Session 18 - BCP and DR

Download as pdf or txt
Download as pdf or txt
You are on page 1of 28

ERP IMPLEMENTATION PROJECTS:

RISK MANAGEMENT &


ASSESSMENT
RISK MANAGEMENT
It is unrealistic to expect a BCP to address every threat facing a
business, no matter how unlikely it is or how trivial the impact.

Risk Management has the following objectives:

 Identify risks and opportunities


 Analyze the risks in the process
 Assessing risks
 Set the risk treatment
 Monitor and review
 Construction of the risk matrix
INCIDENTS THAT MAY AFFECT
OPERATIONS
INCIDENTS THAT MAY AFFECT OPERATIONS
FIVE STAGE MODEL FOR RISK ASSESSMENT
1. Understand the
business and identify
and assess the
business continuity
risks
2. Developing
continuity
management
strategies
3. Developing the
continuity plan
4. Establish business
continuity culture
5. Continuous
improvement
RISK FACTOR IN THE IMPLEMENTATION
OF ERP
ERP IMPLEMENTATION RISK
MANAGEMENT PROCESS
RISK ASSESSMENT SCORING: IMPACT (HEAT MAP)
BUSINESS CONTINUITY
PLANNING
EXECUTIVES ARE ASKING TOUGHER QUESTIONS..
The past Today

Do we really need a Am I sure that my business


disaster recovery plan?
CEO can keep going in a crisis or
emergency?

Do we have service Are we building operational


level agreements CIO excellence into our IT
with our users? service?

IT How can we get the right levels


If the system fails, how
of security & availability in our
quickly can it recover? Manager new system from day one?

The past Today


11
Impact of LOSS

12
CUSTOMERS NEED TO IDENTIFY BUSINESS & IT RISKS…

high natural disaster- fire, flood, adverse weather


man made disaster- terrorism, malicious damage
security breach- hacker
denial of service attack
virus attack
internal security/fraud
impact

Compliance risk
application failure
power/ network failure
software failure
hardware failure

planned downtime
low
low frequency high

13
IMPACT OF DOWNTIME

$ Billions
Revenue:
Direct loss, compensatory Exponential Financial
payment, lost future increase performance
revenues, billing losses and
investment losses
Damaged
reputation

$ Impact
Productivity: Productivity/
Number employee x employees
impacted x hours out x
burdened hours = ?
Direct financial/
customer
$ Millions

Damaged reputation:
Customers, competitors gain Constant
advantage, suppliers, increase
financial markets, business Time
partners Minutes Days
Downtim
Financial performance:
e
Revenue recognition, cash The indirect impact of
flow, credit rating, stock
price, regulatory fines downtime can be far more severe and unpredictable

14
REASONS FOR FAILURE
BUSINESS CONTINUITY

IT IS…..
Definition: The ability to adapt and
respond to risks, as well as IT IS NOT…..
Minimize the impact of a major
disruption to normal operations and
opportunities, in order to maintain Enable restoration of critical assets as
soon as possible after a crisis
continuous business operations, be a Recovery of information technology
resources
more trusted partner, and enable
growth

Business
Continuity

Disaster Recovery
High Availability Continuous Operations
Protection against
Fault-tolerant, failure- Non-disruptive backups and
unplanned outages, such as
resistant infrastructure system maintenance coupled
disasters,
supporting continuous with continuous availability of
through reliable and
application processing applications
predictable recovery
BUSINESS CONTINUITY MANAGEMENT
Business continuity management is a holistic
management process that identifies potential threats
to an organization and the impacts to business
operations that those threats, if realized, might
cause, and that provides a framework for building
organizational resilience with the capability for an
effective response that safeguards the interests of
its key stakeholders, reputation, brand and value-
creating activities.
Example Disaster Recovery Services
Service Providers : Consulting Services
Andersen Consulting
www.ac.com

Bell Atlantic Federal CommGuard


www.commguard.com

Comdisco
www.comdisco.com

Computer Security Consultants, Inc.


www.crciweb.com

GSA Disaster and Business Recovery


www.gsa-gsa.com

Intessera Technologies Group


www. intessera.com
18
Example Disaster Recovery Services
Service Providers : Alternate Site Services
ARC Disaster Recovery Services
www.arcdrs.com

Comdisco
www.comdisco.com

HP Business Recovery Services


www.hp.com

IBM Business Recovery Services


www.brs.ibm.com

SunGard Recovery Services, Inc. recovery.sungard.com


19
CLOUD BASED ERP / ON –
PREMISES ERP
CLOUD BASES SERVICES
On-demand self-service Software as a Service (SaaS):
Broad network access Applications that could be email, CRM,
cloud storage, etc.
Resource pooling: there is some degree
of shared resources from which services Platform as a Service (PaaS): This includes
draw as needed. web sites, web applications, etc.
Rapid elasticity: customers’ needs may Infrastructure as a Service (IaaS):
expand or contract, and the service will Typically, virtual machines hosted in the
expand or contract with those needs. cloud and made available to the customer,
who maintains the operating system on up.
Measured service: customers are billed
based on some measured consumption.
That could be licenses, or CPU cycles, or
Gigabytes of storage consumed, or
number of mailboxes whatever the
thing measured, that is how customers
are billed.
You pay for what you use.
CLOUD ERP:
CONCERNS
AND BENEFITS
ON-PREMISE ERP:
CONCERNS AND
BENEFITS
SHORT LIST OF CLOUD ERP VENDORS
NetSuite
Epicor
FinancialForce
Acumatica
Plex
Rootstock
Kenandy
Aptean
Unit4
Ramco
Workday
COMPARISON OF CLOUD BASED VENDORS: BY PANAROMA
RESEARCH GROUP (2013 REPORT)
SAAS ERP
VENDOR
MARKET : 2017
SaaS ERP
Vendor Market :
2017
SaaS ERP
Vendor Market :
2017

You might also like