PSU Business Continuity BLOG: Comments

Comment on "Disaster Recovery Journal - Spring World Conference (March 2008)"

Tue, 15 Apr 2008 15:45:13 -0500

...and Testing, Testing, Testing!

Comment on "Lessons Learned: Table-top Exercises"

Tue, 25 Mar 2008 09:33:49 -0500

One thing a tabletop exercise can do is actually build a procedure or process for handling a situation. Having all of the players in a room is a boon to either building a strategy or testing a known plan. Besides, tabletops are fun too!

- CARL A SIMMONS

Comment on "Don't forget your people!"

Fri, 21 Dec 2007 15:36:49 -0500

One thing I always reiterate in teaching Disaster Recovery, Crisis Management and Business Continuity is the importance of the people that make the business work. You can always buy another piece of equipment, but buying experienced people that know the business is sometimes nearly impossible. I applaud the article.

- Carl Simmons

Comment on "How Risk Assessments Are Used In Business Continuity"

Thu, 15 Nov 2007 09:42:31 -0500

I've always been a proponent of giving the customer as much data as possible with the RA. Most departments do not understand nor know where to get relevant data for doing threat probability, so I do the field work and hand it to them (at least for the environmental threats). I don't like handing over the man-made threats as this gets a department to reach out to various support services. The support services appreciate the involvement and give excellent ideas for mitigation. This work also is a ground level building block in getting an organization focused on BC. My two cents...

- Carl Simmons

Comment on "Business Impact Analysis and the RTO"

Thu, 25 Oct 2007 08:11:42 -0500

You bring up a good discussion about RPO's. They are as important as the RTO and probably should have their own blog topic (maybe that will be the next one!).
Currently, we are not focusing on the RPO as much as we should. Most of our business units feel that DR and BCP are only technology related and the IT departments are tasked with completing plans. As the business units get more involved in the planning process, they are identifying their business needs with just a Recovery Time Objective. I feel that as our program matures and the business units continue to be more involved, we will be able to focus on both the RTO and RPO.

- Pam Downs

Comment on "Business Impact Analysis and the RTO"

Thu, 25 Oct 2007 05:52:55 -0500

I found your blog is so interesting and helpful... Now I am working on the Business Continuity project. As you said, but BIA and RTO is a very important part for BC, but you don't mention RPO (recovery point objective). Do you think RPO is less important than RTO?

- Li

Comment on "Business Impact Analysis and the RTO"

Mon, 22 Oct 2007 13:31:57 -0500

Based on the BIA, the RTO is always the worst case timeframe for recovery. The problem you run headlong into the is cost of implementing the RTO. But, the cost is also a DR person's friend! With the cost of the recovery strategy in hand, a DR person can get a reality based solution from upper management instead of a knee jerk or politically charged answer from the business owner.

- Carl Simmons

Comment on "The Misunderstood Business Impact Analysis (BIA)"

Wed, 10 Oct 2007 08:57:14 -0500

Oh boy, the numerous issues surrounding BIA work will drive most professionals screaming for the hills!

We've run into political reviews rankings, 'gaming' of priorities, poor understanding of questions, etc.

Please remember that a BIA is turning a subjective view into objective or quantifiable data (aka turning art into science). IT professionals hate that!

- Carl Simmons

Comment on "Changing The Culture For Business Continuity Planning At A University"

Tue, 18 Sep 2007 09:46:53 -0500

Senior management support is key to a flourishing BC program. The strange thing is that they MUST support the process as they are ultimately responsible for the assets and resources. Some don't even realize... until the lawyers show up...

- Carl Simmons

Comment on "Changing The Culture For Business Continuity Planning At A University"

Tue, 11 Sep 2007 11:39:08 -0500

I've found that folks who pursue a Business Continuity Planning career path generally have a shared vision which supports the mission, goals and interests of the organization. Then again, maybe thats just me.

- Steve Strickler

Comment on "Business Continuity vs. Disaster Recovery"

Thu, 23 Aug 2007 11:15:24 -0500

Another reason why people focused so much on Disaster Recovery and why it was tossed into the lap of technology people was due to the findings of the initial Risk Assessment.

- Carl Simmons

Comment on "Welcome to the Business Continuity Blog"

Mon, 20 Aug 2007 13:41:50 -0500

Mind if I lurk? :-)

- Carl Simmons