If you need assistance in filling out an
If you need assistance in filling out any of this plany of this plan Please contact Randy Jones at ext. 23868.
Please contact Randy Jones at ext. 23868.
BUSINSS !"N#INUI#$
BUSINSS !"N#INUI#$
P%&N
P%&N
'UI(%INS &N(
'UI(%INS &N(
#)P%&#S
#)P%&#S
If you need assistance in filling out an
If you need assistance in filling out any of this plany of this plan Please contact Randy Jones at ext. 23868.
Please contact Randy Jones at ext. 23868.
Int*oduction
Int*oduction
#he Uni+e*sity of #exas )edical B*anch and
#he Uni+e*sity of #exas )edical B*anch and its e,ployees ha+e faced ,anits e,ployees ha+e faced ,any disaste*s -y disaste*s -f*o, the /00 Sto*,1 the #exas
f*o, the /00 Sto*,1 the #exas !ity (isaste* of / to hu**icanes !a*la in /6!ity (isaste* of / to hu**icanes !a*la in /61 &licia1 &licia in /831 and lastly hu**
in /831 and lastly hu**icane I4e in 2008. icane I4e in 2008. In o*de* to ,aintain ou* In o*de* to ,aintain ou* status as one of status as one of thethe leading health ca*e institutions in the nation1 5e ,ust continue to e p*epa*ed fo* these leading health ca*e institutions in the nation1 5e ,ust continue to e p*epa*ed fo* these and othe* potential disaste*s.
and othe* potential disaste*s.
#he onset of ho,eland te**o*is, in the United S
#he onset of ho,eland te**o*is, in the United States1 coupled 5ith the 'ulf !oast7states1 coupled 5ith the 'ulf !oast7s +ulne*aility fo* natu*al disaste*s ,a4e it essential fo* U#)B to ensu*e that plans a*e in +ulne*aility fo* natu*al disaste*s ,a4e it essential fo* U#)B to ensu*e that plans a*e in place1 tested t*ue1 and +iale1 should 5e find ou*sel+es in a th*eatening situation - e it place1 tested t*ue1 and +iale1 should 5e find ou*sel+es in a th*eatening situation - e it
,an,ade o* natu*al. ,an,ade o* natu*al.
#he*efo*e1 in *esponse to these challenges and
#he*efo*e1 in *esponse to these challenges and in align,ent 5ith the 9o,eland in align,ent 5ith the 9o,eland Secu*itySecu*ity &ct1 the #exas State Inf*ast*uctu*e P*otection !o,,ittee1 and State
&ct1 the #exas State Inf*ast*uctu*e P*otection !o,,ittee1 and State of #exas (epa*t,entof #exas (epa*t,ent of Info*,ation Resou*ces :(IR;1 Info*,ation Se*+ices at U#)B has een as4ed
of Info*,ation Resou*ces :(IR;1 Info*,ation Se*+ices at U#)B has een as4ed toto de+elop a ,odel Business !ontinuity Plan
de+elop a ,odel Business !ontinuity Plan to assist you in de+eloping and tto assist you in de+eloping and testing 5o*4esting 5o*4 plans fo* you* o5n a*eas. Ulti,ately1 you* plans should e st*uctu*ed to ,a4e it possile plans fo* you* o5n a*eas. Ulti,ately1 you* plans should e st*uctu*ed to ,a4e it possile
to continue to do usiness and
to continue to do usiness and function du*ing and afte* 5hate+e* c*isis ,ay a*ise.function du*ing and afte* 5hate+e* c*isis ,ay a*ise. IS 5ill also identify *esou*ces and coo*dinate the p
IS 5ill also identify *esou*ces and coo*dinate the p*ocess fo* de+eloping1 testing and*ocess fo* de+eloping1 testing and e+aluating these plans.
e+aluating these plans. !*itical functional a*eas ha+e !*itical functional a*eas ha+e een identified to pa*ticipate in thiseen identified to pa*ticipate in this p*ocess and 5ill continue to e add*essed on an ongoing asis. #his yea*7s plan c*eation p*ocess and 5ill continue to e add*essed on an ongoing asis. #his yea*7s plan c*eation
and testing 5ill include In+ision1 Signatu*e1 and P and testing 5ill include In+ision1 Signatu*e1 and P I!.I!.
(e+eloping a Business !ontinuity Plan is a ,ultidi,ensional p*ocess and
(e+eloping a Business !ontinuity Plan is a ,ultidi,ensional p*ocess and includes aincludes a nu,e* of
nu,e* of phases as phases as p*esc*ied y p*esc*ied y the (IR. the (IR. #hese phases #hese phases include< include< P*o=ect Initiation1P*o=ect Initiation1 Business I,pact &nalysis1 Reco+e*y St*ategies1 Plan (e+elop,ent1 #esting1 and Business I,pact &nalysis1 Reco+e*y St*ategies1 Plan (e+elop,ent1 #esting1 and )aintenance > #*aining - all o
)aintenance > #*aining - all of 5hich 5ill e add*essed at U#)B.f 5hich 5ill e add*essed at U#)B. It is i,pe*ati+e that each of ou* lead
It is i,pe*ati+e that each of ou* leade*s suppo*t and coope*ate in the de+e*s suppo*t and coope*ate in the de+elop,ent of theelop,ent of the plans that 5ill 4eep U#)B ope*ating th*ough the ,ost difficult of ti,es.
If you need assistance in filling out an
If you need assistance in filling out any of this plany of this plan Please contact Randy Jones at ext. 23868.
Please contact Randy Jones at ext. 23868.
Int*oduction
Int*oduction
#he Uni+e*sity of #exas )edical B*anch and
#he Uni+e*sity of #exas )edical B*anch and its e,ployees ha+e faced ,anits e,ployees ha+e faced ,any disaste*s -y disaste*s -f*o, the /00 Sto*,1 the #exas
f*o, the /00 Sto*,1 the #exas !ity (isaste* of / to hu**icanes !a*la in /6!ity (isaste* of / to hu**icanes !a*la in /61 &licia1 &licia in /831 and lastly hu**
in /831 and lastly hu**icane I4e in 2008. icane I4e in 2008. In o*de* to ,aintain ou* In o*de* to ,aintain ou* status as one of status as one of thethe leading health ca*e institutions in the nation1 5e ,ust continue to e p*epa*ed fo* these leading health ca*e institutions in the nation1 5e ,ust continue to e p*epa*ed fo* these and othe* potential disaste*s.
and othe* potential disaste*s.
#he onset of ho,eland te**o*is, in the United S
#he onset of ho,eland te**o*is, in the United States1 coupled 5ith the 'ulf !oast7states1 coupled 5ith the 'ulf !oast7s +ulne*aility fo* natu*al disaste*s ,a4e it essential fo* U#)B to ensu*e that plans a*e in +ulne*aility fo* natu*al disaste*s ,a4e it essential fo* U#)B to ensu*e that plans a*e in place1 tested t*ue1 and +iale1 should 5e find ou*sel+es in a th*eatening situation - e it place1 tested t*ue1 and +iale1 should 5e find ou*sel+es in a th*eatening situation - e it
,an,ade o* natu*al. ,an,ade o* natu*al.
