لطفا منتظر باشید ...
Appendix 1: Disaster Recovery Journal Survey Results http://www.Drj.Com
Where in your healthcare organization does the BC/DR business function report?IS/IT/CIO: 52.60%CEO/CFO: 20.13%Risk Mgmt: 16.23%Other: 11.04%Total Votes: 2156Author's Comment: You won't have to be in this field very long before you will be asked where this function rightfully belongs. You can shoot back these statistics which reflect how other position BCP. The real answer to the question is that it doesn't matter. BCP should be positioned under a senior executive champion who has the ear and support of the CEO.Are HR concerns currently covered in your BC Plan?
Yes: 62.90%No: 37.10%Total Votes: 1736Author's Comment: I learned the importance of HR issues after having gone through Hurricane Andrew in Miami. I didn't realize how critical this component is to a recovery until that experience.Does your company have a data recovery solution in place, and/or a print-to-mail recovery solution?
Data Recovery Only: 43.24%Neither: 33.78%Both: 21.62%Print-to-Mail Only: 1.35%Total Votes: 1258When your company has suffered an interruption in business, what has been the cause?
Human Error: 43.38%Power Outage: 38.97%Natural Disaster: 8.82%Other: 6.62%Terrorism/Sabotage: 1.47%Labor Dispute: 0.74%Total Votes: 2584Do you currently have a formal records retention schedule?
Yes: 64.21%No: 35.79%Total Votes: 1710Do you feel confident in your current telecommunication recovery plans?No: 73.75%Yes: 26.25%Total Votes: 2720Author's Comment: Few of the plans that I have reviewed give sufficient attention to getting telecommunications back. Most of the CEOs that I have talked to have as their first recovery priority, the Customer Service area (most CIOs I tell this to just give me a dirty look).Did you seek help from an outside consultant or agency to implement your BC/DR plans?
No: 50.46%Yes: 49.54%Total Votes: 2071Author's Comment: If you use a consultant, make sure they are capable of taking you through the plan writing phase. Too many times I have seen consultants do a BIA and leave the client to do the rest. The end result is that you have spent a lot of money and you don't have a plan.Do you currently have a payroll system contingency plan?
Yes: 52.82%No: 47.18%Total Votes: 3315Do you have a Print-to-Mail Recovery Plan?
No: 83.44%Yes: 16.56%Total Votes: 2567Do you have a contract with a disaster restoration firm built into your BC Plan?
No: 69.35%Yes: 30.65%Total Votes: 2418Do you conduct a separate retest following an unsuccessful test or wait for the scheduled test?
conduct another: 62.28%wait: 37.72%Total Votes: 1938How many miles is your alternate data center from your main data center?
0-50: 45.12%250+: 31.71%100-250: 13.41%50-100: 9.76%Total Votes: 4428Author's Comment: The regulatory trend is to have hot-sites and alternate data centers located at lease 200 miles from the primary processing site.If you've been involved in a true recovery effort, rate the effectiveness of the plan. (5 Being Most Effective, 1 Being Least)
4: 30.48%3: 27.62%5: 20.00%1: 13.33%2: 8.57%Total Votes: 1470What is your main alternate site strategy?
Hot-Site Vendor: 49.14%Internal: 31.90%None: 8.62%Reciprocal: 6.90%Mobile Hot-Site: 3.45%Total Votes: 2204What Percent of your company's total IT Budget is spent on DRP?
Less than 1%: 59.48%Between 1% - 3%: 27.59%More than 9%: 6.03%Between 3% - 6%: 4.31%Between 6% − 9%: 2.59%Total Votes: 1972Author's Comment: Another question you will consistently be asked around budget time. The critical issue in this question is what should be in DRP. Should putting in dry-loaded sprinklers a DRP expense or a facilities expense? What about a diesel generator, a building security system, or a redundant air handler.Which best describes the involvement of your firm's senior management in the BC program?
Supportive: 49.51%Actively involved: 27.18%Not Involved: 23.30%Total Votes: 3296Author's Comment: If they aren't involved, either move to a different department or find another company.Do you have an SLA with your hot site provider?
