Date post: | 18-Dec-2015 |
Category: |
Documents |
Upload: | baldric-ross |
View: | 213 times |
Download: | 0 times |
February 2007
Schenker AG
Alexander Tsolkas
CSO
Business Continuity Management
BCM tools in operation: Tool based Business Continuity and Disaster Recovery Planning
London, 1.Feb.2007
2Schenker AG; Alexander Tsolkas; Feb.2007, London
Agenda
• Agenda
• Intro
• Overview of the market leaders
• Tool ranking
• Tool list prices
• Example of a tool based IT DRP
• Advantages and disadvantages of a tool based IT DRP
• Discussion
3Schenker AG; Alexander Tsolkas; Feb.2007, London
Intro
• 65,5% of the organisations did not update their business continuity plan for the last 10 years
• 26,32 % did update their BCP 1 to 3 times in the last 10 years
• Less than half fullfil an appropriate quantity of their BCP targets • 54% of the CIO’s plan to change their BCP strategy
• 65% expect a raise in costs for IT BCP
Quelle: Gartner Research a KPMG study 2002
4Schenker AG; Alexander Tsolkas; Feb.2007, London
Overview of the market leaders
• Vendors
Strohl SystemsBinomial InternationalCoop-SystemseBRP Solutions Inc.BRProactive Inc.Business Protection SystemsEverGreenGrapevine SoftwareMIR3SunguardTAMP SystemsCAPT
5Schenker AG; Alexander Tsolkas; Feb.2007, London
Strohl Systems
• LDRPS 10
License does not expireWeb hosting optionsRuns on SQL ServerSmall solution for 5 to 30 usersProfessional solution for 5 to 50 usersBuilt-in methodology and guidance based on a long experienceUser prompts to enter data Modules: BCP, Corporate Crisis Management, Business Process Recovery
Application Recovery, Site Event ManagementDrag and drop functionalityTransparent tree structure User and group administration >200 predefined standard reports which describe plansCustomizable plan navigation which guides the user through the plan specificallySecure data management via encryptionBackup via standby serversTool uses a basic Windows formatTree navigation function Strong consideration of business processes
6Schenker AG; Alexander Tsolkas; Feb.2007, London
Strohl Systems
• Incident Manager 3.0
Powered by ESI’s WebEOC – web basedStrong influence during development through experience with LDRPSScope:
-Life Safety-Impact Assessment-Recovery and Restoration
Pinboards offer the possiblity to digitise and electronically organise information and problems collected in an analog way
Transparent tree structure Incident management on the basis of :
- Coordination – via control over the situation with tracking possibility- Communication – Chat client, eMail and Incident Escalation Management- Methodology – Best Practices via ICS (Incident Command System)- Scalable – runs on a Laptop as well as in an IPC
Status reports of the crisis situationEvaluation of the situation and priorisation of procedures Enhanced function for monitoring groups, processes and situations IM 3.0 offers status displays, markers and pinboardsMapTac integrated
7Schenker AG; Alexander Tsolkas; Feb.2007, London
Binomial International
• Phoenix
For the development of BCPs on the basis of WindowsFree selection which database to be usedQuick and easy creation of the single components of the BCPEasy input of information and good information managementEasy updates of the planMulti user systemCooperation of different business departments and units possiblePhoenix modules
-Phoenix Corporte Edition-Phoenix for Banks-Phoenix for Credit Unions-Phoenix for Biotechnology-Phoenix for Community Hospitals-Phoenix for Hospitals-Phoenix for ISPs-Phoenix Small Business Edition
8Schenker AG; Alexander Tsolkas; Feb.2007, London
Coop Systems
• myCoop 5.3
Supports 7 phases in a web based systemEasy to useLow costsContent can be importedEasy to learnObject class technologyCan be customized during the complete life cycle of the system
-Languages-Regions-Currencies-Integration into other systems
Modules-Start, Analysis, Creation, Training, Exercise, Maintenance, Execution, Security-Regional parameter settings, Integration, Hosting
9Schenker AG; Alexander Tsolkas; Feb.2007, London
eBRP Solutions
• eBRP Toolkit
Offered modules are: -Risk assessment
o Physical, personal related, business processes, technological systems-Business impact analysis
o Critical resources, recovery time, customers vendors, finance, dependencies-Technology modelling
o Hardware inventory, software inventory, network, applications, users-Plan development & maintenance
o Unlimited amount of plans, built-in web links, built in data links, check list development, plan linkage, print feature of plans in parts or completely, eMail notification
-Featureso Web based, unlimited amount of users, role based, access controls, traceability,
import of data sheets, Web services, >100 built-in standard reports
10Schenker AG; Alexander Tsolkas; Feb.2007, London
BRProactive Inc.
• BRProactive
Tour guide for usersUses Microsoft Word for planning and editingVery good help functionsNo database know how necessary Integrated full recovery: Main business area, Voice, IP, LAN, Mid-range systems 8 predefined recovery team plans, which can be added initially with informationResource planning and notification sequence integrated Industry standards are provided consequently and have been considered during developmentAction based approachPassword security Import and export function for filesPredfined forms which can be used
11Schenker AG; Alexander Tsolkas; Feb.2007, London
Business Protection Systems
• Business Protector Gateway
Web based with browser interfaceSpecifically for risk management and BCPScalableOutsourced service or own operationFast reaching of the targetsHigh quantity of plans and reports in documents (on-line formats and *.pdf)Decentral planning with central controlAutomatic notification optionsOn-line reports, notification trees, emergency proceduresRelational databaseSimple document managementConnection to external links, documents and databases
12Schenker AG; Alexander Tsolkas; Feb.2007, London
Evergreen Data Continuity Inc.
