1

2 Cost to Recover Time to Recover Last Backup Work Backlog Created Lost Data Recovery Operations Time Cost Disaster Recovery Time Frame Reconstruct Lost Data Recovery Time Objective Event Assessment Recover Lost Data Disaster Declaration Point IT Resources Recovered User Function Recovered Maximum Tolerable Downtime Recovery Point Objective Work Recovery Time Collect Data Manually Recover Work Backlog Recover Collected Data Business Units use emergency, manual, and normal procedures

 The six stages of the Business Continuity Planning Life-cycle Process will be executed iteratively to establish the required continuity/recovery capabilities across the H&C enterprise.  The first iteration will focus on the centralized IT operations in Indianapolis. 3 Six Stages Risk Management 1 BIA Capability Development Plan Testing BC Strategy Development Plan Maintenance

4 BC Planning Life-cycle 1 Risk Management Stage 1: Risk Management Stage 1: Risk Management ObjectivesObjectives 1.Assess the risk of interruption to the H&C IT Operations in terms of Potential threatsPotential threats Existing controlsExisting controls Potential disaster impactsPotential disaster impacts Likelihood of disaster eventsLikelihood of disaster events 2.Control the risk to IT Operations through recommended mitigation strategies

5 BC Planning Life-cycle BIA 1 2 Risk Management Stage 2: Business Impact Analysis (BIA) Stage 2: Business Impact Analysis (BIA) ObjectivesObjectives 1. Identify mission- critical H&C business functions and processes 2. Analyze impacts to the business i f the critical business processes are disrupted 3. Identify dependencies and recovery requirements

 Stage 3: BC Strategy Development  Objectives 1. Assess the requirements to recover IT Operations based on critical business process recovery requirements 2. Identify alternative options for recovering It Operations based on these requirements 3. Select the most cost-effective option that meets these requirements 6 BC Planning Life-cycle BIA BC Strategy Development Risk Management

7 BC Planning Life-cycle BIA BC Capability Development Risk Management Stage 4: BC Capability Development Stage 4: BC Capability Development Objective: Develop and ImplementObjective: Develop and Implement 1. The operational recovery/continuity IT environment(s) for the H&C IT Production Operations based on the approved strategy 2. The Plan Documentation supporting the deployment of the environment(s) in an actual crisis scenario 3 BC Strategy Development

8 BC Planning Life-cycle BIA BC Plan Development BC Plan Testing Risk Management Stage 5: BC Plan Testing Stage 5: BC Plan Testing ObjectiveObjective 1. Test the H&C IT contingency environment(s) and supporting plan documentation to ensure that they are CurrentCurrent ViableViable CompleteComplete 2. Test the team’s performance 3. Test the capability’s conformance to business requirements 3 BC Strategy Development

9 BC Planning Life-cycle BIA BC Plan Development BC Plan Testing BC Plan Maintenance Risk Management Stage 6: BC Plan Maintenance Stage 6: BC Plan Maintenance ObjectiveObjective Maintain the H&C IT contingency capability in a ready state Maintain the H&C IT contingency capability in a ready state Set the procedures to insure that maintenance is regularly performed Set the procedures to insure that maintenance is regularly performed BC Strategy Development

10