Yes: 57.14%No: 42.86%Total Votes: 1190Do you address the individual off-site storage needs of your business units?
Yes: 75.15No: 24.85%Total Votes: 2310Author's Comment: A company that I worked for had an office at 40 Wall Street, just two blocks from the World Trade Center. After 9/11, all staff was relocated around the NYC area. We set up their network access, gave them a work area, and many of them just sat there and couldn't work. Why? They didn't have access to their paper documents.Do you currently have a contract for work area recovery?
No: 56.30%Yes: 43.70%Total Votes: 2160Author's Comment: This one component is more than likely the critical path of your recovery effort. The vast majority of companies that I have worked with could recover their computer systems in less than 48 hours. However, if you can't find full functional work stations for your staff, product won't get out the door.What is your annual DR/BC budget in dollars?
Under 250,000: 53.44%1-5 Million: 19.85%250K-500K: 13.74%500K-1 Million: 6.11%10-50 Million: 3.82%Over 50 Million: 2.29%5-10 Million: 0.76%Total Votes: 1703Do you feel your healthcare organization is fully protected against power outages?
No: 60.62%Yes: 39.38%Total Votes: 3667What is your experience in BC planning?
Beginner: 47.97%Intermediate: 27.03%Advanced: 25.00%Total Votes: 4736Author's Comment: You're not alone. In my many visits to the Disaster Recovery Journal Symposium, at least 60% of the attendees were new to Business Continuity Planning.Do you currently have high-availability solutions in place?
No: 50.64%Yes: 49.36%Total Votes: 2340Do you currently require critical vendors to have an active BCP?
No: 50.00%Yes: 50.00%Total Votes: 1598Does your healthcare organization outsource payroll?
No: 60.26%Yes: 39.74%Total Votes: 2652Do you currently utilize your Intranet for housing your BC Plans?
no: 61.39%yes: 38.61%Total Votes: 1313Do you currently utilize mobile recovery strategies for a hot-site?
no: 79.79%yes: 20.21%Total Votes: 1316Do you currently utilize mobile recovery strategies for work area recovery?
no: 69.89%yes: 30.11%Total Votes: 1395Author's Comment: I recently started considering the use of these in the plans that I have been writing. The more I looked into use of these trailers, the more I became enamored by the concept. Finding seats for staff members has always been the critical path for the recovery, and with this option, you can get those seats available in 48 hours.Do you currently have an internal alternative site solution?
yes: 51.96%no: 48.04%Total Votes: 2327What is the most likely cause of your communication network outage?
man-made: 32.47%hardware failure: 24.68%service provider: 21.43%software failure: 14.94%natural disaster: 6.49%Total Votes: 2156On average, how often do you experience an outage in your wide-area network?
quarterly: 34.38%monthly: 27.08%annually: 25.00%weekly: 13.54%Total Votes: 1260Does your BCP currently address terrorism?
No: 81.25%Yes: 18.75%Total Votes: 3072How long are you able to utilize your hot site?
1 to 3 Months: 52.58%More than 3 Months: 23.71%2 Weeks to 1 Month: 18.56%Less than 2 weeks: 5.15%Total Votes: 1843Author's Comment: Many plans that I have looked at do not have a component that repairs or replaces the computer facilities. The above statistics point out that the hot-site offers only immediate relief and that your plans should simultaneously be addressing reconstruction or building of a permanent IT facilityHave the events on 9/11 increased the exposure DR/BC are now receiving?
Yes: 89.54%No: 10.46%Total Votes: 3346Does your BC/DR plan cover the move back to a permanent site from backup site?
No: 62.36%Yes: 37.64%Total Votes: 2314Have the September 11th events made you alter any parts of your current DR plans?
Yes: 74.63%No: 25.37%Total Votes: 2211Do you currently address personnel transportation to the alternate site in your plan?
No: 52.14%Yes: 47.86%Total Votes: 3341Will HIPAA have any impact on your planning efforts?
Yes: 69.70%No: 30.30%Total Votes: 1254Do you currently contract with consultants for any service in BCP?