#he*efo*e1 in *esponse to these challenges and
#he*efo*e1 in *esponse to these challenges and in align,ent 5ith the 9o,eland in align,ent 5ith the 9o,eland Secu*itySecu*ity &ct1 the #exas State Inf*ast*uctu*e P*otection !o,,ittee1 and State
&ct1 the #exas State Inf*ast*uctu*e P*otection !o,,ittee1 and State of #exas (epa*t,entof #exas (epa*t,ent of Info*,ation Resou*ces :(IR;1 Info*,ation Se*+ices at U#)B has een as4ed
of Info*,ation Resou*ces :(IR;1 Info*,ation Se*+ices at U#)B has een as4ed toto de+elop a ,odel Business !ontinuity Plan
de+elop a ,odel Business !ontinuity Plan to assist you in de+eloping and tto assist you in de+eloping and testing 5o*4esting 5o*4 plans fo* you* o5n a*eas. Ulti,ately1 you* plans should e st*uctu*ed to ,a4e it possile plans fo* you* o5n a*eas. Ulti,ately1 you* plans should e st*uctu*ed to ,a4e it possile
to continue to do usiness and
to continue to do usiness and function du*ing and afte* 5hate+e* c*isis ,ay a*ise.function du*ing and afte* 5hate+e* c*isis ,ay a*ise. IS 5ill also identify *esou*ces and coo*dinate the p
IS 5ill also identify *esou*ces and coo*dinate the p*ocess fo* de+eloping1 testing and*ocess fo* de+eloping1 testing and e+aluating these plans.
e+aluating these plans. !*itical functional a*eas ha+e !*itical functional a*eas ha+e een identified to pa*ticipate in thiseen identified to pa*ticipate in this p*ocess and 5ill continue to e add*essed on an ongoing asis. #his yea*7s plan c*eation p*ocess and 5ill continue to e add*essed on an ongoing asis. #his yea*7s plan c*eation
and testing 5ill include In+ision1 Signatu*e1 and P and testing 5ill include In+ision1 Signatu*e1 and P I!.I!.
(e+eloping a Business !ontinuity Plan is a ,ultidi,ensional p*ocess and
(e+eloping a Business !ontinuity Plan is a ,ultidi,ensional p*ocess and includes aincludes a nu,e* of
nu,e* of phases as phases as p*esc*ied y p*esc*ied y the (IR. the (IR. #hese phases #hese phases include< include< P*o=ect Initiation1P*o=ect Initiation1 Business I,pact &nalysis1 Reco+e*y St*ategies1 Plan (e+elop,ent1 #esting1 and Business I,pact &nalysis1 Reco+e*y St*ategies1 Plan (e+elop,ent1 #esting1 and )aintenance > #*aining - all o
)aintenance > #*aining - all of 5hich 5ill e add*essed at U#)B.f 5hich 5ill e add*essed at U#)B. It is i,pe*ati+e that each of ou* lead
It is i,pe*ati+e that each of ou* leade*s suppo*t and coope*ate in the de+e*s suppo*t and coope*ate in the de+elop,ent of theelop,ent of the plans that 5ill 4eep U#)B ope*ating th*ough the ,ost difficult of ti,es.
If you need assistance in filling out an
If you need assistance in filling out any of this plany of this plan Please contact Randy Jones at ext. 23868.
Please contact Randy Jones at ext. 23868.
Executive Summary
Executive Summary
&n xecuti+e Su,,a*y of the Business !ontinuity Plan
&n xecuti+e Su,,a*y of the Business !ontinuity Plan 5ill need to e co5ill need to e const*ucted.nst*ucted. #his 5ill e a *
#his 5ill e a *ief o+e*+ie5 of you* plan7s ief o+e*+ie5 of you* plan7s *eco+e*y st*ategy. *eco+e*y st*ategy. #his should e done afte*#his should e done afte* you ha+e co,pleted section fou* :; of this te,plate.
you ha+e co,pleted section fou* :; of this te,plate.
**** Examples from other Plans **** Examples from other Plans
If you need assistance in filling out any of this plan Please contact Randy Jones at ext. 23868.
#ale of !ontents
.
Organizational Information of Plan
. xecuti+e Sponso* .2 #ea, %eade* .3 B!P P*o=ect #ea,
.3. Select and Notify B!P P*o=ect #ea, #e,plate .3.2 )ission !*itical &cti+ities
. Plan &pp*o+al .? P*o=ect Plan
2.
Objectives and Deliverables
2.. P*o=ect "=ecti+es and (eli+e*ales
3.
Business Impact Analysis and is! Analysis
3.. Business I,pact &nalysis 3.2.2 n+i*on,ental (isaste*s
3.2.3 "*gani@ed and A o* (elie*ate (is*uption 3.2. %oss of Utilities and Se*+ices
3.2.? uip,ent o* Syste, Cailu*e
3.2.6 Se*ious Info*,ation Secu*ity Incidents 3.2. "the* ,e*gency Situations
.
Business Interruption ecovery Plans
. Bac4up1 Reco+e*y and Resu,ption St*ategy
.. Bac4up1 Reco+e*y and Resu,ption St*ategy #e,plate .2 Cacilities > ssential uip,ent Bac4up and Reco+e*y St*ategy
.2. Cacilities > ssential uip,ent Bac4up and Reco+e*y St*ategy #e,plate
.3 (epa*t,ental and Uni+e*sity I# Syste,s Bac4up and Reco+e*y St*ategy .3. (epa*t,ental and Uni+e*sity I# Syste,s Bac4up and Reco+e*y
If you need assistance in filling out any of this plan Please contact Randy Jones at ext. 23868.
St*ategy #e,plate
. St*ategies fo* P*otecting Nonlect*onic !*itical andAo* Sensiti+e (ocu,ents andAo* Reco*ds
.? Dey Staff
.?. Dey Staff #e,plate .6 ,e*gency !ontact
. !*itical Supplies
.. !*itical Supplies #e,plate .8 !*itical Eendo*ASupplie* Info*,ation
.8. !*itical Eendo*ASupplie* Info*,ation #e,plate
?.
Plan Education"#raining
?. #*aining Needs &ssess,ent
?.. #*aining &ssess,ent #e,plate ?.2 #*aining !o,pleted
6.
Plan #esting
.
Plan $aintenance
. #est !hanges fo* B!P
8.
Post Incident evie%
/.
&lossary
. xecuti+e Sponso*
#he xecuti+e Sponso* is the (epa*t,ental Rep*esentati+e o* '*oup that has the *esponsiility to ,a4e su*e that this c*itical function is deli+e*ed to the u ni+e*sity. #he*efo*e it is the *esponsiility of the xecuti+e Sponso* to ,a4e su*e that a Business !ontinuity Plan is de+eloped1 ,aintained1 and tested.
#he xecuti+e Sponso* is *esponsile fo* the follo5ing<
• I,ple,enting the tea,1
• (e+eloping a Business !ontinuity Policy State,ent1 • Re+ie5ing Ris4 &nalysis1
• &pp*o+ing o+e*all plan content1 • Re+ie5ing all testing outco,esF and1
• Re+ie5ing any changes and ,aintenance to the plan.
2
.2 #ea, %eade*
Co* a p*o=ect of this significance and co,plexity to e successful1 a suitaly ualified #ea, %eade* 5ill need to e appointed. #he #ea, %eade* should possess good leade*ship ualities1 a good unde*standing of usiness p*ocesses and usiness ,anage,ent and st*ong p*o=ect ,anage,ent s4ills.
&n alte*nate #ea, %eade* should also e appointed 5ho 5ould e ale to ta4e o+e* the functions of the #ea, %eade* if needed.
It 5ill e the *esponsiility of the #ea, %eade* to ,a4e su*e the tea, is p*og*essing in acco*dance 5ith the P*o=ect Plan guidelines1 gi+e *egula* status *epo*ts to the Business !ontinuity Plan :B!P; Sponso*1 and otain app*o+al f*o, the Sponso* as needed.
3
.3 B!P P*o=ect #ea,
#he Business !ontinuity Plan :B!P; P*o=ect #ea, ,e,e*s should e selectedF
pe*,ission otained fo* thei* in+ol+e,ent :if necessa*y;F and fo*,ally notified. ach of the ,ain usiness and ope*ational a*eas 5ithin the o*gani@ation should e *ep*esented on the B!P P*o=ect #ea,.
Rep*esentati+es f*o, each of the 4ey usiness a*eas should ha+e a co,p*ehensi+e unde*standing of ho5 thei* o5n usiness a*ea functions1 in addition to an o+e*all
unde*standing of the o*gani@ation as a 5hole. ach a*ea *ep*esentati+e should e ale to *ing to the B!P P*o=ect #ea, info*,ation on ho5 his o* he* o5n a*ea functions1 its 4ey usiness acti+ities o* suppo*t functions1 and its 4ey *is4 a*eas.
