Lloyd Smith OKAlliance Presentation - Oklahoma State University ...
Lloyd Smith OKAlliance Presentation - Oklahoma State University ...
Lloyd Smith OKAlliance Presentation - Oklahoma State University ...
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
PREPARING YOUR BUSINESS, FAMILY &<br />
COMMUNITIES FOR DISASTERS<br />
<strong>Lloyd</strong> R. <strong>Smith</strong>, Jr., MBCP<br />
Business & Government Continuity Services<br />
www.BusinessContinuity.Info 405.627.8456<br />
1
Improving Total Continuity &<br />
Disaster Recovery Capabilities<br />
• Compelling Case for Business ,Govt. & Community Continuity<br />
– Critical Assets, Functions, Services & Supplies Vulnerable<br />
– Increasing Disasters<br />
• Improving Capabilities<br />
– Lessons Learned<br />
– Disaster Prevention<br />
– Issues, Challenges & Considerations<br />
• Need For Employee & Family Disaster Plans<br />
• Best Practice Business Continuity Planning Steps<br />
• Conclusions<br />
2
Vulnerabilities to<br />
Increasing Disasters With Greater Impacts<br />
Deficient Capabilities<br />
3
Possible or Likely Disasters<br />
• Tornadoes/Hurricanes<br />
• Winter Storms<br />
• Earthquakes<br />
• Devastating Wildfires<br />
• Power Failures<br />
• Sabotage & Terrorism<br />
• Workplace Violence<br />
• Facility Fires<br />
• Communication Outages<br />
• Utility, Infrastructure Failures<br />
• Floods & Drought<br />
• Outsourcer, Supplier or<br />
Service Provider Disasters<br />
• EMP<br />
4
MAJOR EARTHQUAKES A CONTINUING THREAT<br />
5
Likely New Madrid Quake<br />
Central US Impacts<br />
• Communications Outages<br />
• Disrupt Supply Chain & JIT<br />
• Rail Shipments<br />
• Interstate Highways<br />
• World’s Grain Supply<br />
• Heating Oil and Gas<br />
• Few or Single Bridges<br />
6
Major Power Outages<br />
• 50 Million People<br />
• 8 <strong>State</strong>s & 2 Canadian<br />
Providences<br />
• 22 Nuclear Power Plants<br />
• 1000 Power Plants<br />
• 10 Major Airports<br />
• 350,000 People in Subways<br />
Brazil, Haiti, Chile & others<br />
India<br />
• 620 Million People<br />
• 370 Million<br />
• 100 Million Indonesia<br />
• Several <strong>Oklahoma</strong> Outages<br />
Vulnerable to<br />
Sabotage & Terrorism<br />
7
STORM & POWER LESSONS LEARNED<br />
• Personnel Availability<br />
• Phones Down<br />
• Laptops Ineffective<br />
• Generator Failures<br />
• Limited Gas/Diesel<br />
• Functional Backup Required<br />
8
Power Solutions For Smaller Organizations<br />
Recommend 10% outlets<br />
on backup power<br />
Contingency Plans<br />
for Refueling<br />
9
COROPORATE HEADQUARTERS POWER FAILURE<br />
Transformer Explosion<br />
• Data Center Backup Power<br />
• Work Areas Without Power<br />
• 1200 Employees Sent Home<br />
Provide Functional & Facility<br />
Backup As Well As Technical<br />
10 % Outlets on Backup Power<br />
10
DEFINITIONS<br />
• Crisis Management<br />
• Emergency Response<br />
• Disaster Recovery<br />
• Business Recovery/Resumption<br />
• Business Continuity<br />
• Continuity of Operations (COOP)<br />
• Contingency Planning<br />
11
Critical Communications And<br />
Continuity of Operations<br />
12
Critical Communications and<br />
Continuity of Operations<br />
Cause<br />
Local Impact<br />
Corporate & Government Impact<br />
Cost & Loss - Billions<br />
13
Cable & Utility Cuts<br />
15
Multiple Ways to Communicate<br />
During Crisis/Disaster<br />
• Cell service OKC Bombing<br />
• Turkey Point Nuclear Power Plant<br />
• Cable cut, 40% LD capability into NYC<br />
• 5-6 ways to communicate<br />
17
DISASTER<br />
PREVENTION<br />
18
Disaster Prevention<br />
19
Burned popcorn cost Operations Center 830,000 in downtime<br />
20
WHY DON’T WE ADEQUATELY<br />
PLAN FOR DISASTERS<br />
