Rothstein Associates Inc. Business Survival ™ Weblog

There is an old saying among some DRP/BCP consultants: “Having a DRP that is out of date is worse than having no plan at all.  That is because people think you have a plan but you really don’t.”

Over the years of auditing hundreds of plans, what frequently happens is as follows:
Question: Can I speak with this person.  Answer: This person is no longer here.
Question: Do you have good procedures for the iSeries?  Answer: We don’t have that platform anymore.
Question: Does your off-site storage vendor pick up every day?  Answer: Oh, we changed vendors. They come once a week now to save money.

Read the rest of this entry »

The data center obviously plays a critical role in disaster recovery and business continuity programs.  Without a functional data center most companies simply fail.  Testing at a hot site, developing restoration procedures, creating failover/failback scripts, etc. are the center of recovery processing.  But, let’s not forget, and get too far away from, some of the basic management controls where current data centers are involved.

Read the rest of this entry »

A paper which was published in the September issue of the Business Continuity Journal highlighted a significant gap in current pandemic planning guidance. Preparedness For A Flu Pandemic In Europe: Gaps In Advice by Alexandra Conseil and Dr. Richard Coker, of the Department of Public Health Policy, London School of Hygiene and Tropical Medicine, presented a gap analysis of European pandemic planning guidance. It concluded, among other things, that post-pandemic recovery planning is an area which almost all pandemic planning guidance has failed to address.

Read the rest of this entry »

Data backups have been a central function with data centers for a very long time. They provide the life line in the event the systems and data are destroyed at the primary data center. And, although tape as a backup media will eventually be replaced with remote vaulting and redundant SAN units, it is still the main media in use today. Therefore, we should be very careful on how data is backed up and how the tapes are handled and stored. It is not a good scenario to find out at recovery time that what you thought was there really isn’t.

Read the rest of this entry »

The US Department of Homeland Security has formally recognized the creation of the new Critical Manufacturing Sector Coordinating Council (CMSCC), which includes companies such as automakers, heavy equipment manufacturers and steel producers.

“Because of the unique operating and supply-chain challenges faced by manufacturers, we determined that a new sector council would best address the needs of companies that did not fit precisely within the original 17-sector structure,” said Homeland Security Secretary Michael Chertoff. “Critical manufacturers are important members of our national team that will help us develop plans and exchange information in order to achieve our common security goals in this vital sector.”

In 2003, Homeland Security Presidential Directive-7 (HSPD-7) established a national policy for identifying and protecting critical infrastructure and key resources. At that time, the directive identified 17 economic, industrial, and essential service sectors, but authorized the Secretary of Homeland Security to evaluate the need for new sectors as necessary.

Following HSPD-7, the DHS Secretary, with the support of the heads of key departments and agencies, issued the National Infrastructure Protection Plan (NIPP) to provide a framework for accomplishing the mission of protecting critical infrastructure and key resources. The NIPP identified the individual sector coordinating councils (SCCs) as the principal forums for owners and operators of each of the 17 critical infrastructure and key resource sectors to work in partnership with government on a wide range of prevention, protection, and risk reduction activities and issues. Following the publication of the NIPP, DHS recognized 17 self-organized SCCs, one representing each of the 17 sectors.  Specific membership varies by sector, reflecting the unique composition of each.  The Critical Manufacturing Sector was designated as the 18th sector in April 2008 and is the first sector to be recognized through the exercise of the Secretary’s authority.

The current CMSCC membership includes:
* ArcelorMittal USA
* Bridgestone Americas Holding, Inc.
* Caterpillar Inc.
* Chrysler LLC
* Deere & Company
* Ford Motor Company
* General Motors
* Goodyear Tire & Rubber Company
* Kohler Company
* Navistar International Corporation
* United States Steel Corporation.

================================================================

Business Continuity can be a challenge in any environment - and the complexities of manufacturing and distribution operations can be even more challenging.

The new BUSINESS CONTINUITY PROGRAM FOR MANUFACTURING AND DISTRIBUTION ON CD-ROM has some similarities to business continuity programs for other business environments - but many differences specific to manufacturing and distribution.

• Have Critical Revenue-Generating Operations been Thoroughly Analyzed?
• Is Your Plan Designed Specifically for a Manufacturing or Distribution Business?
• Is Your Plan Limited to Information Technology Planning?
• Do All Departments have Adequate Plans in Place?

If the answer to any of these questions is “no” or “unsure,” then this planning template can help!

The new BUSINESS CONTINUITY PROGRAM FOR MANUFACTURING AND DISTRIBUTION ON CD-ROM follows professional standards as recommended by the Disaster Recovery Institute International, Business Continuity Institute Good Practices Guidelines, National Fire Protection Association 1600 Standard on Disaster/Emergency Management and Business Continuity Programs as well as industry best practices.

Here is a process for business continuity tailored to the manufacturing or distribution environments, as implemented in the BUSINESS CONTINUITY PROGRAM FOR MANUFACTURING AND DISTRIBUTION ON CD-ROM:

In NOAA’s (National Oceanic and Atmospheric Administration) August, 2008 update regarding the Atlantic hurricane season outlook, its Climate Prediction Center has increased the likelihood of an above-normal hurricane season and has raised the total number of named storms and hurricanes that may form.  Forecasters attribute this adjustment to atmospheric and oceanic conditions across the Atlantic Basin that favor storm development - combined with the strong early season activity.

NOAA now projects an 85 percent probability of an above-normal season – up from 65 percent in May. The updated outlook includes a 67 percent chance of 14 to 18 named storms, of which seven to 10 are expected to become hurricanes, including three to six major hurricanes of Category 3 strength or higher on the Saffir-Simpson Scale. These ranges encompass the entire season, which ends November 30, and include the five storms that have formed thus far.

In May, the outlook called for 12 to 16 named storms, including six to nine hurricanes and two to five major hurricanes. An average Atlantic hurricane season has 11 named storms, including six hurricanes and two major hurricanes.

“Leading indicators for an above-normal season during 2008 include the continuing multi-decadal signal – atmospheric and oceanic conditions that have spawned increased hurricane activity since 1995 – and the lingering effects of La Niña,” said Gerry Bell, Ph.D., lead seasonal hurricane forecaster at NOAA’s Climate Prediction Center. “Some of these conditions include reduced wind shear, weaker trade winds, an active West African monsoon system, the winds coming off of Africa and warmer-than-average water in the Atlantic Ocean.”

Another indicator favoring an above-normal hurricane season is a very active July, the third most active since 1886.  Even so, there is still a 10 percent chance of a near normal season and a five percent chance of a below normal season.

Being prepared for hurricanes sure beats floundering around (pun intended) when one hits.  Complete Hurricane & Flood Plan for Business: A Disaster Prevention and Recovery Template is an easy-to-use yet powerful template to build your own hurricane plan.

The Institute of Internal Auditors (Altamonte Springs, Florida) recently unveiled a new Global Technology Audit Guide (GTAG) that addresses business continuity management issues. A review of the document shows that the traditional BCM issues have been addressed, along with emergency response and crisis management.

However, the report’s section on business continuity standards omitted several key standards, including BS 25999 Parts 1 and 2, FFIEC Business Continuity Handbook, DRJ/DRII Generally Accepted Principles, ISO 24762 and ISO PAS 22399. By contrast, it mentions PAS 56, which was superseded by BS 25999 in 2006. In addition, a flow chart early in the report omits the creation of business continuity plans, going from strategy development right to maintenance, exercising, and awareness/training.

IIA BCM Audit Guide

AUDITING BUSINESS CONTINUITY: GLOBAL BEST PRACTICES By Rolf von Roessing is a valuable tool forauditing or assessing your business continuity management program.

Business Continuity can be a challenge in any environment - and the complexities of manufacturing and distribution operations can be even more challenging.

The new BUSINESS CONTINUITY PROGRAM FOR MANUFACTURING AND DISTRIBUTION ON CD-ROM has some similarities to business continuity programs for other business environments - but many differences specific to manufacturing and distribution.

• Have Critical Revenue-Generating Operations been Thoroughly Analyzed?
• Is Your Plan Designed Specifically for a Manufacturing or Distribution Business?
• Is Your Plan Limited to Information Technology Planning?
• Do All Departments have Adequate Plans in Place?

The June, 2008 issue of Contingency Planning & Management (CPM) contains a survey with an alarming statistic. According to the survey, which included 5,000 small businesses, 40% - yes, forty percent - of small businesses have NO disaster preparedness plan. It’s an excellent article with relevant comments from Jon Toigo who has joined forces with the Office Depot company which commissioned the survey. Clearly, if the sample size of 5,000 identified 2,000 business without a plan the implication would be huge given there are literally hundreds of thousands of small businesses in the country.

Read the rest of this entry »

Principles and Practice of Business Continuity: Tools and Techniques, by Jim Burtles, KLJ, MMLJ, FBCI

Principles and Practice of Business Continuity

This new book explores the subject of Business Continuity Management: from basic principles to best practices. On completing this book, the reader should be in a position to engage in all of the activities associated with the development, delivery, exercise and maintenance of an effective business continuity program. The included CD-ROM provides extensive tools, templates and other valuable resources.

Endorsed by Survive, The Business Continuity Group and The Business Continuity Institute.

INCLUDES CD-ROM WITH TOOLS, TEMPLATES AND BONUS RESOURCES!

INSTRUCTOR’S MANUAL AND COURSE MATERIALS ARE AVAILABLE FOR THIS BOOK.

“An invaluable, comprehensive and practical guide to assist companies of all sizes with their Business Continuity Planning - written by a BC practitioner with years of experience to help others learn and avoid pitfalls.” - Survive - The Business Continuity Group

More information

Order #DR800. ISBN 1-931332-39-8.
2007, Book plus CD-ROM.
Rothstein Associates Inc., Publisher.

THE COMPREHENSIVE BUSINESS CONTINUITY MANAGEMENT PROGRAM: BUSINESS IMPACT ANALYSIS, BUSINESS CONTINUITY PLAN AND CRISIS / RISK MANAGEMENT PLAN DEVELOPMENT TEMPLATES ON CD-ROM, 2008 - 2nd Edition by Douglas M. Henderson

New for 2008: Pandemic Planning Template!

• Have Critical Revenue-Generating Operations been Thoroughly Analyzed?
• Is Your Plan Limited to Information Technology Planning?
• Do All Departments have Adequate Plans in Place?

If the answer to any of these questions is “no” or “unsure”, then this planning template can help!

The Comprehensive Business Continuity Plan is a complete template program for business on CD-ROM that includes advice for all development steps from the Information Collection Process, through the Business Analysis, to the actual Business Continuity and Crisis Response documentation and finally with assistance for the ongoing exercising and maintenance process.

2008, CD-ROM, 850+ pages. ISBN #1-931332-49-5
Rothstein Associates Inc., Publisher.
Order #DR789.