.3. Select and Notify B!P P*o=ect #ea,
ach of the usiness and ope*ational a*eas 5ithin the o*gani@ation a*e to e *ep*esented on the B!P P*o=ect #ea,. #he P*o=ect #ea, has o+e*all *esponsiility fo* the
de+elop,ent and ,aintenance of the Plan. )e,e*s of the B!P P*o=ect #ea, a*e cu**ently as follo5s<
B'P PO(E'# E)E'*#I+E SPO,SO
(OB #I#-E A,D
DEPA#$E,#"DI+ISIO,
'O,#A'# I,.O$A#IO,
/-ocation0 P1one0 Email0 Pager0 'ell P1one2
E$E&E,'3 'O,#A'# I,.O$A#IO, /4ome0 Pager0 'ell P1one2
&ny indi+idual *esponsiilities 5ithin P*o=ect #ea,<
B'P PO(E'# #EA$ -EADE (OB #I#-E A,D
DEPA#$E,#"DI+ISIO,
'O,#A'# I,.O$A#IO,
/-ocation0 P1one0 Email0 Pager0 'ell P1one2
E$E&E,'3 'O,#A'# I,.O$A#IO, /4ome0 Pager0 'ell P1one2
&ny indi+idual *esponsiilities 5ithin P*o=ect #ea, :i.e. Business Cunction o* P*ocess;<
B'P PO(E'# A-#E,A#E #EA$ -EADE
(OB #I#-E A,D
DEPA#$E,#"DI+ISIO,
'O,#A'# I,.O$A#IO,
/-ocation0 P1one0 Email0 Pager0 'ell P1one2
E$E&E,'3 'O,#A'# I,.O$A#IO, /4ome0 Pager0 'ell P1one2
?
B'P PO(E'# #EA$ $E$BE (OB #I#-E A,D
DEPA#$E,#"DI+ISIO,
'O,#A'# I,.O$A#IO,
/-ocation0 P1one0 Email0 Pager0 'ell P1one2
E$E&E,'3 'O,#A'# I,.O$A#IO, /4ome0 Pager0 'ell P1one2
&ny indi+idual *esponsiilities 5ithin P*o=ect #ea,<
B'P PO(E'# #EA$ $E$BE (OB #I#-E A,D
DEPA#$E,#"DI+ISIO,
'O,#A'# I,.O$A#IO,
/-ocation0 P1one0 Email0 Pager0 'ell P1one2
E$E&E,'3 'O,#A'# I,.O$A#IO, /4ome0 Pager0 'ell P1one2
&ny indi+idual *esponsiilities 5ithin P*o=ect #ea,<
&dd *o5s as needed
6
.3.2 )ission !*itical &cti+ities
#he follo5ing is a desc*ipti+e list of the o*gani@ation7s ,ission c*itical acti+ities andAo* c*itical usiness p*ocesses1 togethe* 5ith a *ief desc*iption of the usiness p*ocess and ,ain dependencies.
5E3 B*SI,ESS AEA BIE. DES'IP#IO, O. B*SI,ESS PO'ESS
$AI, DEPE,DE,'IES
. Plan of &pp*o+al
P*ocedu*e fo* &pp*o+ing Business !ontinuity Plan :B!P; !ontent
#he*e ,ust e a clea* p*ocedu*e fo* adoption and app*o+al of the B!P. Updates and changes to the plan should also e included in this p*ocess.
#he tea, should select f*o, the follo5ing possile app*o+al ph ases.
• &ppoint,ent of B!P #ea, )e,e*s • "+e*all Plan !ontent
• #esting Plan "utco,es
• !hangesA)aintenance to Plan
8
&pp*o+ing Business !ontinuity Plan :B!P !ontent;
B'P 'ontent Sent Date Approved
Date
'omments
/
.? P*o=ect Plan
#as! ,ame Duration Start .inis1 6
'omplete Patient 'are Delivery Process
Phases
Begin - P*o=ect InitiationARis4 &nalysis 2 54s
Business Inte**uption Reco+e*y PlansASt*ategies 8 54s
&pp*o+al - xecuti+e Sponso* 54s
#*aining > !o,,unication 2 54s
Ealidation > #esting 2 54s
Plan Updates > )aintenance 54s
Gua*te*ly Re+ie5A#estingAPlan )odifications
0
2. "=ecti+es and (eli+e*ales
#he o=ecti+es fo* the p*o=ect need to e clea*ly defined1 togethe* 5ith the deli+e*ales. !oncise definition 5ill enale the B!P P*o=ect #ea, to focus its effo*ts on the ,ost i,po*tant issues and to ensu*e the 5o*4 unde*ta4en is *ele+ant in the context of the o*iginal p*o=ect expectations. #he depa*t,ental B!P sponso* 5ould no*,ally app*o+e these o=ecti+es and deli+e*ales.
Suggested Ho*ding fo* a Suitale "=ecti+e
#he p*o=ects p*inciple o=ecti+e could e stated as<"The development and testing of a well structured and coherent plan which will enable the department / or function to recover as quickly and effectively as possible from an unforeseen disaster or emergency which interrupts normal
business operations."
#he depa*t,ent A o* function could additionally ha+e a se*ies of suo=ecti+es 5hich could co+e* issues such as speciali@ed *esea*ch and de+elop,ent acti+ities1 the need to ensu*e that all e,ployees fully unde*stand thei* duties in i,ple,enting such a plan1 the need to ensu*e that info*,ation secu*ity policies a*e adhe*ed to 5ithin all planned acti+ities o* the need to ensu*e that the p*oposed contingency a**ange,ents a*e cost effecti+e.
Suggested Ho*ding fo* a Suitale %ist of (eli+e*ales
#he deli+e*ales1 in outline1 should consist of<• Business Ris4 and I,pact &nalysis
• (ocu,ented acti+ities necessa*y to p*epa*e the depa*t,ent A o* function fo* possile
e,e*gencies :including st*ategic *eco+e*y ,easu*es;
• (etailed acti+ities fo* dealing 5ith the (isaste* Reco+e*y Phase • P*ocedu*e fo* ,anaging the Business Reco+e*y P*ocess
• Plan fo* testing the Business Reco+e*y P*ocess
• Plan fo* t*aining the staff in the Business Reco+e*y P*ocess
• P*ocedu*e fo* 4eeping the Plan updated
*** Examples from other Plans eturn to #able of 'ontents
2.. P*o=ect "=ecti+es and (eli+e*ales
#o enale the B!P P*o=ect #ea, to focus effo*ts on the 4ey issues1 and to ensu*e the 5o*4 unde*ta4en is *ele+ant to the *eui*e,ents of the p*o=ect1 the p*o=ects o=ecti+es and deli+e*ales ,ust e clea*ly defined. #he (epa*t,ent A xecuti+e Sponso* is *esponsile fo* app*o+al of o=ecti+es and deli+e*ales.
OB(E'#I+ES O. B'P PO(E'#7 )ain o=ecti+e of B!P P*o=ect<
Suo=ecti+es of the B!P P*o=ect<
DE-I+EAB-ES O. B'P PO(E'#7
2
3. Business I,pact &nalysis
#he pu*pose of the Institutional Business I,pact &nalysis :BI&; is to assist executi+e leade*ship in dete*,ining the pe*cei+ed c*iticality of disc*ete U#)B usiness unit entities.
Ideally the BI& should facilitate the high le+el identification of<
• !o,,unity i,pacts • "pe*ational i,pacts • Cinancial i,pacts • Regulato*y i,pacts • &cc*editation i,pacts • P*ocess inte*dependencies • (ata sensiti+ity • (o5nti,e tole*ance • Reco+e*y co,plexity • #echnology dependencies
Cu*the*1 the agg*egated *esults of the Institutional BI& 5ill ulti,ately define p*o=ect scope fo* a suseuent1 ,o*e *igo*ous e+aluation of associated se*+ices and 5o*4 p*oduct. 9ence1 please co,plete all uestions and p*o+ide as ,uch info*,ation as possile to ensu*e 4ey data ele,ents a*e not ,issed.
NOTE !ee footnote below for eamples of the term department . (epa*t,ent #as per $%! four digit Org &'(
2. (epa*t,ent &lign,ent :as per Eecutive )evel %eporting !tructure;< # ( 'epartment within *usiness +nit
#i.e,. $O- is a department within !upport !ervices a business unit within *usiness -dministration(
# ( *usiness +nit within Entity
#i.e., !upport !ervices is a *usiness +nit within *usiness -dministration an entity( 3. (esc*iption of (epa*t,ent<
#0hat are your department1s primary functions and processes2 0hat services does the department provide the +niversity2(
3 3
.
. P*ocess P*ocess "utput<"utput<
#0hat primary services, work
#0hat primary services, work products or information created/provided is made availableproducts or information created/provided is made available by your department2 )ist 3 of
by your department2 )ist 3 of the most important.the most important.
?.
?. P*ocess P*ocess Input<Input<
#0hat primary services/resources does your department rely
#0hat primary services/resources does your department rely on to perform its on to perform its activities2activities2 i.e., &nformation Technology/softwa
i.e., &nformation Technology/software, special equipment informare, special equipment information, etc. tion, etc. )ist up to five.()ist up to five.(
6.
6. #he loss of these se*+icesA*esou*ces 5ould ha+e the #he loss of these se*+icesA*esou*ces 5ould ha+e the follo5ing cu,ulati+e effect on entityfollo5ing cu,ulati+e effect on entity function and p*ocesses<
function and p*ocesses< :
: ; Significant ; Significant ha*, o* ha*, o* effecteffect
#i.e., entity/department could supply some
#i.e., entity/department could supply some services/resources to the university but inservices/resources to the university but in such a diminished cap
such a diminished capacity that services would bacity that services would be unacceptable(e unacceptable( :
: ; )ode*ate ; )ode*ate ha*, o* ha*, o* effecteffect
#i.e., entity/department could supply services/resources in a
#i.e., entity/department could supply services/resources in a diminished but acceptablediminished but acceptable capacity to the university(
capacity to the university( :
: ; )ini,al ; )ini,al ha*, o* ha*, o* effecteffect
#i.e., entity/department could supply services/resources to the
#i.e., entity/department could supply services/resources to the university in a 4somewhatuniversity in a 4somewhat normal5 capacity by altering processes or
normal5 capacity by altering processes or procedures(procedures( :
: ; No ; No ha*, ha*, o* effecto* effect
#i.e., entity/department could to supply
.
. #he loss of y#he loss of you* depa*t,ent 5oou* depa*t,ent 5ould affect the follould affect the follo5ing *eadth o5ing *eadth of ha*,< f ha*,< :chec4 all that:chec4 all that apply;
apply; :
: ; ; Potential Potential endange*,ent endange*,ent to to pulic pulic health health o* o* safetysafety #i.e., the state, community, or any su
#i.e., the state, community, or any subset of populatibset of population served. on served. This would includeThis would include patient, student, and sta
patient, student, and staff health or safetff health or safety(y( :
: ; ; &d+e*sely &d+e*sely i,pact i,pact usiness1 usiness1 o* o* o*gani@ation1 o*gani@ation1 state state agency1 agency1 office1 office1 co,,ission1 co,,ission1 oa*d1oa*d1 uni+e*sity1 institution1 cente*1 p*og*a,1 o* othe* entity exte*nal to U#)B
uni+e*sity1 institution1 cente*1 p*og*a,1 o* othe* entity exte*nal to U#)B #i.e., would adversely impact outside entities eternal to +T* i.e.,
#i.e., would adversely impact outside entities eternal to +T* i.e., partnerships withpartnerships with other universities, research that supports other businesses,
other universities, research that supports other businesses, etc(etc( : ;
: ; &d+e*sely &d+e*sely i,pact i,pact U#)B U#)B onlyonly #i.e., would only impact
#i.e., would only impact +T*1s service level or integrity/reputation(+T*1s service level or integrity/reputation( : ;
: ; No No ha*, ha*, o* o* effecteffect
:i.e.1 entityAdepa*t,ent could supply se*+icesA*esou*ces in a no*,al ,anne* to :i.e.1 entityAdepa*t,ent could supply se*+icesA*esou*ces in a no*,al ,anne* to thethe uni+e*sity;
uni+e*sity; 8.
8. #he loss of you* depa*t,#he loss of you* depa*t,ent 5ould ha+e the follo5ent 5ould ha+e the follo5ing effect on U#)B ,issions :seing effect on U#)B ,issions :select one;<lect one;<
:
: ; ; )ino* )ino* effect effect on on one one di+ision di+ision o* o* usiness usiness unitunit #the loss of your department would be
#the loss of your department would be an inconvenience to one department or businessan inconvenience to one department or business unit of the university.(
unit of the university.( :
: ; ; )ino* )ino* effect effect on on the the institution1 institution1 so,e so,e di+isions1 di+isions1 o* o* usiness usiness unitsunits #the loss of your department would be
#the loss of your department would be an inconvenience to several divisions oran inconvenience to several divisions or business units of the
business units of the university(university( :
: ;; )ode*ate effect on so,e di+isions o* usiness units)ode*ate effect on so,e di+isions o* usiness units
#the loss of
#the loss of your department would cause your department would cause some divisions to change some divisions to change proceduresprocedures
and the way their business functions are supplied to the university(
and the way their business functions are supplied to the university(
:
: ; ; )ode*ate )ode*ate effect effect on on the the institutioninstitution
#the loss of your department would cause the
#the loss of your department would cause the university to alter the way they supplyuniversity to alter the way they supply normal delivery processes(
normal delivery processes( :
: ; ; !atast*ophic !atast*ophic effect effect on on one one di+ision di+ision o* o* usiness usiness unitunit #the loss of you
#the loss of your department r department would cause would cause seriously affseriously affect ect one division/bone division/business unitusiness unit1s1s the inability to provide normal services to the university(
the inability to provide normal services to the university( :
: ; ; !atast*ophic !atast*ophic effect effect on on the the institution1 institution1 so,e so,e di+isions1 di+isions1 o* o* usiness usiness unitsunits #the loss of
#the loss of your department would significantly impact normal services provided byyour department would significantly impact normal services provided by the university.(
? ?
/.
/. !ould this function e p!ould this function e pe*fo*,ed fo* a pe*iod of ti,e at a *educed ope*ating e*fo*,ed fo* a pe*iod of ti,e at a *educed ope*ating efficiencyefficiency #i.e., degraded performance such
#i.e., degraded performance such as manual versus automated process(as manual versus automated process( If yes1 fo* ho5 long
If yes1 fo* ho5 long #
# ( ( )ess )ess than than 67 67 hourshours #
# ( +( +p to p to 8 to 8 to 3 3 daysdays #
# ( ( 9reater 9reater than than 3 3 daysdays #
# ( ( 9reater 9reater than than 6 6 weeksweeks &dditional co,,ents
&dditional co,,ents
0.
0. 9o5 long could 9o5 long could you* depa*t,ent you* depa*t,ent eecompletely idle /i8e80 totally lost2completely idle /i8e80 totally lost2 efo*e it efo*e it expe*iences o* c*eates a significant ad+e*se i,pact
expe*iences o* c*eates a significant ad+e*se i,pact
#i.e., 4totally lost5 cannot perform its functions in any capacity for any reason(
#i.e., 4totally lost5 cannot perform its functions in any capacity for any reason(
#
# ( ( )ess )ess than than 67 67 hourshours #
# ( +( +p to p to 8 to 8 to 3 3 daysdays #
# ( ( 9reater 9reater than than 3 3 daysdays #
# ( ( 9reater 9reater than than 6 6 weeksweeks &dditional co,,ents
&dditional co,,ents
.
. 9o5 long can the depa*t,ent continue to function 59o5 long can the depa*t,ent continue to function 5ithout its usual auto,atedithout its usual auto,ated info*,ation syste,s eithe* depa*t,ental o* cent*ali@ed U#)B syste,s
info*,ation syste,s eithe* depa*t,ental o* cent*ali@ed U#)B syste,s :&ssu,e that loss of these syste,s occu*s du*ing the
:&ssu,e that loss of these syste,s occu*s du*ing the busiest0 or pea!0 %or! period82busiest0 or pea!0 %or! period82 /
/ 22 %ess than 2 hou*s%ess than 2 hou*s
#Operation of the 'epartment has an etreme reliance on information system and #Operation of the 'epartment has an etreme reliance on information system and requires immediate disaster recovery plans, which have been tested, for the requires immediate disaster recovery plans, which have been tested, for the replacement/access to either internal or centrally
replacement/access to either internal or centrally supported systems.supported systems. /
/ 22 Up to 3 to ? daysUp to 3 to ? days
#The department has a sign
#The department has a significant dependence on ificant dependence on information syinformation systems. - ma:orstems. - ma:or interruption of service delivery would
interruption of service delivery would occur if information systems were unavailableoccur if information systems were unavailable for 8 to 3 days.
for 8 to 3 days. /
/ 22 Up to 2 5ee4sUp to 2 5ee4s
#The 'epartment has
#The 'epartment has a minimal reliance on information systems and, a minimal reliance on information systems and, could functioncould function in a manual mode for up to two weeks at an acceptable service level.(
in a manual mode for up to two weeks at an acceptable service level.( /
/ 22 )o*e than 2 5ee4s)o*e than 2 5ee4s
#The 'epartment process/procedures are not dependent upon
#The 'epartment process/procedures are not dependent upon information systems andinformation systems and can be accomplished in a
can be accomplished in a manual mode for an etended period of time until systemsmanual mode for an etended period of time until systems become available with no impact to service
6
2. In the e+ent of a significant outage o* dis*uption1 5hen is the se+e*ity of i,pact ,o*e significant
#i.e., if an outage occurs, are some months worse than others2 some days2 some hours2( !hec4 all that apply
/ 2 some months versus others
/ 2 some days of the week versus others
/ 2 certain times of the day
/ 2 certain times of the year
#particular week of the month, month/quarter end, fiscal year end, etc.( / 2 no particular timing of an event is significantly greater than another
3. C*o, the list of exposu*es elo51 please indicate the *elati+e i,po*tance of each type to the institution using the *ating scale of 0 to 01 fo* the specific depa*t,ent.
&lso using the scale of 0 to 1 indicate the se+e*ity of each i,pact and ho5 it 5ould escalate o+e* ti,e if the depa*t,ent 5as not ale to function.
Exposure type elative
Importance Scale 9:;9
0 K no i,po*tance ? K ,ode*ate i,po*tance 0K ext*e,e i,po*tance
Impact Severity Scale 9 < = 0 K no i,pact K little i,pact 2 K so,e i,pact 3 K significant i,pact K se+e*e i,pact -ess t1an >= 1ours *p to ? to @ days &reater t1an @ days &reater t1an > %ee!s
-oss of revenue"cas1 flo%
#'oes your department create revenue/cash flow to the university2(
-ost discounts
#0ould the loss of your department create lost discounts2(
-ost interest earned
#&f your department earns revenue/cash flow, would the loss of it
also create lost interest earned2(
'ontractual fines"penalty
#'oes your department perform contract work2 0ould there be fines
or penalties, associated with not being able to fulfill these contracts2(
.ailure to deliver services"%or! product
#0ould the loss of your department result in failure to deliver services/work product to anyon e2(
Exposure type elative
Importance Scale 9:;9
0 K no i,po*tance ? K ,ode*ate i,po*tance 0K ext*e,e i,po*tance
Impact Severity Scale 9 < = 0 K no i,pact K little i,pact 2 K so,e i,pact 3 K significant i,pact K se+e*e i,pact -ess t1an >= 1ours *p to ? to @ days &reater t1an @ days &reater t1an > %ee!s -oss of customers"reduced mar!et s1are"lost opportunity
#0ould the loss of your department result in the loss of customers ;i.e. patients, students, research, etc< or the loss of market share or lost
opportunity2(
Interest incurred
#0ould the loss of your department result in some type of interest being
incurred2(
Additional costs to recover
#0ould the loss of your department require additional cost from acquisition of outside services, temporary employees, emergency purchases, rental/lease fees, wages paid to idle staff, relocation ep enses,
capital outlays, etc2(
-iability"potential litigation
#0ould the loss of your department/function result in liability
or potential litigation2(
egulatory or non: compliance violations
# 0ould the loss of your department violate regulatory practices resulting
in the division/university being non= compliant2(
Accreditation jeopardy or violations
#0ould the loss of your department :eopardi>e any institutiona l accreditation or violate terms of that
8
. "pe*ational I,pacts :those i,pacts that a*e difficult to uantify ,oneta*ily ut can ha+e a significant1 longte*, effect on the institution - use sa,e scale as uestion 3;<
Exposure type elative
Importance Scale 9:;9
0 K no i,po*tance ? K ,ode*ate i,po*tance 0K ext*e,e i,po*tance
Impact Severity Scale 9 < = 0 K no i,pact K little i,pact 2 K so,e i,pact 3 K significant i,pact K se+e*e i,pact -ess t1an >= 1ours *p to ? to @ days &reater t1an @ days &reater t1an > %ee!s !o,petiti+e &d+antage !onsu,e* !onfidence Repo*ting Reui*e,ents ,ployee )o*ale !usto,e* Se*+ice Staff Retention Eendo* Relations Ho*4 Bac4log
?. #he loss of you* depa*t,ent 5ould *esult in lost revenue"cas1 flo% f*o, fees1 collections1 inte*est1 penalties1 gifts1 g*ants1 etc. andAo* di,inish the depa*t,ent7s cost a+oidance capacity :i.e.1 fines1 penalties1 litigation1 etc.;
(u*ing the indicated ti,e after t1e disaster1 the loss 5ould e< #ime .rame )ess than 67 hours ?@3AAB @3AAB=@C L)L?) L?) L0) ML0)
+p to 8 to 3 days ?@3AAB @3AAB=@C L)L?) L?)
L0) ML0) 9reater than 3 days ?@3AAB @3AAB=@C L)L?) L?) L0) ML0) '*eate* than 2 5ee4s L?00D @3AAB=@C L)L?) L?) L0) ML0)
6. #otal annual *e+enue fo* you* depa*t,ent< # ( None # ( ?@CAAB # ( @CAAB=@3AAB # ( @3AAB=@C # ( @C=@3 # ( @3=@CA # ( @CA=@63 # ( D@63
/
. #otal annual udgeta*y funding fo* you* depa*t,ent< # ( ?@CAAB # ( @CAAB=@3AAB # ( @3AAB=@C # ( @C=@3 # ( @3=@CA # ( @CA=@63 # ( D@63
8. Based upon you* expe*iences and 4no5ledge of you* en+i*on,ent1 select the state,ent that est *eflects the vulnerability of you* depa*t,ent to a p*olonged dis*uption o* outage.
#ulnerability can be related to availability of its technology infrastructure, speciali>ed or unique equipment, or any other limiting factor.(
: ; Not +ulne*ale
#No known factors that would cause a prolonged outage.(
: ; So,e5hat +ulne*ale
#There are some factors present that may cause a prolonged outage. Eperience indicates a low likelihood of occurrence.(
: ; Eulne*ale
#There are factors present that may cause a prolonged outage. Eperience indicates a medium likelihood of occurrence.(
: ; xt*e,ely +ulne*ale
#There are multiple factors present that may cause a prolonged outage. Eperience indicates a high likelihood of occurrence.(
/. #he *esto*ation co,plexity of a depa*t,ent is the *elati+e ,easu*e of ho5 difficult it 5ould e to *eco+e* the depa*t,ent to an acceptale le+el of se*+ice follo5ing a significant dis*uption. :!o,plexity can e *elated to a+ailaility of its technology inf*ast*uctu*e1 speciali@ed o* uniue euip,ent1 o* any othe* li,iting facto*.; Please *ate the co,plexity of you* depa*t,ent using the follo5ing definitions.
: ; asily *eco+e*ale
#-ssumes an alternate location and required information and/or data from off= premise storage.(
: ; So,e5hat *eco+e*ale
#!ome information or elements may be difficult to replace in a reasonable timeframe.(
: ; (ifficult to *eco+e*
#any of the elements of your department may be difficult to replace in a reasonable timeframe.(
: ; xt*e,ely difficult to *eco+e*
#There are elements that would be etremely difficult to replicate or the timeframe is etremely long.(
20. (oes you* depa*t,ent c*eate1 p*ocess1 ,anage1 o* sto*e identifiale *eco*ds on pe*sons *elati+e to confidentiality o* p*i+acy :chec4 all that apply;
20
: ; P*otected patient data
#i.e., F&G-- implications(
: ; P*otected student data
#i.e., $E%G- implications(
: ; Pe*sonal I(
#i.e., social security numbers, employee numbers, drivers license numbers, credit card numbers, etc.(
: ; "the* pe*sonal data
#i.e., physical addresses, phone numbers, pager numbers, email addresses, etc.(
: ; None
2. (oes you* depa*t,ent c*eate1 p*ocess1 ,anage1 o* sto*e info*,ation that 5ould e of co,,e*cial +alue to pa*ties exte*nal to U#)B :chec4 all that apply;
: ; Sensiti+e info*,ation
#i.e. proprietary and/or research data, employee data, etc.(
: ; !onfidential Info*,ation
#i.e. patient data, student data, social security numbers, etc.( : ; "pe*ational Info*,ation
#i.e., vendor list, contact information, business strategic plans, etc.(
22. %ist and *iefly desc*ie additional depa*t,ental facto*s1 issues o* conce*ns not add*essed in this su*+ey 5hich should e conside*ed 5hen e+aluating the i,pact of the loss of this usiness unit depa*t,ent. &lso1 please list additional ite,s you 5ould conside* i,po*tant fo* the de+elop,ent of *eco+e*y st*ategies and plans fo* you* depa*t,ent.
(epa*t,ent Point of !ontact<
OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO (ate< OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
2
3.2. Ris4 &nalysis
#he B!P P*o=ect #ea, 5ill exa,ine each potential en+i*on,ental disaste* o* e,e*gency situation including1 ut not li,ited to1 o*gani@ed dis*uption :i.e. hu,an cause;F loss of utilities and se*+ices dis*uptionF euip,ent o* syste, failu*eF se*ious info*,ation secu*ity incidentsF and any othe* dis*uption caused y othe* e,e*gency situations not al*eady co+e*ed.
ach of the ao+e potential th*eats1 as 5ell as any othe*s that ,ight e uniue to the indi+idual depa*t,ent o* function1 ,ust e exa,ined in detail and an analysis de+eloped to e+aluate the conseuences of each. ach scena*io should also e assessed fo*
possiility o* occu**ence :p*oaility *ating;1 possile i,pact :i,pact *ating; and any co,pensating cont*ols that a*e in place. !o,pensating !ont*ols a*e inte*nal cont*ols that co,pensate fo* *is4.
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN'
2 %"H 2 !"N#R"%%&B%
3 )(IU) 3 !RI#I!&%
9I'9 (E&S#&#IN'
? ER$ 9I'9 ? #R)IN&%
.ormula for calculating potential ris!7
P*oaility Rating x I,pact Rating K Ris4 Scale of Ris4
3 2?
%o5 Ris4 )ode*ate Ris4 9igh Ris4
22
3.2.2 n+i*on,ental (isaste*s
#he B!P P*o=ect #ea, has exa,ined each potential en+i*on,ental disaste* o* e,e*gency situation. #he focus in this section1 is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential en+i*on,ental disaste*s ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES 9u**icane #o*nado Clood lect*ical Sto*,s Ci*e C*ee@ing !onditions PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES !onta,ination and n+i*on,ental 9a@a*ds pide,ic
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent. eturn to #able of 'ontents
23 PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES !onta,ination and n+i*on,ental 9a@a*ds pide,ic
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent. eturn to #able of 'ontents
3.2.3 "*gani@ed and A o* (elie*ate (is*uption
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, Qo*gani@ed dis*uption. #he focus in this section1 is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s *esulting f*o, o*gani@ed dis*uption ha+e een assessed as follo5s<
PO#E,#IA- DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES &cts of #e**o*is, &cts of Saotage &ct of Ha* #heft
2
3.2.3 "*gani@ed and A o* (elie*ate (is*uption
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, Qo*gani@ed dis*uption. #he focus in this section1 is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s *esulting f*o, o*gani@ed dis*uption ha+e een assessed as follo5s<
PO#E,#IA- DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES &cts of #e**o*is, &cts of Saotage &ct of Ha* #heft PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES &*son
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent.
2? PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES &*son
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent.
eturn to #able of 'ontents
3.2. %oss of Utilities and Se*+ices
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, loss of utilities and se*+ices. #he focus in this section1 is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s as a *esult of loss of utilities and se*+ices ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES lect*ical Po5e* %oss of 'as Supply %oss of Hate* Supply Pet*oleu, and "il
26
3.2. %oss of Utilities and Se*+ices
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, loss of utilities and se*+ices. #he focus in this section1 is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s as a *esult of loss of utilities and se*+ices ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES lect*ical Po5e* %oss of 'as Supply %oss of Hate* Supply Pet*oleu, and "il
Sho*tage !o,,unications Se*+ices B*ea4do5n PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES %oss of (*ainageAHaste Re,o+al
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent.
2 PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES %oss of (*ainageAHaste Re,o+al
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent.
eturn to #able of 'ontents
3.2.? uip,ent o* Syste, Cailu*e
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, euip,ent o* syste, failu*e. #he focus in this section1 is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s as a *esult of euip,ent o* syste, failu*e ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES Inte*nal Po5e* Cailu*e &i* !onditioning Cailu*e
28
3.2.? uip,ent o* Syste, Cailu*e
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, euip,ent o* syste, failu*e. #he focus in this section1 is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s as a *esult of euip,ent o* syste, failu*e ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES Inte*nal Po5e* Cailu*e &i* !onditioning Cailu*e PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES uip,ent Cailu*e :excluding I# ha*d5a*e;
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
2/ PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES uip,ent Cailu*e :excluding I# ha*d5a*e;
#+se cut and paste facility to add further entries(
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent. eturn to #able of 'ontents
3.2.6 Se*ious Info*,ation Secu*ity Incidents
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, se*ious info*,ation secu*ity incidents. #he focus in this section is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s as a *esult of se*ious Info*,ation Secu*ity incidents ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES !ye* !*i,e %oss of Reco*ds o* (ata (isclosu*e of Sensiti+e Info*,ation
30
3.2.6 Se*ious Info*,ation Secu*ity Incidents
#he B!P P*o=ect #ea, has exa,ined each potential disaste* o* e,e*gency situation *esulting f*o, se*ious info*,ation secu*ity incidents. #he focus in this section is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
Potential disaste*s as a *esult of se*ious Info*,ation Secu*ity incidents ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES !ye* !*i,e %oss of Reco*ds o* (ata (isclosu*e of Sensiti+e Info*,ation PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES I# Syste, Cailu*e
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent.
3 PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES I# Syste, Cailu*e
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (E&S#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent.
eturn to #able of 'ontents
3.2. "the* ,e*gency Situations
#he B!P P*o=ect #ea, has exa,ined each potential disaste* *esulting f*o, othe* e,e*gency situations. #he focus in this section is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
"the* potential e,e*gency situations ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES Ho*4place Eiolence Neigho*hood 9a@a*ds Island &ccessile
32
3.2. "the* ,e*gency Situations
#he B!P P*o=ect #ea, has exa,ined each potential disaste* *esulting f*o, othe* e,e*gency situations. #he focus in this section is on the le+el of usiness dis*uption1 5hich could a*ise f*o, each type of disaste*.
"the* potential e,e*gency situations ha+e een assessed as follo5s<
PO#E,#IA-DISAS#E POBABI-I#3 A#I,& /SEE #AB-E BE-O2 BIE. DES'IP#IO, O. 'O$PE,SA#I,& 'O,#O-S I$PA'# A#I,& /SEE #AB-E BE-O2 IS5 A#I,& POBABI-I#3 x I$PA'# C BIE. DES'IP#IO, O. PO#E,#IA- 'O,SE*E,'ES Ho*4place Eiolence Neigho*hood 9a@a*ds Island &ccessile
POBABI-I#3 A#I,& I$PA'# A#I,&
S'OE -E+E- S'OE
-E+E- ER$ %"H IRRI#&#IN' 2 %"H 2 !"N#R"%%&B% 3 )(IU) 3 !RI#I!&% 9I'9 (EIS#&#IN' ? ER$ 9I'9 ? #R)IN&%
I,pact Rating should ta4e into conside*ation co,pensating cont*ols that ha+e een i,ple,ented to lessen the se+e*ity of e+ent. eturn to #able of 'ontents
. Bac4Up1 Reco+e*y and Resu,ption St*ategies
#his section of the Plan should contain a list of the 4ey ad,inist*ation and ope*ational p*ocesses 5ith an indication of the c*iticality of the p*ocess 5ithin the dis*uption pe*iod.
It is necessa*y to estalish standa*d ti,eands fo* ,easu*ing pe*iods 5hen1 du*ing an e,e*gency1 no*,al usiness se*+ices could eco,e una+ailale. #hese ti,eands a*e then applied to each 4ey usiness p*ocess and an assess,ent ,ade of the financial and ope*ational i,pact fo* outages.
U#)B has estalished th*ee ti,eands fo* add*essing alte*nati+e p*ocedu*es.
• ScheduledA&nticipated "utage - this option assu,es that co,,unication as een
,ade to all depa*t,ents that do5nti,e 5ill occu* at a p*eposted data and ti,e du*ation :this is dete*,ined y the depa*t,ent;.
33
. Bac4Up1 Reco+e*y and Resu,ption St*ategies
#his section of the Plan should contain a list of the 4ey ad,inist*ation and ope*ational p*ocesses 5ith an indication of the c*iticality of the p*ocess 5ithin the dis*uption pe*iod.
It is necessa*y to estalish standa*d ti,eands fo* ,easu*ing pe*iods 5hen1 du*ing an e,e*gency1 no*,al usiness se*+ices could eco,e una+ailale. #hese ti,eands a*e then applied to each 4ey usiness p*ocess and an assess,ent ,ade of the financial and ope*ational i,pact fo* outages.
U#)B has estalished th*ee ti,eands fo* add*essing alte*nati+e p*ocedu*es.
• ScheduledA&nticipated "utage - this option assu,es that co,,unication as een
,ade to all depa*t,ents that do5nti,e 5ill occu* at a p*eposted data and ti,e du*ation :this is dete*,ined y the depa*t,ent;.
• Unscheduled "utage - Sho*t (u*ation - this option assu,es that the*e is a se*+ice
inte**uption1 ut is p*o=ected to e of a sho*tte*, du*ation :this is dete*,ined y the depa*t,ent;.
• Unscheduled "utage - %ong (u*ation - this option assu,es that the*e is a se*+ice
inte**uption1 due to syste,s o* facilities1 fo* an extended pe*iod of ti,e :this is dete*,ined y the depa*t,ent;.
Identify the potential dis*uption and i,pact to each of these p*ocesses. &dditionally identify alte*nati+e ,ethods of handling each of these acti+ities. )anual ac4 up p*ocedu*es 5ill e de+eloped fo* &d,inist*ation and "pe*ations functions as these a*e
usually *elati+ely easy to i,ple,ent 5hen I# syste,s a*e not a+ailale. #hese can often e suppo*ted y usiness o* office soft5a*e p*o+iding sp*eadsheet1 dataase and 5o*d p*ocessing capailities.
#o *esu,e no*,al ope*ations it is essential to plan fo* the potentially co,plex acti+ities necessa*y to co,plete you* *eco+e*y p*ocess. "nce the e,e*gency is o+e*1 you ,ay need to t*ansition f*o, a ,anual p*ocess ac4 to an elect*onic p*ocess. #his ,ay in+ol+e
extensi+e data ent*y and *econciling of data. In o*de* fo* this p*ocess to e effecti+e1 it ,ust e ca*efully planned and st*uctu*ed. Resu,ption St*ategy contains the fo*,at fo* *eco*ding acti+ities1 5hich need to e1 ca**ied out in p*io*ity seuence and 5hich pe*son o* tea,s a*e *esponsile fo* co,pleting those tas4s. Hhe*e supplies and +endo*s a*e *eui*ed to supply goods o* se*+ices1 as pa*t of the *esu,ption p*ocess then these acti+ities 5ill e in+ol+ed.
3
.. Bac4Up1 Reco+e*y and Resu,ption St*ategies
Identify each essential acti+ity1 along 5ith its potential dis*uption and i,pact of each p*ocess. &dditionally identify alte*nati+e ,ethods of handling each of these acti+ities along 5ith *esu,ption p*ocedu*es fo* *esu,ing no*,al ope*ations. ach acti+ity 5ill ha+e a sepa*ate g*id.
ESSE,#IA-A'#I+I#IES
S'4ED*-ED"A,#I'IPA#ED O*#A&E
&enerally /#ime .rameFF2
*,S'4ED*-ED O*#A&E < S1ort Duration /#ime .rameFF2 *,S'4ED*-ED O*#A&E: -ong Duration G /#ime .rameFF2 :Na,e &cti+ity 9e*e; Potential Disruption Potential Impact7 ecovery Strategy esumption Strategy
eturn to #able of 'ontents
.2 Cacilities and ssential uip,ent Bac4Up and
Reco+e*y St*ategies
)any unexpected e+ents can affect facilities and essential euip,ent that a*e +ital to continuation of no*,al usiness acti+ities. #hese include fi*e1 flood1 hu**icane1 te**o*ist acti+ity1 etc. #he #ea, ,ust the*efo*e de+elop a plan of ho5 to continue to p*o+ide usiness se*+ices to its custo,e*s in the e+ent of a disaste*1 5hich affects eithe* its
facilities o* essential euip,ent.
He *eco,,end that each depa*t,ent contact and 5o*4 5ith Cacilities "pe*ations and )anage,ent :0/23?00; to otain alte*nati+e locations fo* conducting you* usiness functions.
#his section of the Business !ontinuity Plan :B!P; 5ill contain details of such a**ange,ents and an esti,ate of potential costs.
3?
.2 Cacilities and ssential uip,ent Bac4Up and
Reco+e*y St*ategies
)any unexpected e+ents can affect facilities and essential euip,ent that a*e +ital to continuation of no*,al usiness acti+ities. #hese include fi*e1 flood1 hu**icane1 te**o*ist acti+ity1 etc. #he #ea, ,ust the*efo*e de+elop a plan of ho5 to continue to p*o+ide usiness se*+ices to its custo,e*s in the e+ent of a disaste*1 5hich affects eithe* its
facilities o* essential euip,ent.
He *eco,,end that each depa*t,ent contact and 5o*4 5ith Cacilities "pe*ations and )anage,ent :0/23?00; to otain alte*nati+e locations fo* conducting you* usiness functions.
#his section of the Business !ontinuity Plan :B!P; 5ill contain details of such a**ange,ents and an esti,ate of potential costs.
36
.2. Cacilities and ssential uip,ent Bac4Up and Reco+e*y
St*ategies
)any unexpected e+ents can affect facilities and essential euip,ent +ital to the continuation of no*,al usiness acti+ities. #his plan has the*efo*e een de+eloped to ensu*e a continued se*+ice to custo,e*s in the e+ent of a disaste* affecting eithe* the depa*t,ent7s A o* function7s facilities o* its essential euip,ent.
#he depa*t,ent7s A o* function7s ac4up and continuity st*ategies fo* its facilities and essential euip,ent a*e as follo5s.
;8 .A'I-I#IES
,A$E O. .A'I-I#IES A&EED BA'5:*P A,D 'O,#I,*I#3 S#A#E&3
#+se cut and paste facility to add further entries(
>8 ESSE,#IA- E*IP$E,#
,A$E O. E*IP$E,# DES'IP#IO, O. E*IP$E,#
-O'A#IO, 'OS# ES#I$A#E #O EP-A'E
3
,A$E O. E*IP$E,# DES'IP#IO, O. E*IP$E,#
-O'A#IO, 'OS# ES#I$A#E #O EP-A'E
&g*eed Bac4up !ontinuity St*ategy
#+se cut and paste facility to add further entries(
38
.3 (epa*t,ental and Uni+e*sity I# Syste,s Bac4Up and
Reco+e*y St*ategies
In 'ene*al one of the ,ost i,po*tant aspects of Business !ontinuity Planning fo* the ,a=o*ity of depa*t,ents o* functions is in choosing an app*op*iate st*ategy fo* the ac4 up and *eco+e*y of the I# ased syste,s.
In this section of the Plan1 the 4ey usiness p*ocesses a*e ,atched against the I# syste, and an app*op*iate ti,e f*a,e to co,plete *eco+e*y is chosen. #his section ,ay *eui*e indepth *esea*ch to dete*,ine the *ele+ant costs of each st*ategy. It ,ay also e
necessa*y to p*epa*e a detailed Reuest fo* P*oposal fo* +endo*s to estalish the +iaility and cost of the p*efe**ed st*ategic app*oach.
!onside*ation should also e gi+en to the i,pact of potential se+e*e da,age to oth facilities and co,,unication7s syste,s1 5hich could ha+e a significant i,pact on the depa*t,ent7s Ao* function7s I#1 se*+ices and syste,s.
3/
.3. (epa*t,ental and Uni+e*sity I# Syste,s Bac4Up and
Reco+e*y St*ategies
"ne of the ,ost i,po*tant aspects of Business !ontinuity Planning is choosing of an app*op*iate st*ategy fo* the ac4up and *eco+e*y of I# ased syste,s. !onside*ation has een gi+en to the i,pact on the depa*t,ent A o* function7s I# syste,s of potential se+e*e da,age to facilities o* co,,unications syste,s.
& su,,a*y of the (epa*t,ental I# syste,s and the ag*eed ac4up st*ategy a*e listed elo5. ach depa*t,ent syste,s 5ill also need to de+elop disaste* *eco+e*yA*esto*ation p*ocedu*es. :see exa,ple of U#)B Info*,ation Se*+ices disaste* *eco+e*y
docu,entation;
,A$E O. I# S3S#E$ E'O+E3 #I$E E*IED
5E3 B*SI,ESS PO'ESS S*PPO#ED
PO#E,#IA- I$PA'#
IS S$S#) B&!D( UP 9"H "C#N IS S$S#) B&!D( UP H9R &R B&!DUP #&PS DP# ("S #9IS S$S#) 9&E EI#&% %!#R"NI! R!"R(S &N(A"R (&#&<
&'R( B&!DUP S#R&#'$< :Hhat is you* st*ategy if syste, is not a+ailale;
PRS"N RSP"NSIB% C"R S$S#) :i.e. ,aintenance1 ac4up1 *esto*ation;
&%#RN&# PRS"N RSP"NSIB% C"R S$S#)
IS S$S#) B&!D( UP 9"H "C#N IS S$S#) B&!D( UP H9R &R B&!DUP #&PS DP#
&'R( B&!DUP S#R&#'$< :Hhat is you* st*ategy if syste, is not a+ailale;
PRS"N RSP"NSIB% C"R S$S#) :i.e. ,aintenance1 ac4up1 *esto*ation;
0
& su,,a*y of the Uni+e*sity cent*ali@ed I# Syste,sA&pplications1 5hich suppo*t depa*t,ent functions1 and the Info*,ation Se*+ices contact info*,ation. #&t is
&nformation !ervices responsibility to establish back=up strategy for the &T !ystem listed below(
,A$E O. I# S3S#E$ 5E3 B*SI,ESS PO'ESS S*PPO#ED
PO#E,#IA- I$PA'#
!a,pus (ata Net5o*4 !onnecti+ity fo* dataaccessAexchange f*o, all se*+e*s on the ca,pus.
Inaility to accessAp*ocess data filed on any se*+e* on the ca,pus.
IS 'O,#A'# I,.O$A#IO,H
IS 9elp (es4 - ext 2?200
,A$E O. I# S3S#E$ 5E3 B*SI,ESS PO'ESS S*PPO#ED
PO#E,#IA- I$PA'#
IS 'O,#A'# I,.O$A#IO,7
. St*ategies fo* P*otecting Nonlect*onic !*itical andAo* Sensiti+e
(ocu,ents andAo* Reco*ds
#he B!P P*o=ect #ea, has assessed oth elect*onic *eco*ds and pape* ased *eco*ds listed elo5 as eing +ital andAo* sensiti+e to the o*gani@ations usiness acti+ities. St*ategies fo* p*otecting and *eco+e*ing these docu,ents ha+e een *e+ie5ed and a*e docu,ented elo5.
Na,e of
(ocu,entAReco*d
B*ief (esc*iption (oes this docu,ent hold confidential o* sensiti+e info*,ation :5hat type;
%ocation 9eld
Hhat safegua*ds a*e in place to p*otect *eco*ds f*o, da,age andAo* disclosu*e<
Hould these docu,ents need so,e type of *esto*ation in the e+ent of da,age
Na,e of
(ocu,entAReco*d
B*ief (esc*iption (oes this docu,ent hold confidential o* sensiti+e info*,ation :5hat type;
%ocation 9eld
Hhat safegua*ds a*e in place to p*otect *eco*ds f*o, da,age andAo* disclosu*e<
2 Na,e of
(ocu,entAReco*d
B*ief (esc*iption (oes this docu,ent hold confidential o* sensiti+e info*,ation :5hat type;
%ocation 9eld
Hhat safegua*ds a*e in place to p*otect *eco*ds f*o, da,age andAo* disclosu*e<
3
.? Dey Staff
,ployees a*e an i,po*tant and +aluale assets 5ho in an e,e*gency 5ill assist depa*t,ent A o* function in a uic4 *eco+e*y. )ain supplie*s of c*itical goods and se*+ices a*e also essential to continue to suppo*t *eco+e*y of usiness ope*ations to no*,al ope*ating ,ode.
$ou* (isaste* Reco+e*y Plan and B!P 5ill *ely p*incipally on 4ey ,e,e*s of
,anage,ent and staff 5ho 5ill p*o+ide the technical and ,anage,ent s4ills necessa*y to achie+e a s,ooth usiness *eco+e*y p*ocess. #hese 4ey ,e,e*s of ,anage,ent o* staff 5ill e selected and *esponsile fo* the i,ple,entation of the B!P in the e+ent of an e,e*gency. & 5ello*gani@ed and st*uctu*ed app*oach 5ill *educe the potential fo* the unexpected c*isis to eco,e un,anageale.
#his info*,ation is fo* depa*t,ental use and 5ill not e gene*ally dist*iuted.
.?. Dey Pe*sonnel
Hhen an e,e*gency occu*s it is necessa*y to ha+e access to all 4ey pe*sonnel fo* the functional a*eas and syste,s affected y the c*isis. #his info*,ation should e ,ade a+ailale to the B!P *eco+e*y tea,s and should e constantly updated.
#his section of the B!P 5ill contain a list of 4ey pe*sonnel1 thei* position1 functional a*ea1 and p*ocedu*es o* syste,s fo* 5hich they a*e *esponsile. #his section 5ill also include no*,al and e,e*gency contact info*,ation. #his info*,ation is fo* depa*t,ental use and 5ill not e gene*ally dist*iuted.
(ue to changes in pe*sonnel :i.e. att*ition1 ,o+es1 etc it is *eco,,ended that this e tested and updated at least ua*te*ly.;
,A$E DI+ISIO,"
DEPA#$E,# .*,'#IO, O PO'ESS .O 4I'4 ESPO,SIB-E
O..I'E E)#8
E$E&E,'3 'O,#A'# DE#AI-S /4ome0 Pager0 'ell P1one2
?
.6 ,e*gency !ontact Info*,ation
E)#E,A- E$E&E,'3 'O,#A'# ,*$BESPolice1 Ci*e and &,ulance /
U#)B ,e*gency &le*t %ine - :0/; &le*t :2??8; #oll C*ee 8882?/
U#)B !a,pus "pe*ato* :0/; 20
I,#E,A- E$E&E,'3 'O,#A'# ,*$BES
&dd nu,e*s as needed.
U#)B P"%I! 2
U#)B CIR %IN 22
"ffice of Uni+e*sity
&d+ance,ent :call the, fo* ,edia co,,unication; 2268 C&!I%I#IS )&IN#N&N! 2?86 P"IS"N !"N#R"% !N#R 800666 %%%8utmb8edu"alert %%%8utsystem8edu"utmb"alert81tm