• Mitigator
Overall business continuity managementComplete company inventoryBusiness impact analysis IT Risk AssessmentApplication recovery points based on lost dataRecovery analysis based on business requirements versus IT capabilities Impact analysis based on a malfunction, application failure or general failureRecovery strategies including cost calculation based in inventory dataOverall business and operative continuity and disaster recovery plans for all company
locationsCreation of recovery teams and task assignment to team membersTest and maintenance of the BCP or DRPAssists for SOX 404 complianceFinancial and operative risks can be drawn from operative failuresTons of reportsAfter installation Mitigator provides loaded potential risks, recovery team tasks and 1000 best
practice proposals
13Schenker AG; Alexander Tsolkas; Feb.2007, London
Grapevine
• Full Command
Transform existing plans in living documentsThe process of finding, insertion, registration, evaluation, approval und supporting of
personnel, of resources and documentation is simplified.Distribution and standardisation of the content of plans over many organisations Plans can be edited directly by the means of a browserMaitenance of accurate plan dataTesting of plansAnalysis of vulnerabilities and risksReportingSecure authentication and accesses
14Schenker AG; Alexander Tsolkas; Feb.2007, London
MIR3
• Enterprise
Company wide communication for the major Business, Disaster Recovery, Business ContinuityRole based access control Intelligent messaging systemWorks with Oracle DBs, Peoplesoft applications, MS-Active Directory, SunGard,
Paragon/ePlanner/Revolution, Strohl’s LDRPS and LDAP ImplementationsSupport for MS-Outlook for Telefone, GSM, Email, Pagers, SMS, Fax and Satellite telefone
systemsMaintenance of Remote- and international business locations, IPCs and WANs
15Schenker AG; Alexander Tsolkas; Feb.2007, London
Sungard
• Business Continuity Solutions
Business and Technology Profile SolutionBusiness Impact Analysis SolutionEnd-User Recovery Solution Information Availability Assessment SolutionManaged Tape Backup SolutionSystem Recovery SolutionVaulting and Business Continuity Solution
Paragon-BCP development-“What if” scenario development (simulation) -Messaging, Eskalation-Maintainance of plans-Database oriented
16Schenker AG; Alexander Tsolkas; Feb.2007, London
TAMP Systems
• Disaster Recovery System DRS
ScalableCustomizable reportingDecentral planning possibilitiesRole based access controlAutomatic plan updates (via external interfaces)Pratical approach for application functionality to maintain plans without complicationsSimple user guidance
17Schenker AG; Alexander Tsolkas; Feb.2007, London
Heine & Partner – Info AG
• Continuity Action Planning Tool
MS-Access basedRegistration and maintenance of resources
-Organisational units, persons emergency teams, business functions, technology, software, data inventory, connections, other aids, dangerous goods
Development of action plans- Emergency scenarios and recovery strategies, activities and action plans (graphical user interface)
Output document manager-Print lists ( report generator for multiple formats)-Free textpages-Emegency handbooks and table of content
Administration-Logging of user activities-User access control and authentication
Special functions-Layout of the print output-Customization of data and field names-Data import and export
18Schenker AG; Alexander Tsolkas; Feb.2007, London
Tool ranking
• Vendors (personal ranking list)
1 eBRP Solutions Inc. – eBRP Toolkit2 Strohl Systems, LDRPS 3 Sunguard – Business Continuity Solutions4 MIR3 – Enterprise5 EverGreen – Mitigator6 Heine & Partner – Continuity Action Planning Tool 7 Grapevine Software – Full Command8 Coop-Systems – myCoop9 Strohl Systems , Incident Manager10 BRProactive Inc. – BRProcative 11 Business Protection Systems - Business Protector Gateway12 Binomial International – Phoenix13 TAMP Systems – Disaster Recovery System
19Schenker AG; Alexander Tsolkas; Feb.2007, London
Tool list prices
• Hersteller
Strohl Systems, LDRPS 115.000 €, Incident Manager 3.0 38.000 €.Binomial International – Phoenix ca. 80.000 €Coop-Systems – myCoop ca. 7000 EuroeBRP Solutions Inc. – eBRP Toolkit ca. 350.000 € BRProactive Inc. – BRProcative 26.000 €Business Protection Systems - Business Protector Gateway 150.000 € EverGreen – Mitigator 120.000 € Grapevine Software – Full Command 27.000 €MIR3 – Enterprise from ca. 140.000 €Sunguard – Business Continuity Solutions – varies from module to module TAMP Systems – Disaster Recovery System - no price providedHeine & Partner – Continuity Action Planning Tool 10.000 € SU, 80k Enterprise
20Schenker AG; Alexander Tsolkas; Feb.2007, London
Example of a tool based IT DRP
• Heine & Partner CAPT – Continuity Action Planning Tool
21Schenker AG; Alexander Tsolkas; Feb.2007, London
Advantages and disadvantages of a tool based IT DRP
• Pros
Standardized and customized format of all plansSimple maintenance and update of plans (via integrity of the software)Cental policy of the tool and decentral maintenanceWeb based access from all over Access to plans is simple and availability is higherCustomizable layout of lists/reports and plansPrintout of plans in parts which are requiredPartly plans for dedicated groups can be printed out
• Cons
Expensive first time investmentCosts for trainingRequirement of a handbook Interfaces most often do not provide what is wished in terms of applications and dataGeneral limitations due to the fact that is is a toolAdditional costs for administration, hosting and maintenance, backup, etc.
22Schenker AG; Alexander Tsolkas; Feb.2007, London
Discussion
Questions
Alexander TsolkasCSO
Schenker [email protected]
www.schenker.com
Opinions