No: 63.68%Yes: 36.32%Total Votes: 1967Do you currently contract with more than 1 large service provider in the DR industry?
No: 66.96%Yes: 33.04%Total Votes: 1568Do you currently have a debris management plan?
No: 90.80%Yes: 9.20%Total Votes: 1305Author's Comment: This pertains to clearing access to the facility, making workspaces usable, and not discarding salvageable resource.Do you currently have a cold site contract?
No: 66.96%Yes: 33.04%Total Votes: 1012In the past 10 years how many times has your BC/DR plan been enacted?
0: 65.50%1-3: 26.32%More than 6: 4.68%
4-6: 3.51%Total Votes: 2223Do you utilize quick ship hardware replacement in your current recovery strategies?
Yes: 51.22%No: 48.78%Total Votes: 1312Do you currently have a contingency plan for telecommunications system outages?
No: 51.77%Yes: 48.23%Total Votes: 1692Author's Comment: A critical component of production that is often overlooked.What is your biggest challenge in your planning efforts?
Funding: 38.08%Staff Shortage: 32.64%Complexity: 26.78%Nothing: 2.51%Total Votes: 2151What area of the healthcare organization are you responsible for planning for?
Data Center: 39.46%All Areas: 28.57%Enterprise Wide: 19.05%Business Unit: 12.93%Total Votes: 1911Do you have an agreement with a transportation company to move data or personnel during an interruption?
No: 70.33%Yes: 29.67%Total Votes: 1274How often do you test your business units BC plans?
< than 2 years: 39.05%never: 26.67%>than2 years: 25.71%Every 2 years: 8.57%Total Votes: 1014Do you currently utilize SANs to backup your server environment?
No: 68.09%Yes: 31.91%Total Votes: 1504How far away is your Hot Site from your main facility?
>100 miles: 48.41%10-50 miles: 28.03%<10 miles: 13.38%50-100 miles: 10.19%Total Votes: 2041Do you, at least annually, validate the data backups you have offsite?
Yes: 66.67%No: 33.33%Total Votes: 3816Author's Comment: It is surprising how many times I have encountered situations where healthcare organizations discover that their backups are not recoverable.Does your main data center use any of the following?
All: 37.85%Combo of 2: 36.72%UPS: 21.47%Generator: 2.26%Alternate Feed: 1.69%None: 0.00%Total Votes: 1593What is your main recovery strategy for data center operations?
Hot-site: 66.92%Internal Solution: 24.06%None: 7.52%Reciprocal Agreement: 1.50%Total Votes: 2394What is your annual BC Planning Budget?
Less than 500K: 65.74%500K-1 Million: 13.89%1-2Million: 12.04%More than 5Million: 5.56%2-5Million: 2.78%Total Votes: 1296Does your healthcare organization have a written policy on speaking to the press following a disruption/disaster?
Yes: 63.58%No: 36.42%Total Votes: 1963Do you currently have a Work Area Recovery Vendor?
No: 59.17%Yes: 40.83%Total Votes: 1560How many years is your contract with your hot-site provider?
5: 38.84%3: 32.23%1: 14.88%2: 9.09%4: 4.96%Total Votes: 1573Do you have a contract with a disaster restoration firm built into your BC Plan?
No: 59.79%Yes: 40.21%Total Votes: 776How involved is your CFO involved with your BC planning?
None: 46.23%Somewhat: 42.45%Very: 11.32%Total Votes: 954Author's Comment: This factor more than any other will determine the success or failure of your planning efforts.How often do you run tests on your critical web servers?
Annually: 49.06%Semi-Annually: 32.08%Monthly: 18.87%Total Votes: 530Do you feel you have enough executive commitment for your BC/DR program?
No: 66.39%Yes: 33.61%Total Votes: 2618Do you currently utilize an offsite storage vendor for all or some of your critical backups?
All: 53.74%Some: 25.85%None: 20.41%Total Votes: 1617Do you currently utilize electronic vaulting for some or all of your critical backups?