• Lack of Senior Commitment & Direction<br />
– IT Recovery or Business Continuity<br />
• "Tyranny of the Urgent"<br />
• Lack of Resources (Perceived/Actual)<br />
– “Financially Challenged”<br />
• Someone Else is Responsible<br />
• Underestimate Risk & Impact of Disasters<br />
• Risks Vs Odds<br />
22
Someone Else is Responsible<br />
No Longer Sufficient<br />
• Each location, major operation should have<br />
viable plan<br />
• Help may not be available<br />
• Your organization may be last hope<br />
• Leaders & Executives appreciate initiative<br />
& competent local management<br />
• Worry and Responsibility<br />
23
HERE<br />
OR<br />
24
Disaster Recovery Of<br />
$138,000,000 Fire<br />
25
OKLAHOMA TORNADOES<br />
27
Terrorist Attack<br />
On America<br />
One Hour Brought War & Horrendous Impacts to U.S.<br />
28
WOULD WE<br />
• Adversely Impact Customers,<br />
Stakeholders, Citizens & Community<br />
• Lose Revenue & Incur Penalties<br />
• Violate Legal Requirements & Laws<br />
• Degrade Reputation & Good Name<br />
• Incur Director & Executive Liability<br />
• Suffer Insurance Implications<br />
• Lose Market Share & Jobs<br />
29
Vulnerabilities From<br />
Providers<br />
• Forms & Supplies<br />
• Parts & Equipment<br />
• Services<br />
• Outsourcing<br />
Photo by <strong>Lloyd</strong> <strong>Smith</strong><br />
Paper supplier wind & water damage put major metro paper supply at risk<br />
30
DO OUTSOURCERS, SERVICE PROVIDERS<br />
AND SUPPLIERS HAVE RECOVERY PLANS<br />
Heating & A/C for 20+ Downtown OKC Blds Supplied by Vendor<br />
Require Effective and Tested Recovery Plans in future Contracts<br />
31
TOTAL BUSINESS RECOVERY<br />
PLAN REQUIRED<br />
• Shareholder, Customer and<br />
Community Confidence<br />
• Increasing Contingencies & Disasters<br />
• Operational Survivability and Jobs<br />
• Quality Benefits<br />
32
QUALITY BENEFITS OF DISASTER<br />
PREVENTION & RECOVERY PROGRAMS<br />
• Discover & eliminate problems & errors<br />
• Improved quality of services & products<br />
• Reduce critical reliance on key individuals<br />
• Improved staff training, knowledge &<br />
confidence<br />
33
WHAT IS YOUR “SURVIVAL” TIME<br />
Without Continuity Basics <br />
1. Personnel<br />
• Availability & Access<br />
2. Vital Records/Data<br />
• Offsite & Retrievable<br />
• IT/Comm<br />
• Process/Functions/Systems<br />
3. Facilities/Infrastructure<br />
• Safe & Viable<br />
• Utilities<br />
34
Will Employees Come to Work<br />
Can Personnel Get to Work<br />
35
Reasons Employees Can’t Come to Work<br />
• Single parent: schools & day cares closed<br />
• Responsible for senior loved one<br />
• Trees, power lines & debris & can’t leave<br />
neighborhood<br />
• Power is off and can’t open garage door<br />
• Live in gated community & can’t get out<br />
• No gas and stations are closed<br />
• Injured or casualty<br />
• Access to disaster area<br />
36
St. Petersberg Times, AP<br />
Family Plan Basics could have saved<br />
lives in New Orleans<br />
38
Family & Employee Emergency Planning<br />
• Many business recovery plans inadequately<br />
address people issues<br />
• After disaster, experience shows only<br />
minimal staffing available<br />
• Organizations should provide home<br />
emergency training for employees.<br />
• Staff with personal affairs taken care of can<br />
help organization recover<br />
39
Family Emergency Planning Principles<br />
• Water, Food & Meds<br />
• Out of <strong>State</strong> Contact.<br />
• Safety & Accountability (I’m safe & OK)<br />
• Reunite with Loved Ones (3 Meeting Places)<br />
• ID & Pictures<br />
• Multiple ways to Communicate (cell )<br />
• Cashless to Cash<br />
• Always Have (what if ) Contingency Plans<br />
• Practice. Even go without power & gadgets<br />
