1. TIJARA Provincial Economic Growth Program Business Continuity / Disaster Recovery Planning Introduction and Workshop Outline Prepared by Larry SanBoeuf 14 December 2009

2. Business Continuity / Disaster Recovery Planning Disaster Recovery. Why should we do Disaster Recovery Planning? What is a Disaster? The Planning Process. The Disaster Recovery Planning Workshop.

3. Business Continuity / Disaster Recovery Planning Disaster recovery is the process of recovering ICT resources to enable continuation of business operations. Successful disaster recovery is dependent on clearly defined procedures (the plan) for restoring the availability of critical ICT resources following a disaster. The Disaster Recovery Plan (DRP) is developed and implemented to ensure adherence to corporate ICT policies for the required availability of critical ICT resources. The DRP is a subset of the larger Business Continuity Plan (BCP), which addresses all risks to business operations, the policies and procedures for mitigating these risks, and the plans for recovering from the effects should one of these risk events take place. The focus of this session and the workshop is ICT Disaster Recovery Planning. Disaster Recovery

4. Business Continuity / Disaster Recovery Planning “Of companies that had a major loss of computerized records, 43% never reopen, 51% close within two years, and only 6% will survive long-term.”: Hoffer, Jim (2001), Backing Up Business - Industry Trend or Event. Ask yourself: 1)What will happen to my day-to-day business operation if a critical ICT resource is lost, damaged, or otherwise inaccessible? 2)What will happen to my long-term business operation if a critical ICT resource cannot be recovered? Why should we do Disaster Recovery Planning?

5. Business Continuity / Disaster Recovery Planning There are two broad categories of Disaster: Natural Disasters: Flood, fire, earthquake, hurricane, etc. Difficult to prevent, but possible to mitigate the severity of resulting losses. Man-made Disasters: Human error, accidents, sabotage, burglary, viruses, theft, equipment failure, etc. More prevalent than natural disasters. Can be mitigated through training and effective implementation of practical ICT policies and procedures. What is a Disaster?

6. Business Continuity / Disaster Recovery Planning The disaster recovery planning process involves the following: Define the ICT Assets and organize the ICT Asset Inventory. Conduct the Business Impact Analysis (BIA). Define: Recovery Time Objective (RTO), and, Recovery Point Objective (RPO). Define and implement Control Measures: Preventive Measures, Detective Measures, and, Corrective Measures. The Planning Process

7. Business Continuity / Disaster Recovery Planning The disaster recovery planning process involves the following (cont’d): Define and implement backup strategies. Document the recovery procedures. Assign a Disaster Recovery Team. Formalize the Disaster Recovery Plan (DRP). Test the DRP. Review the DRP test results and adjust as needed. The Planning Process (2)

8. Business Continuity / Disaster Recovery Planning Organized as a series of five Workshop sessions comprising discussion, hands-on interactive examples, and “homework” to be applied at the participant’s organization. Participants will be requested to submit the results of their “homework” to Tijara ICT for review prior to the next Session. Each successive Session will build on the work from the previous sessions. At the conclusion of the Workshop series each organization should have a working Disaster Recovery Plan that they can rely upon. Workshop Session #1: Preparing the ICT Asset Inventory. The Disaster Recovery Planning Workshop

9. Thank you! شكرا لكم !