Session - DOC

Document Sample
Session - DOC Powered By Docstoc
					                    Michigan Administrative Information Services (MAIS)
                    ENTERPRISE APPLICATION SERVICES (EAS)
                    DISASTER RECOVERY / BUSINESS CONTINUITY



Exercise Definition


                                         <Exercise Name> Exercise

                                                 Session <X>
                                                <Exercise Title>
                                                <Exercise Date>


                                                Primary Objectives
This lists general objectives sketched out by the DR/BC office, which are used by CPU representatives to outline
business specific objectives.


                                                Secondary Objectives
This lists general ‘stretch’ objectives sketched out by the DR/BC office, which are used by CPU representatives to
outline business specific ‘stretch’ objectives.


                                                     Conditions
        <This lists general scenario circumstances defined by the DR/BC office to be used by CPU
         representatives to write business specific exercise scenarios. See examples below.>
        All key personnel are available.
        Only M-pathways is impacted.
        Outage duration expected to last 2 – 5 days.


                                                     Limits
<This section explains constraints determined by the DR/BC office, which are meant to strain BCP assumptions.>




Exercise – Session <X> - <Month, Year>                 1 of 8                                  updated/saved 4/25/10
                    Michigan Administrative Information Services (MAIS)
                    ENTERPRISE APPLICATION SERVICES (EAS)
                    DISASTER RECOVERY / BUSINESS CONTINUITY



Exercise Outline


                                         <Exercise Name> Exercise

                                                 Session <X>
                                                <Exercise Title>
                                                <Exercise Date>


                                              Primary Objectives
    1. This lists the specific business process objectives, which were developed using the general objectives in
       the Exercise Definition.


                                             Secondary Objectives
    1. This lists the specific business process ‘stretch’ objectives, which were developed using the general
       stretch objectives in the Exercise Definition.


                                                   Conditions
    1. This lists specific business process scenario circumstances developed by CPU representatives, which
       were developed using the general conditions in the Exercise Definition.
    2.


                                                   Limits
<Repeated from the Exercise Definition. Sometimes is slightly altered for business specific exercises.>


                                                      Roles
    1. Facilitator –
    2. Players –
    3. Evaluator –


                                               Resource Listing
     <Business continuity plan>
    




Exercise – Session <X> - <Month, Year>                 2 of 8                                  updated/saved 4/25/10
                    Michigan Administrative Information Services (MAIS)
                    ENTERPRISE APPLICATION SERVICES (EAS)
                    DISASTER RECOVERY / BUSINESS CONTINUITY



<Process Name> Checklist


                                        <Exercise Name> Exercise
 The Checklist is provided by the DR/BC office for guidance during exercise. Can be used as-is or slightly altered
             to meet specific business process goals. Delete the italic writings before distribution.>

                                                    Session <X>
                                                   <Exercise Title>
                                                   <Exercise Date>
     Personnel Contact Information — Review names and numbers. Send a copy of it to each team member
      to review and update, if needed.
     Critical Processes Listed — Team leaders must review critical functions to determine that they are
      relevant and complete.
     Action Plan Steps – Ensure steps are written clearly, in logical order, comprehensive and concrete.
              o   Recovery Steps — Ensure action plan includes steps for recovery of critical functions after the
                  outage; validate that strategies are meeting current business objectives and reflect the best
                  possible solutions.
              o   Recover Lost Data – Ensure action plan includes processes to recover lost data.
              o   Dependencies – Ensure dependencies on other processes or business areas are identified.
              o   Staffing – Plan should state whether or not additional staffing is needed during or after the
                  outage.
              o   Communication – Determine the dependence on phone and email; consider alternative
                  communication methods.
              o   Escalation – Include escalation procedures under particular circumstances.
     Advance Planning Readiness Checklist — Critical resources required to support manual processes and
      recovery; must be reviewed to determine list accuracy and completeness.
     Off-Site Storage Inventory — Critical records or resources stored off site; must be reviewed to determine
      accuracy and completeness.
     Vendor and Customer List — Contact information for critical vendors and customers; must be reviewed to
      determine list accuracy and completeness.
     Initial Responders, Essential & Alternate Essential Personnel — Awareness and preparedness of
      personnel acting as first or second… alternates must be exercised and validated at least annually.




Exercise – Session <X> - <Month, Year>                   3 of 8                                    updated/saved 4/25/10
                    Michigan Administrative Information Services (MAIS)
                    ENTERPRISE APPLICATION SERVICES (EAS)
                    DISASTER RECOVERY / BUSINESS CONTINUITY



<Process Name> checklist


                                           <Exercise Name> Exercise
 <This page is intentionally duplicated to show that separate checklists may be needed for different processes or
sub-processes. The Checklist is provided by the DR/BC office for guidance during exercise. Can be used as-is or
      slightly altered to meet specific business process goals. Delete the italic writings before distribution.>

                                                    Session <X>
                                                   <Exercise Title>
                                                   <Exercise Date>
     Personnel Contact Information — Review names and numbers. Send a copy of it to each team member
      to review and update, if needed.
     Critical Processes Listed — Team leaders must review critical functions to determine that they are
      relevant and complete.
     Action Plan Steps – Ensure steps are written clearly, in logical order, comprehensive and concrete.
              o   Recovery Steps — Ensure action plan includes steps for recovery of critical functions after the
                  outage; validate that strategies are meeting current business objectives and reflect the best
                  possible solutions.
              o   Recover Lost Data – Ensure action plan includes processes to recover lost data.
              o   Dependencies – Ensure dependencies on other processes or business areas are identified.
              o   Staffing – Plan should state whether or not additional staffing is needed during or after the
                  outage.
              o   Communication – Determine the dependence on phone and email; consider alternative
                  communication methods.
              o   Escalation – Include escalation procedures under particular circumstances.
     Advance Planning Readiness Checklist — Critical resources required to support manual processes and
      recovery; must be reviewed to determine list accuracy and completeness.
     Off-Site Storage Inventory — Critical records or resources stored off site; must be reviewed to determine
      accuracy and completeness.
     Vendor and Customer List — Contact information for critical vendors and customers; must be reviewed to
      determine list accuracy and completeness.
     Initial Responders, Essential & Alternate Essential Personnel — Awareness and preparedness of
      personnel acting as first or second… alternates must be exercised and validated at least annually.




Exercise – Session <X> - <Month, Year>                   4 of 8                                    updated/saved 4/25/10
                    Michigan Administrative Information Services (MAIS)
                    ENTERPRISE APPLICATION SERVICES (EAS)
                    DISASTER RECOVERY / BUSINESS CONTINUITY



Cool Down Evaluation


                                       <Exercise Name> Exercise
  <The Cool Down Evaluation is provided by the DR/BC office. Return a completed copy to the DR/BC Office.>

                                                Session <X>
                                               <Exercise Title>
                                               <Exercise Date>


                                                 Strengths




                                           Areas for Improvement




                                                   Issues




                                                Assignments

                                                                                             Target
                                    Task                                Assigned
                                                                                              Date




Exercise – Session <X> - <Month, Year>              5 of 8                                updated/saved 4/25/10
                       Michigan Administrative Information Services (MAIS)
                       ENTERPRISE APPLICATION SERVICES (EAS)
                       DISASTER RECOVERY / BUSINESS CONTINUITY



   Program Evaluation


                                           <Exercise Name> Exercise
       <The Program Evaluation is provided by the DR/BC office. Return a completed copy to the DR/BC Office.>

                                                    Session <X>
                                                   <Exercise Title>
                                                   <Exercise Date>


                                                   Strongly      Moderately    Moderately      Strongly         N/A
                                                   Disagree       Disagree       Agree          Agree
  1. The materials provided were complete.

  2. The materials provided were well written.

  3. The situation (conditions, limits, etc) was
     plausible.

  4. The situation was of the right complexity.

  5. The exercise was conducted in a logical
     order.

  6. The time allowed for exercise was just
     right.

  7. This exercise was progressive, not a
     repetition of previous exercises.

  8. Exercises should be run more often.

  9. This exercise offered valuable DR/BC
     training opportunities.

  10. I feel my work area is ready for lengthy
      systems outages.

  11. Overall, this session was effective.

COMMENTS:




   Exercise – Session <X> - <Month, Year>               6 of 8                                updated/saved 4/25/10
                    Michigan Administrative Information Services (MAIS)
                    ENTERPRISE APPLICATION SERVICES (EAS)
                    DISASTER RECOVERY / BUSINESS CONTINUITY



Brief for Facilitator


                                              <Exercise Name> Exercise
                                  <All exercise briefs are provided by the DR/BC office.>

                                                      Session <X>
                                                     <Exercise Title>
                                                     <Exercise Date>
    1. Review test objectives
    2. Review BCP and evaluation
              a. High light areas for improvement
              b. Discuss highlights with Evaluator
    3. Conduct Initial Briefing
              a. Review exercise format
              b. Review Exercise Definition (general exercise situation including conditions, limits, etc.)
              c.   Review Exercise Outline.
    4. Discuss assumptions of BCP and how those assumptions may impact exercise results. (For example, a
       plan may have been written assuming phones are available or that all personnel are available.)
    5. Discuss exercise attendance, roles and responsibilities and any possible impact on exercise.
    6. Review exercise expectations – a successful exercise finds omissions, inaccuracies, constrictions, etc.
    7. Suggest players move away from scripted situation if it delivers added value.
    8. Feed exercise scenario information to players where they need information outside the written conditions
       or scenario. Provide details that are plausible, realistic and consistent with the conditions or scenario.
    9. Avoid interfering or disrupting the flow of activity, except to get things moving if they have stalled.
    10. Report observations during cool down.
    11. Gain player agreement on action items and assignments.
    12. Track action items until completed.
    13. Submit materials to DR/BC Office.




Exercise – Session <X> - <Month, Year>                     7 of 8                                   updated/saved 4/25/10
                    Michigan Administrative Information Services (MAIS)
                    ENTERPRISE APPLICATION SERVICES (EAS)
                    DISASTER RECOVERY / BUSINESS CONTINUITY



Brief for Evaluator


                                              <Exercise Name> Exercise
                                  <All exercise briefs are provided by the DR/BC office.>

                                                      Session <X>
                                                     <Exercise Title>
                                                     <Exercise Date>


    1. Review test objectives
    2. Review BCP and evaluation
              a. High light areas for improvement
    3. Observe and record:
              b. Actions taken during the exercise, which were not, but should be, incorporated in the plan.
              c.   Omissions from the plan (contact information, dependent processes…)
              d. Inaccuracies and inconsistencies
              e. Areas too detailed or restrictive
              f.   Note assumptions that were challenged
              g. Any other aspects and observations either on the effectiveness of the plan or effectiveness of the
                 test.
    4. Suggest players to move away from scripted situation if it delivers added value.
    5. Feed exercise scenario information to players where they need information outside the written conditions
       or scenario. Provide details that are plausible, realistic and consistent with the conditions or scenario.
    6. Avoid interfering or disrupting the flow of activity, except to get things moving if they have stalled. In the
       event of difficulty, contact the facilitator.
    7. Report observations during cool down.
    8. Submit written notes to facilitator.




Exercise – Session <X> - <Month, Year>                     8 of 8                                   updated/saved 4/25/10

				
DOCUMENT INFO
Shared By:
Categories:
Stats:
views:12
posted:4/25/2010
language:
pages:8