• Ready to Evacuate (Go kits)<br />
40
DEVELOP PERSONAL &<br />
ORGANIZATION “GO” STRATEGIES<br />
Go Bags & Evac Packs<br />
• What to take<br />
• Immediately<br />
• 5 minutes<br />
• 1-4 hours<br />
• One day<br />
• Incorporate Pet Care<br />
41
ARE VITAL RECORDS/DATA<br />
SAFE & CURRENT<br />
Decrease RPO & RTO with Improved Options<br />
42
This employee was taking organizations data home<br />
There are better recovery options!<br />
43
GUARD, VERIFY DATA SECURITY<br />
SHIPMENT & FAIL SAFE TRANSFER<br />
Lost, Missing or Compromised Data<br />
44
Ensure Each Facility Emergency Response &<br />
Recovery Plans<br />
45
46<br />
Key personnel need to know how to shut off utiliities when facility manager unavailable
Backup for Electronic Security<br />
Guards Were Locked in Control Rooms<br />
47
Avoid Roof Leaks & Collapse<br />
Caused 5000 ATM Failures<br />
48
Require Facility/Infrastructure<br />
Emergency Response Plans<br />
• Each Building/Facility<br />
• Owner Responsibility<br />
• All Tenants Participate (NYC bldg)<br />
• Occupants & Visitors<br />
• Form Tenant Committee/User Group<br />
• Emergency Response & Security<br />
• Facility/Infrastructure Recovery Plan<br />
49
Facility Emergency Response<br />
Basics Require Improvements<br />
• Evacuation with Assembly Areas<br />
• Workplace Violence Procedures<br />
• Bomb Threats<br />
• Shelter in Place<br />
• Utility Shut Off<br />
• Protect or Isolate Ventilation<br />
• Protect Undamaged Property<br />
• Physically Secure Property/Door Guards<br />
50
BASIC REQUIREMENTS FOR QUICK<br />
CONTINUTY PLAN<br />
• Sponsor, Policy <strong>State</strong>ment, Steering Committee & BC PM<br />
• Condensed Risk Assessment<br />
• Current Data/Vital Records Secure & Offsite<br />
• Improved Emergency Response Plan<br />
• Select Planning, Response & Recovery Teams<br />
• Condensed BIA<br />
• Develop Recovery Strategies<br />
• Develop Basic Critical Function Recovery Procedures<br />
• Test/Exercise<br />
51
CONTINUITY PLANNING REQUIRES<br />
TOTAL ORGANIZATIONAL<br />
COMMITMENT<br />
• Time<br />
• Funds<br />
• Personnel<br />
• Resources<br />
52
What if it Happens To You or<br />
Your Organization <br />
Don’t Gamble With Business, Operations<br />
or Personal Survivability<br />
53
Emergency Response, Continuity &<br />
Recovery Plans<br />
Each division, business and unit, or<br />
organization must plan to be prepared to<br />
survive and recover.<br />
To insure that personnel, functions,<br />
systems, and facilities necessary to<br />
provide essential services will not become<br />
the victim, but will retain or regain<br />
capabilities necessary to provide essential<br />
services and support.<br />
54
Critical functions, processes,<br />
production & systems are the heart of<br />
the mission<br />
A Corporate or Agency Heart Attack<br />
55
Conclusions<br />
• Critical assets & functions<br />
• Significant, increasing disasters & terrorist attacks<br />
• Disaster prevention important & has a high payoff<br />
• Total Continuity Planning is required<br />
• It is a Key Responsibility of Executives, Management,<br />
Auditors & Staff<br />
• Think outside the box<br />
• Be prepared for mega disasters & terrorist attacks<br />
• Resilient Communities to recover & prevent riots<br />
56
THANK YOU!<br />
<strong>Lloyd</strong> R. <strong>Smith</strong>, Jr., MBCP<br />
Business & Government Continuity<br />
Services Inc.<br />
BGCS<br />
P.O.Box 1706<br />
<strong>Oklahoma</strong> City, OK 73101<br />
405.286.1649, 405.627.8456 cell<br />
<strong>Lloyd</strong>@BusinessContinuity.Info<br />
BusinessContinuity.Info<br />
Promoting and Enhancing Corporate and Government<br />
Disaster Prevention and Business Recovery<br />
57
Change language