Oregon Department of Education Business Continuity / Disaster Recovery Program Implementation Mark Tyler Nigel Crowhurst

BCP Overview – The Problem How on earth do we ensure business and services are able to continue after a natural disaster or catastrophic event?

Business Continuity Planning Goals Business Continuity Plan (BCP) / Disaster Recovery (DR) GOAL: Should an incident occur, ODE will continue to provide services to it customers Provide framework and guidelines for Agency BCP program development Provide educational forums and BCP resources Help to identify and coordinate cross-dependencies and common services

Statewide DAS BCP Policy – Statewide BCP Initiative The Statewide DAS BCP Policy sets forth guidelines that require all State of Oregon agencies, individually, and in conjunction with other agencies; to develop, implement, test, and maintain Business Continuity Plans and Disaster Recovery Plans for Critical Business Functions that must be recovered within 30 days by June 30, Agencies shall: Designate BCP Sponsors and BCP Coordinators Use the Business Impact Analysis (BIA) process to identify Critical Business Functions (CBF) Develop, implement, test and maintain Business Continuity and Disaster Recovery Plans. Complete a Disaster Recovery Plan for IT infrastructure Conduct short-term and long-term reviews and revisions of plans Establish awareness and training programs for BCP / DR

Business Impact Analysis (BIA) Forms, questionnaires, and interviews are used to identify all of the Critical Business Functions (CBF) in each division and office The BIA determines just how critical the business function is The BIA will identify and specify CBF Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) Overall CBF RTOs are categorized by phases

Recovery Goals in Phases Phase 1: CBF that must be restored within 2 days Phase 2: CBF that must be restored within 1 week Phase 3: CBF that must be restored within 2 weeks Phase 4: CBF that must be restored within 1 month

eBRP Toolkit eBRP Solutions, Inc. is the existing vendor for the Web- based Business Continuity Planning software being used within ODE ODE will establish a BCP implementation project using the online eBRP Toolkit program The eBRP Toolkit is an automated program in which Business Continuity and Disaster Recovery Plans can be built, managed, reviewed, and maintained Staff, teams, plans, hardware, software, contracts, vendors, locations, and other information can be identified and managed within the online eBRP Toolkit program Will train coordinators and utilize the many eBRP Toolkit features as the BCP program develops.

Dilemma! No resources No funding How do we maintain / manage our plans?

BCP needs Management support BCP success hinges on having the following: Management buy-in and support BCP / DR must be embedded in culture Commit resources – people and funding

Questions? Are there any questions, comments, or suggestions?

Contact Mark Tyler Business Continuity Planning Coordinator PH: Nigel Crowhurst Disaster Recovery Coordinator PH: