Business%20Continuity%20Planning%20Securing%20the%20Enterprise

1
Business Continuity PlanningSecuring the
Enterprise
Sponsored by WITI- Women In Technology
International

• by Juanita Ellis
• www.juanitaellis.com

2
Business Continuity Strategy

• A comprehensive plan covering people and
  facilities as well as systems and data that
  ensures critical business processes can quickly
  return to operation despite a service
  interruption
• Provisions for continuing IT services through
  both planned and unplanned component, system, or
  site outages
• Direction from CEO or business unit management

3
The Business Continuity Plan

• Reviewing the State of the Business
• Core Business
• Stakeholders/RASCI
• Supply Chain and Business Partners
• Policies and Procedures
• Knowing Your Infrastructure and Key Vendors
• Enterprise Risk Analysis
• Business Impact Analysis

4
Security Planning

• As with Business Continuity Planning, Security
  Planning MUST include a comprehensive plan
  covering people and facilities as well as systems
  and data that ensures critical business processes
  can quickly return to operation despite a service
  interruption.
• Direction from CEO or business unit management

5
Is Your Company Looking at Business Continuity
and Security Seriously ?
6
Number if Incidents

• 1 TO 5 6 to 10 11 to 30 31 to 60 Over 60
  Dont Know
• 2002 42 20 8 2 5 23
• 2001 33 24 5 1 5 31
• 2000 33 23 5 2 6 31
• 1999 34 22 7 2 5 29
• 1998 61 31 6 1 2 n/a
• 1997 48 23 3 () n/a n/a 27
• 1996 46 21 12 n/a n/a 21
• (2002 321 Respondents/64
• 2001 348 Respondents/65, 2000 392
  Respondents/61,
• 1999 327 Respondents/63, 1998 234
  Respondents/45,
• 1997 271 Respondents/48, 1996
  179Respondents/425)

CSI- Computer Security Institute and FBI
conducted the Computer Crime and Security
Survey
7
Financial Losses
CSI- Computer Security Institute and FBI
conducted the Computer Crime and Security
Survey 2002
8
Meet the Experts How Are They Approaching
Business Continuity Planning and Security with
Their Customers

• Laura Bosworth-Bucher from Dell
• Peter Sherr from Siemens
• Mike Fitzpatrick from NetConnX Technologies
• William Gillespie from Risk Analysis Group

9
Thank You