UC Resiliency Planning

University of California RESILIENCY PLANNING

NITTY GRITTY

MY ROLE

RESILIENCY BIG PICTURE

PLANNING APPROACH

Challenges & Successes

Amina Assefa UC Berkeley

Systemwide Readiness LeadUniversity of California

OVERVIEW

Davis

Berkeley

MercedSanta CruzSan

Francisco

Santa BarbaraRiverside

Irvine

San Diego

LA

ANR

PROVIDE ONGOING

COORDINATIon to ensure

the successful

implementation of the

uC Ready platform

UC Ready

MISSION CONTINUITY

EMERGENCY ACTION PLANNING

IT DISASTER RECOVERY

UC Ready

MISSION CONTINUITY

EMERGENCY ACTION PLANNING

IT DISASTER RECOVERY

ENTERPRISE RISK

MANAGEMENT

TEACHING

RESEARCH

PUBLIC SERVICE

TechnicalThe

LEFT BRAIN

TRAINING ON THE TOOL ENSURE THAT ADMINS KNOW HOW TO USE THE SOFTWARE. PROMOTE USE OF THE SOFTWARE ACROSS ALL FUNCTIONAL AREAS

Technical ProgramVsTheThe

LEFT BRAIN RIGHT BRAIN

TRAINING ON THE TOOL ENSURE THAT ADMINS KNOW HOW TO USE THE SOFTWARE. PROMOTE USE OF THE SOFTWARE ACROSS ALL FUNCTIONAL AREAS

COACHING ON THE JOB HELPING NEW CONTINUITY PLANNERS UNDERSTAND THE SCOPE OF THEIR ROLE AND HOW TO BUILD A SUCCESSFUL CONTINUITY PROGRAM

FUNDAMENTAL

ABOUT WHAT

LACK OF

UNDERSTANDING

CONTINUITY IS

LACK OF

EXPERTISE AT

LOCAL LEVEL

LACK OF

EXPERTISE AT

LOCAL LEVEL

AN EXAMPLE….

UC Berkeley

Curtail Operations

What are the Essential

functions of the campus?

Curtail Operations

Campus essential Functions

(Most important things the campus does)

Continue Teaching

Continue Research

Continue Visible

Leadership

MaintainCritical

Infrastructure

Maintain the Reputation of

Campus

Maintain Relationships

w/Stakeholders

Maintain Safety & Security

MaintainEmergencyServices

Maintain FinancialStability

Maintain Basic Campus Services

Maintain Patient Care

CAMPUS ESSENTIAL FUNCTIONSStrategic Level

Continue Visible Leadership Maintain Critical Infrastructure Provide Emergency Services

CAMPUS ESSENTIAL FUNCTIONS

Continue Visible Leadership Maintain Critical Infrastructure Provide Emergency Services

Operational Level

DEPARTMENTAL ESSENTIAL FUNCTIONS

Maintain SSO

Provide Campus Voice Network

Manage Data Center

Provide medical advisement to campus

Communicable disease reporting requirements

Mass Notification SystemProvide critical legal advice

Strategic Level

EMERGENCY RESPONSE

CONTINUITY OPERATIONS

EMERGENCY RESPONSE

IT DISASTER RECOVERY

PLAN ALIGNMENT

THIS WAY

BUSINESS INTERRUPTION

TIMELINE

FIRE

UTILITY OUTAGE

IT OUTAGE

LOSS OF KEY STAFF

BUSINESS AS USUAL

BUSINESS INTERRUPTION

TIMELINE

FIRE

UTILITY OUTAGE

IT OUTAGE

LOSS OF KEY STAFF

EMERGENCY RESPONSE PLANSEMERGENCY NOTIFICATION/ALERT EVACUATION/SHELTERING-IN-PLACE RESPONSE PROCEDURES

BUSINESS AS USUAL

BUSINESS INTERRUPTION

TIMELINE

FIRE

UTILITY OUTAGE

IT OUTAGE

LOSS OF KEY STAFF

EMERGENCY RESPONSE PLANSEMERGENCY NOTIFICATION/ALERT EVACUATION/SHELTERING-IN-PLACE RESPONSE PROCEDURES

CONTINUITY PLANS

USE OF TEMPORARY OR MANUAL WORKAROUNDS TRANSFER OF CRITICAL BUSINESS ACTIVITIES TO ALTERNATE LOCATIONS ACTIVATION OF TELECOMMUTING PLANS CROSS-TRAINING OF EMPLOYEES PROTECTION OF & CONTINUED ACCESS TO CRITICAL RECORDS/DATABASES

BUSINESS AS USUAL

BUSINESS INTERRUPTION

TIMELINE

FIRE

UTILITY OUTAGE

IT OUTAGE

LOSS OF KEY STAFF

EMERGENCY RESPONSE PLANSEMERGENCY NOTIFICATION/ALERT EVACUATION/SHELTERING-IN-PLACE RESPONSE PROCEDURES

CONTINUITY PLANS

USE OF TEMPORARY OR MANUAL WORKAROUNDS TRANSFER OF CRITICAL BUSINESS ACTIVITIES TO ALTERNATE LOCATIONS ACTIVATION OF TELECOMMUTING PLANS CROSS-TRAINING OF EMPLOYEES PROTECTION OF & CONTINUED ACCESS TO CRITICAL RECORDS/DATABASES

RECOVERY OF ESSENTIAL IT APPLICATIONS AND SYSTEMS FAILOVER OF CRITICAL IT APPLICATION AND SYSTEMS TO OTHER SITES

IT DISASTER RECOVERY PLANS

BUSINESS AS USUAL

PLANNING PROCESS

THIS WAY

Identify most important things

the unit does

1

Continuity Planning Process : Preparing for the Unexpected

Determine the impacts to campus if business is

interrupted

2

Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.

