2012 MITA-ATAAnnual Conference August 6-8, 2012

Disaster Recovery Planning for Telecommunications Companies

Definition of Disaster

“An unforeseen combination of circumstances that threatens the continued existence of the business and requires immediate action.”

2

Disaster Planning

In other words --

What do we do,

IF………..

3

Murphy’s Law:

Whatever can go wrong, will go wrong –

And it will do so at the worst possible time.

4

O’Brien’s Corollary:

Murphy was an optimist.

5

Disaster PlansFour Phases of a Disaster

Pre-Disaster Emergency Response Recovery Post-Recovery

6

Pre-Disaster Planning:(Planning for the Disaster Event)

Step 1:

Identify Your Disasters

7

Failure to Plan is Planning to Fail

8

Identify Disasters (1)

Natural Disasters “Neighborhood” Exposures Fraud or Embezzlement Regulatory “Key” Person Loss of Services

9

Loss of Services:Loss of Key System Components Main Office Key Central Office(s) or CO Equipment Key Towers Billing & Accounting Systems EDP System(s)

10

Identify Disasters (2)

Access to Valuable Papers Access to Internet Loss in Excess of Limits Legal Exposures

11

Legal Exposures: Wrongful Discharge Sexual Harassment Discrimination Violence in the Workplace Negligent Entrustment

12

Identify Disasters (3)

Public Relations Terrorism / Sabotage

• Target People, Information, Transportation• Goal: Create Panic and Disruption

13

Terrorism / Sabotage: External and Internal Terrorists Apathy and Ignorance Signs of Criminal Activity Pre-Incident Warnings Hoax Effect Evaluate Daily Routines

14

Pre-Disaster Planning:(Planning for the Disaster Event)

Step 2:

Develop Action Plans

15

Emergency Action Plan“A detailed plan developed specifically

for your company outlining emergency response procedures and defining employee responsibilities and actions.”

Required by OSHA – 1910.38 Who does What in an emergency

16

Develop Action Plans Identify Assets to be Protected Assign Realistic Probabilities Decide Human Resource Issues Assign Functional Responsibilities

(with Back-ups)

17

Action Plans Should Be: Clear Concise Easily Understood Easily Referenced –

• Including From Offsite Locations

18

Action Plans Should Include: Methods of Communicating Site Security Emergency Response Actions Methods of Containing Hazards Evacuation Procedures Shut Down Procedures Response Team Assignments

19

Emergency Response Team:Duties Becomes Operating Management Team

to Execute the Recovery Plan Calls the Plan into Action Evaluates Disaster Situation Implements Appropriate Segments of

Plan

20

Emergency Response Team:

Emergency Response Coordinator Financial Officer Public Relations Officer Human Resources Officer Facilities Manager IT Manager Production Manager Insurance / Risk Management Officer

21

Pre-Disaster Planning:(Planning for the Disaster Event)

Step 3:

Develop Control Measures

22

Develop Control Measures: Adequate Insurance Engineering Controls Cross Training Service Agreements Equipment Availability

23

Develop Control Measures: Time Element Losses Insurance Marketplace Security Issues Contact List

24

Develop Control Measures:Contact List Suppliers Employees & Family Contractors Business Partners Local Authorities / Responders Mutual Aid Providers Insurance Contact

25

Develop Control Measures:Contact List

FCC – Federal Communications Comm.• Disaster Info Reporting System (DIRS)• Found on FCC website• http://transition.fcc.gov/pshs/services/cip/dirs/dirs.html

DHS – Dept. of Homeland Security• Status of Service in your Operating Area• Criminal or National Security Implications

26

Develop Control Measures:Contact List Information Company Name Contact Name Alternate Contact Name Office Phone After Hours / Cell Phone What Equipment / Service Provided

27

Pre-Disaster Planning:(Planning for the Disaster Event)

Step 4:

Implement The Plans

28

Implement Action Plans Communicate! Involve All Levels

• Workers• Management

Clear Expectations for Continuity Part of New Employee Orientation Refresher Training

29

Pre-Disaster Planning:(Planning for the Disaster Event)

Step 5:

Test Action Plans

30

Test Plan Components:Employees are 1st Line of Defense Fire Protection Plan Fire Alarms Fire Detection Systems Evacuation Plan Employee Training Accountability – Who is at Work?

31

Test Plan Components:Fire Dept. & Public Responders Learn Your Plan Components Learn Your Facilities’ Layout Locate Hazardous Materials Locate Confined Spaces Improve Safety Performance

32

Test Plan Components: Action Plans are Living Documents Human Relations Considerations Pollution Exposures Recover Safely

33

Overlooked LossesDuring Recovery Overhead Company Direct Costs Employee Costs

34

Disaster Planning Summary Adequate Risk Transfer Procedures & Auditing Training Testing Cost Accounting Avoid Disaster Fraud

35

Planning References:“Disaster Recovery Journal” magazine

web site: “www.drj.com”

User ID: “drj” Password: “world”

NFPA 1600 – “Standard on Disaster / Emergency Management and Business Continuity Programs”, 2004

36

Planning References“Principal Emergency Response and

Preparedness” OSHA 3122-06R, 2004

“How to Prepare for Workplace Emergencies”, OSHA Bulletin 3088

37

Planning References“Emergency Management Guide for

Business & Industry”, FEMA, Publication141

“Emergency Planning Guidebook”, Building Owners & Managers Assoc.

38

Thank you.

Any Questions?