None: 67.50%Some: 24.17%All: 8.33%Total Votes: 1680What is your RTO [Recovery Time Objective] for your non-critical web servers?
24-48 Hrs: 30.88%48-96 Hrs: 25.00%<than 24 Hrs: 22.06%4-8 Days: 16.18%>than 8 Days: 5.88%Total Votes: 884What is your Recovery Time Objective for your Non-Critical Networks?
24-48 Hrs: 25.20%4-8 Days: 22.83%<than 24 Hrs: 22.83%48-96 Hrs: 20.47%>than 8 Days: 8.66%Total Votes: 1778What is your Recovery Time Objective for your Critical Database Systems?
<than 12 Hrs: 44.44%12-24 Hrs: 27.78%24-48 Hrs: 18.25%48-96 Hrs: 8.73%>than 96 Hrs: 0.79%Total Votes: 1638What is your Recovery Time Objective (Rt) for your Critical Accounting Systems?
<than 12 Hrs: 31.97%24-48 Hrs: 29.92%12-24 Hrs: 20.49%48-96 Hrs: 14.34%>than 96 Hrs: 3.28%Total Votes: 3172How many years experience do you have in DR/BC?
Less than 1: 26.09%2-6: 24.90%More than 10: 20.16%1-2: 15.81%6-10: 13.04%Total Votes: 3795How often are your evacuation BC action plans tested?
Semi-Annually: 37.88%Other: 33.33%Annually: 28.79%Total Votes: 924How often are your Business Unit BC action plans tested?
\Annually: 39.73%Semi-Annually: 31.51%Other: 28.77Total Votes: 1022How often are your Technology BC action plans tested?
Annually: 39.29%Semi-Annually: 32.14%Other: 28.57%Total Votes: 1456Has a hacker ever disabled/affected any of your e-business systems?
No: 77.48%Yes: 22.52%Total Votes: 2114How confident are you that the technology and application solutions are executable and will support requirements defined in the BC action plans?
Somewhat Confident: 44.30%Very Confident: 26.58%Not Confident: 15.19%Unsure: 13.92%Total Votes: 1027If your change management is automated, was the application purchased or developed in-house?
Purchased: 63.46%Developed: 36.54%Total Votes: 1792Do you feel the contingency space can adequately support business recovery requirements?
No: 62.60%Yes: 37.40%Total Votes: 2091Is the recovery technology used present at the site or do you rely on quick-ship contracts?
Both: 43.66%Present: 40.85%Quick-ship: 15.49%Total Votes: 1207Do you conduct a separate retest following an unsuccessful test or wait for the scheduled test?
Conduct another: 56.90%Wait: 43.10%Total Votes: 1276What level of lead time do you allow for tests?
Scheduled: 89.25%No Lead Time: 10.75%Total Votes: 1116Does your firm use a standard tool or template to document BC planning deliverables?
Yes: 54.26%No: 45.74%Total Votes: 1677Are the plans maintained in a central repository or on a single global database for all locations?
Central Repository: 58.21%Single Global DB: 41.79%Total Votes: 938Does your firm have problems keeping contingency site(s) in sync with production files?
Yes: 75.00%No: 25.00%Total Votes: 1596Does your action plan exist for all business functions?
Yes: 50.68%No: 49.32%Total Votes: 1971Does your BC action plan include information about equipment requirements for alternate site?
Yes: 88.24%No: 11.76%Total Votes: 1870Does your BC action plan include information about vital records?
Yes: 76.15%No: 23.85%Total Votes: 2210Does your BC action plan include information about critical vendors?
Yes: 85.11%No: 14.89%Total Votes: 1786Does your BC action plan include information about internal interdependencies?
Yes: 67.03%No: 32.97%Total Votes: 1274Does your BC action plan include information about recovery sequences for business functions?
Yes: 64.37%No: 35.63%Total Votes: 1131Does your action plan include information on Critical Processes?
Yes: 90.98%No: 9.02%Total Votes: 2074Does your firm use an alternate TECHNOLOGY contingency site?
Yes: 65.25%No: 34.75%Total Votes: 1652Are your current e-Business systems considered mission critical?
