Case study Business Continuity and Disaster Recovery

1. BCP Case Study
Lightning strikes
not twice but 3 times
Jorge Sebastiao
LOB Head Global Services Solutions

2. Business Continuity Management
To counteract interruptions to business activities
To protect critical business processes from the effects of
major failures or disasters
“2 out of 5 companies
that experience a disaster
will go out of business
within 5 years”
- Gartner

3. Impact of Disaster
3
Productivity: productivity/
employees
$millions
minutes daystime
$impact$billions
Revenue
:
direct financial/
customer
Damaged
reputation
:
damaged
reputation
Governance &
performance:
Governance
Performance
constant
increase
Indirect impact of downtime can be
far more severe and unpredictable
exponential
increase

4. BCP Project & Process
Business Impact Analysis
Risk Analysis
Recovery Strategy
Group Plans
and Procedures
Business Continuity Planning Initiation
Risk
Reduction
Implement
Standby Facilities
Create Planning Organization
Testing
PROCESS
Change Management Education Testing Review
Policy ScopeResourcesOrganization
On-
going
Process
Project

5. Strategy Optimization
Recovery strategy must be optimized to business requirements
Time
CostofStrategy
Mitigation
LostRevenue
Optimum Mitigation
Strategy

6. Structure

7. ISM GDC Sites 3 x redundancy
ITS GBS
ITS Kuwait
3 x sites in place
• Main site @Pyramids
• Primary Backup located ITS
GBS @Freezone 60km away
• Secondary backup located in
Kuwait 1,500Km away
3 x Redundancy
• Communication IP
• Voice
• Workplace

8. 3 x Contingencies
Offices
• Egypt - Pyramids Office
• Egypt - Free Zone Office
• Egypt- Home Office
• Remote - Country Office
(Kuwait)
Telecom
• MPLS, Fiber
• Satellite
• Wimax /Microwave
• 3G
• All IP Voice/Data

9. ISM 3 Threats Levels
Levels identify the readiness
• Red Badge
trigger BCP activation
• Yellow Badge
readiness BCP activation
• Green Badge
normal operations
Risk
Possibility of
Risk
Normal Operations

10. Portal all Documentation

11. ISM Regular Periodical Test
ISM hold 4 tests on 2013 for readiness
No Test Name Result Test Date
1
Emergency
Evacuation
Pass 1/6/2013
2 BCP Walkthrough Pass 11/6/2013
3 Work from Home Pass 17/6/2013
4
IT Recovery Test
Plan
Pass 21/6/2013

12. Business Continuity timeline
Active
Business
A successful
recovery

13. ISM 3 Major Incidents
Lighting striked 3 times….
No Incident Date
1 Fiber Cable Cut Jan-Feb 2008
2 Egyptian revolution 25 Jan 2011
3 Egyptian revolution 30 June 2013

14. Submarine cable cut

15. Success Incident
Cut of fiber cable PH,
2 fiber cable Pyramids office with internet +
telephone line cut for 12h
activate loss of communications,
• Used satellite connection
• business services transfer to disaster recovery site
• Transfer Operation team to backup site

16. 25 Jan 2011 Egypt
Revolution Phase 1

17. Success Incident
25 Jan 2011
Revolution,
Telecommunications cut during 25 Jan revolution:
• mobile phone
• Internet service providers
Activated loss of communications and loss of facility scenarios
• business services were transferred to Kuwait
• Backup team in Kuwait operated business services.
• team start operation using backup satellite connection, Microwave
• work from home.

18. 30 June 2013 Egypt Phase 2

19. Successful Incident
30 June 2013
Revolution
activated losing of facility scenarios,
• Operation team work form home using VPN
• business services transfer to disaster recovery located in Kuwait

20. Lessons Learned
1.Plan for the worst case
2.Expect the unexpected
3.Test, Test, Test
4.Regular drills valuable
5.Updated doc regularly
6.Certification extra value

21. Questions