Pam Downs
Ajay Gupta
The Pennsylvania
State University
Prince George’s
Community College
Educause Mid-Atlantic Conference
Jan. 15-17, 2008
"Copyright Penn State University-2008. This work is the intellectual property of the author. Permission is granted for this material
to be shared for non-commercial, educational purposes, provided that this copyright statement appears on the reproduced
materials and notice is given that the copying is by permission of the author. To disseminate otherwise or to republish requires
written permission from the author."
5-Phased Business Continuity
Planning Process
Pam Downs CBCP
Business Continuity Consultant
Administrative Information Services
[email protected]





Choosing the planning methodology
Business Continuity Planning Process
Business Continuity Services and Tools
Awareness and Training
Challenges and Opportunities
• 20 Penn State Campuses across Commonwealth
• 7 Special-mission Campuses (including a Medical
Center and Law School)
• 13 Colleges – Undergraduate & Graduate Programs
• > 90,000 Students


Determine scope
• Administrative Business Units
• Not research or academic Units
Identify Resources
• People
• Expertise
• Budget

Implement a Planning Process
• Simple
• Measurable
• Repeatable
• Reliable
Emergency
Response
Plan
Crisis
Management
Plan
Business
Continuity
Plan
Developing advance arrangements and procedures so an organization
is prepared to continue its critical services in the event of a crisis
Business Continuity
Planning
Service Recovery
Recovery of key university services
Disaster Recovery
Recovery of key
infrastructure/ technological
components
PHASE 1: PROJECT PLANNING
PHASE 2: BIA/RISK ASSESSMENT
PHASE 3: RECOVERY STRATEGIES
PHASE 4: PLAN DEVELOPMENT
PHASE 5: EXERCISE and MAINTAIN PLANS






Business Continuity Consultant
Offsite Data Storage
Local Server Recovery Center
Living Disaster Recovery Planning System
(LDRPS)
Business Impact Analysis (BIA) Software Tool
BCP Training & Support
PHASE 1: PROJECT PLANNING
PHASE 2: BIA/RISK ASSESSMENT
PHASE 3: RECOVERY STRATEGIES
PHASE 4: PLAN DEVELOPMENT
PHASE 5: EXERCISE and MAINTAIN PLANS
• BCP for Management Teams:
Parts 1 & 2
• Business Impact Analysis
• Risk Assessment
• Developing Recovery Strategies
• BCP for Plan Development Teams:
Parts 1 & 2
• Information Gathering for Building
Recovery Plans
• LDRPS Software
• Conducting Recovery Exercises





Quarterly meetings
• Emergency Management Office
• Environmental, Health and Safety
• Risk Management Office
• Auditors
Awareness Program
• Chancellors & Deans
• DR Day
Business Continuity Brochures
BCP Website http://ais.its.psu.edu
BCP BLOG







Information Technology Services
Hershey Medical Center
Office of Human Resources
Penn State Harrisburg Campus
Penn State Mont Alto Campus
Office of Physical Plant
Office of Student Aid






Lack of Executive Support
Lack of buy-in
No Policy
Decentralized vs. Centralized Services
Developing Standard Terminology
Unclear Best Practices



Break down silos
Gain big picture of Penn State
• Understand services and IT resources
• Make informed decisions for budget and
resources
Continue to provide our mission during any
event
Pam Downs
[email protected]
814-865-3315