Yes: 69.05%No: 30.95%Total Votes: 1764Are BC considerations mandatory requirements for application development/maintenance?
Yes: 56.03%No: 43.97%Total Votes: 1476Is the BC Team involved with changes to infrastructure?
Yes: 57.29%No: 42.71%Total Votes: 1152What is your recovery window for your mission critical processes?
Less than 1 Day: 41.55%1-2 Days: 37.32%3-5 Days: 16.90%Greater than 5 days: 4.23%Total Votes: 1846Do you measure the cost/benefit of your BC program?
No: 61.80%Yes: 38.20%Total Votes: 1335What percent of BC costs are spent on Technical/Application contingency?
Less than 20: 56.48%20 to 40: 13.89%60 to 80: 11.11%40 to 60: 10.19%More than 80: 8.33%Total Votes: 1296What percent of BC costs are spent on Alternate Sites?
Less than 20: 52.19%20 to 40: 16.15%40 to 60: 13.67%60 to 80: 12.43%More than 80: 5.56%Total Votes: 1539What percent of BC costs are spent on Personnel?
Less than 20: 68.42%20 to 40: 11.58%60 to 80: 9.47%More than 80: 5.26%40 to 60: 5.26%Total Votes: 1615How are contingency costs funded?
Through the technology departments: 31.87%Centrally funded via technology: 28.57%Through the business units: 25.27%Other: 14.29%Total Votes: 1547Does your recovery strategy include an emergency hotline or toll-free number that provides recovery process info/updates?
No: 53.38%Yes: 46.62%Total Votes: 1862What do you consider to be the most critical resource for a successful disaster recovery?
People: 81.65%Data: 16.19%Equipment: 2.16%Total Votes: 2502How many miles is your offsite tape storage from your main data center?
0-10: 36.32%10-25: 28.86%50+: 17.91%25-50: 16.92%Total Votes: 2211Have you implemented solutions to reduce your recovery window within the past year?
Yes: 71.43%No: 28.57%Total Votes: 1729Do you consider dependency on your staff to be a risk factor in successful disaster recovery?
Yes: 90.54%No: 9.46%Total Votes: 2442Have you assessed your facilities to identify any single points of failure?
Yes: 56.15%No: 43.85%Total Votes: 2210Do you include full network recovery into your DR exercises?
Yes: 67.11%No: 32.89%Total Votes: 1937Author's Comment: This could be an area very prone to recovery impediments. I am amazed at how many healthcare organizations are satisfied with just getting their systems loaded at the hot-site.How often are your BC Plans Reviewed?
Every Year: 83.33%More than 2 Years: 12.96%Every 2 Years: 3.70%Total Votes: 1728Who reviews your BC Plans?
Management: 58.94%Internal Auditor: 23.04%Outside Consult/Auditor: 18.02%Total Votes: 1415What is your main alternate site strategy?
Hot-Site Vendor: 54.10%Internal: 22.13%None: 13.11%Mobile Hot-Site: 5.74%Reciprocal: 4.92%Total Votes: 1830If you've been involved in a true recovery effort, rate the effectiveness of the plan. (5 Being Most Effective, 1 Being Least)
5: 13.51%4: 36.49%3: 31.08%2: 8.11%1: 10.81%Total Votes: 1036Is the Business Continuity Planner a management position in your healthcare organization?
No: 40.89%Yes: 59.11Total Votes: 2700Does your company utilize DR/BC specific software to document your plan?
No: 52.70%Yes: 47.30%Total Votes: 2072Does your Healthcare organization carry Business Interruption Insurance?
No: 50.51%Yes: 49.49%Total Votes: 1263How many personnel are dedicated to BC/DR?
One: 42.12%Three or More: 37.90%Two: 19.98%Total Votes: 1161How often do you test your DR Plan?
Every 6 Months: 48.96%Annually: 45.42%Every 2 Years: 5.62%Total Votes: 1867Do you currently have a Business Continuity Plan?
Yes: 41.47%In the Process: 36.60%No: 21.93%Total Votes: 2937
