareness (2 Classes) – AgenciesBusiness Continuity Planning (1 Class) - AgenciesResult of the Study - DoIT released a RFP for Data Resilience and Disaster Recovery Site Service33
4 Project Time Line2009August Site Visit (Colorado, Arizona, Oregon)March Contracted POD Inc.August Conduct DR Assessment and FeasibilityStudyApril Office of BC Formal Training and Attained Certification(CBRM Certified Business resilience Manger).November Developed and Released an RFPEnterprise BC/DR Site Services2010January Vendors Submit RFP ProposalsApril Evaluate RFP Proposals and Select FinalistMay Conduct Agency and DoIT Staff BC TrainingJune Close Out ContractJuly Award Price AgreementAugust Contract Enterprise BC/DR Site44
5 Project Deliverables Received State Government and Commercial Site VisitsContract Del #1 Discovery DocumentContract Del #2 Threat Analysis ReportContract Del #3 Risk Analysis ReportContract Del #4 Threat & Risk Recommendations DocumentContract Del #5 Critical Applications DeterminationContract Del #6 Evaluate Selected agencies BC & DR PlansContract Del #7 Evaluate Twelve Critical Applications ArchitectureContract Del #8 Critical Applications RecommendationsContract Del #9 Determine Disaster Recovery efforts for Developing Linkage of Like Applications andPlatforms ReportContract Del #10 Overall Disaster Recovery RecommendationsBusiness Continuity and Disaster Recovery Training55
6 Project Cost AMOUNT VENDOR DESCRIPTION Feasibility Study $199,974.80 AMOUNTVENDORDESCRIPTIONFeasibility Study$199,974.80POD AssociatesDR assessment and feasibility study to establish requirements for DR services. Contract No Extended through - 3/30/10Staff Training$19,459.06ABBA BC TrainingBusiness Continuity TrainingColorado Site Visit$6,495.39Aquila TravelAirfare & Per Diem to fly to Denver for site visitsArizona Site Visit$5,380.37Airfare & Per Diem to fly to Phoenix for site visitsOregon Site Visit$6,401.31Airfare & Per Diem to Portland for site visitsNew Mexico Site Visits$44.80In-state mileage to travel to CYFDWashington Training$5,390.00SentryxBus Continuity Training for Mary & StephanieWashington Travel$4,183.19Airfare for Stephanie & Mary to fly to Washington DC to attend a TrainingMisc.$2,464.39Amazon.comBus Continuity Planning Books, Online Course$250,000.00TOTAL BUDGETED$249,793.31TOTAL EXPENDED$206.69TOTAL REMAINING
7 Lessons LearnedWhen the product of the project is a study, it is critical to the project to include a requirement in the contract for a technical writer.When critical information is gathered through an interview process, note gathering should extend to include voice recording to assure all important information is documented.Even in small projects it is difficult for the Project Manager and the Project Team Leader to be the same individual.Continuous Business Continuity training is required within the State of New Mexico to educate the agencies that Business Continuity is not only Disaster Recovery and an IT responsibility, but an ongoing business process to continue providing critical services.
8 DoIT Price Agreement RFP# 00-361-00-01416 DoIT Disaster Recovery and Data Resilience Data Center Site(s)Category-1 Resilience Data Center Site (GOLD) Production/FailoverAvailable 24x7x365Category-2 Hot Data Center Site (SILVER) Host EquipmentOperating System/Application Software/Copy of Data (testAvailable within 8 hrsCategory-3 Warm Data Center Site (BRONZE) Racks, Power, DataAvailable within 24 hrsCategory-4 Cold Data Center Site (PAPER) only floor spaceAvailable within 72 hrs88