B usiness C ontinuity P lanning D isaster R ecovery P lanning

1. Business Continuity Planning Disaster Recovery Planning Business Continuity Planning Disaster Recovery Planning March 2004

2. Agenda Business Continuity Planning Disaster Recovery Planning • Introduction • BCP and DRP Methodology • Loyola College in Maryland BCP / DRP Progress • EA Findings and Recommendations • Next Steps March 2004

3. Business Continuity Planning Disaster Recovery Planning Introduction What Would You Do? March 2004

4. Methodology Business Continuity Planning Disaster Recovery Planning BCP / DRP Methodology March 2004

6. Methodology Business Continuity Planning Disaster Recovery Planning TCI Methodology Business Continuity Planning Disaster Recovery Planning “Five Steps to Recovery Confidence” March 2004

7. Business Continuity Planning Disaster Recovery Planning Project Progress Disaster Recovery Plan Business Continuity Plan Progress March 2004

8. Business Continuity Planning Disaster Recovery Planning Project Progress • Environment Assessment- COMPLETED • Time: • October – November 2003 • Process: • Interviews (40+) • Site Visits (4 Campuses) • EA Report: • EA Findings • EA Concerns • EA Recommendations (25) • Next Steps March 2004

9. Environment Assessment • Physical Risk • Unauthorized Access Risk • Procedural Risk

10. Technology Services Environment Assessment Table of Contents – November 2003 Business Continuity Planning Disaster Recovery Planning I N T R O S U M M A R Y Environment Assessment Introduction……………...….5 Environment Assessment Executive Summary…..…..13 Environment Assessment Campus Reviews……..…...25 Evergreen Campus – Main Campus………….………….31 Graduate Center – Timonium Campus……….…..…….61 Graduate Center – Columbia Campus …….……...……65 Loyola Notre Dame Library…………………….…………73 Technology Services Group……………………….……..79 Business Continuation Department……………..….…..83 Systems Development Department……………………..91 Instructional Services Department………………..…..115 Computing Services Department…………………..….123 Communication Services Department………………..137 Environment Assessment Recommendations………147 Next Steps……………………………………………….…161 C A M P U S R E V I E W S T E C H N O L O G Y S E R V I C E S March 2004

11. Technology Services Environment Assessment Recommendations Business Continuity Planning Disaster Recovery Planning • Tivoli System Management • Knott Hall Power Requirements • Administrator and Root Password Access • Redundant Servers • Redundant SAN • Redundant Data Center • Computer Operations • Tape Management Tracking System • Tape Library Room • Alternate Central Office/Telephone / Data Comm. Access • Iron Mountain Off-Site Storage • Network Connectivity • Technology Infrastructure Access • Backup Internet Service Provider • Hot Site / Mobile Site / Quick Ship • Automatic Log Off • Documentation • Security Policies • Video Services • Fire Suppression • Technology Infrastructure Replacement Strategic Plan • Association of Jesuit Colleges and Universities • Signs March 2004

12. Business Continuity Planning Disaster Recovery Planning Next Steps March 2004

13. Next Steps Business Continuity Planning Disaster Recovery Planning Complex Technology, Application and Business Infrastructure March 2004

14. Next Steps Business Continuity Planning Disaster Recovery Planning Technology Services - Change Management March 2004

15. Disaster Recovery Plan Technology Services

16. Next Steps Business Continuity Planning Disaster Recovery Planning • Technology Services • Network Services / Telecom Services • Computing Services • Systems Development • Instructional Services • Business Continuation March 2004

17. Next Steps Business Continuity Planning Disaster Recovery Planning Technology Services • Technology DRP Project Plan March 2004

18. Next Steps Business Continuity Planning Disaster Recovery Planning Technology Services • Technology DRP Project Plan • Disaster Recovery Plan March 2004

19. Next Steps Business Continuity Planning Disaster Recovery Planning Technology Services • Technology DRP Project Plan • Disaster Recovery Plan • DRP Team Table Top Exercises March 2004

20. Next Steps Business Continuity Planning Disaster Recovery Planning Technology Services • Technology DRP Project Plan • Disaster Recovery Plan • DRP Team Table Top Exercises • DRP Table Top Exercise March 2004

21. Next Steps Business Continuity Planning Disaster Recovery Planning Business Continuity Plan March 2004

23. Next Steps Business Continuity Planning Disaster Recovery Planning Administration, Finance and Treasurer • Financial Services • Administration and Process Design • Resource Management • Controller • Financial Systems and Operations (Payroll) • Student Administrative Services • Campus Services • Physical Plant • Event Services and Auxiliary Management • Logistics and Support Services • Human Resources • Recruitment and Employment • Compensation and Benefits • Environmental Health and Safety March 2004

24. Next Steps Business Continuity Planning Disaster Recovery Planning Administration, Finance and Treasurer • BCP Project Planning (Phase II) • Technology Vulnerability Assessment • Business Impact Analysis • Department Vulnerability Assessment • Business Continuity Plan • BCP Team Table Top Exercise • BCP Table Top Exercise March 2004

25. Next Steps Business Continuity Planning Disaster Recovery Planning • President’s Office • Academic Affairs • Student Development • Development and College Relations • BCP Project Planning • Business Impact Analysis • Business Continuity Plan • BCP Team Table Top Exercise • BCP Table Top Exercise March 2004

26. Thank You Questions?