These are your unit’s essential functions. OEM does initial research and

consolidation. Presents to head of unit for discussion

and approval.

Identify resources and continuity strategies necessary to maintain and restore most

critical business functions

3

This is known as a Business Impact Analysis and its the

foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed

hands-on assistance .

OBJECTIVE

This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two

meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.

HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.

PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.

Plan Complete!

Identify most important things

the unit does

1

Continuity Planning Process : Preparing for the Unexpected

Determine the impacts to campus if business is

interrupted

2

Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.

These are your unit’s essential functions. OEM does initial research and

consolidation. Presents to head of unit for discussion

and approval.

Identify resources and continuity strategies necessary to maintain and restore most

critical business functions

3

This is known as a Business Impact Analysis and its the

foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed

hands-on assistance .

OBJECTIVE

This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two

meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.

HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.

PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.

Plan Complete!

Identify most important things

the unit does

1

Continuity Planning Process : Preparing for the Unexpected

Determine the impacts to campus if business is

interrupted

2

Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.

These are your unit’s essential functions. OEM does initial research and

consolidation. Presents to head of unit for discussion

and approval.

Identify resources and continuity strategies necessary to maintain and restore most

critical business functions

3

This is known as a Business Impact Analysis and its the

foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed

hands-on assistance .

OBJECTIVE

This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two

meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.

HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.

PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.

Plan Complete!

Identify most important things

the unit does

1

Continuity Planning Process : Preparing for the Unexpected

Determine the impacts to campus if business is

interrupted

2

Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.

These are your unit’s essential functions. OEM does initial research and

consolidation. Presents to head of unit for discussion

and approval.

Identify resources and continuity strategies necessary to maintain and restore most

critical business functions

3

This is known as a Business Impact Analysis and its the

foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed

hands-on assistance .

OBJECTIVE

This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two

meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.

HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.

PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.

Plan Complete!

IDENTIFY PRIORITIES

Identify most important things

the unit does

1

Continuity Planning Process : Preparing for the Unexpected

Determine the impacts to campus if business is

interrupted

2

Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.

These are your unit’s essential functions. OEM does initial research and

consolidation. Presents to head of unit for discussion

and approval.

Identify resources and continuity strategies necessary to maintain and restore most

critical business functions

3

This is known as a Business Impact Analysis and its the

foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed

hands-on assistance .

OBJECTIVE

This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two

meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.

HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.

PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.

Plan Complete!

Identify most important things

the unit does

1

Continuity Planning Process : Preparing for the Unexpected

Determine the impacts to campus if business is

interrupted

2

Develop an actionable plan for continuing to perform or restore your unit and campus’s critical business functions during a disruption.

These are your unit’s essential functions. OEM does initial research and

consolidation. Presents to head of unit for discussion

and approval.

Identify resources and continuity strategies necessary to maintain and restore most

critical business functions

3

This is known as a Business Impact Analysis and its the

foundational step in continuity planning. It is done independently via survey for each essential function. OEM provides guidance and as needed

hands-on assistance .

OBJECTIVE

This is done through guided in-person discussions with the Continuity Planner. It typically takes no more than two

meetings to gather the necessary information. The Continuity Planner consolidates the information into your Continuity Plan and distributes back for final confirmation.

HIGH IMPACT UNIT A unit that supports a critical activity that directly contributes to the campus’s ability to perform its mission. Per campus policy, High Impact Campus Units must maintain up-to-date Continuity Plans.

PLANNING PROCESS Developing a Continuity Plan is a three step process guided by the campus Continuity Planner. Portions of the planning are done independently while others are completed through facilitated discussions. The output is a plan that identifies how to continue or restore your unit’s most critical business functions in the event of a disruption.

Plan Complete!

IDENTIFY PRIORITIES

IDENTIFY STRATEGIES

1.

LOSS OF BUILDING

2.

LOSS OF STAFF

3.

LOSS OF IT NETWORK

RESILIENCY

MovingTHE NEEDLE

RESILIENCY

MovingTHE NEEDLEChallenges

Too much focus on the “plan” as a document rather than as a process

Training and exercises are more response driven without a focus on continuity

Continuity exercises harder to implement.

RESILIENCY

MovingTHE NEEDLEChallenges

Too much focus on the “plan” as a document rather than as a process

Training and exercises are more response driven without a focus on continuity

Continuity exercises harder to implement.

Successes

UC Ready Software

UC leading the way. New spotlight on continuity.

New &

Improved!

Robust reporting and additional functionality

HELP!

Build A

CULTURE OF

RESILIENCE

Final takeaways

CAN’T DO IT ALONE

Integration is Key

SUPPORT LOCAL

EFFORTS

THANK YOU!

Amina [email protected]