Recovery and Recovery and Mitigation in the TMC Mitigation in the - - PowerPoint PPT Presentation
Recovery and Recovery and Mitigation in the TMC Mitigation in the TMC Sponsored by the Sponsored by the TMC Pooled- -Fund Study Fund Study TMC Pooled http://tmcpfs.ops.fhwa.dot.gov/index.cfm tmcpfs.ops.fhwa.dot.gov/index.cfm http:// Why
http:// http://tmcpfs.ops.fhwa.dot.gov/index.cfm tmcpfs.ops.fhwa.dot.gov/index.cfm
Terrorist Incidents
Natural Disasters
External Events
Hardware or Software Error
Infrastructure Issues
Civil Emergencies
Employment Actions
Epidemics
DRM
Disaster Recovery and Mitigation Disaster Recovery and Mitigation
COOP
Continuity of Operations Continuity of Operations
GETS
Government Emergency Telecommunications Service Government Emergency Telecommunications Service
WPS
Wireless Priority Service Wireless Priority Service
SLA
Service Level Agreement Service Level Agreement
UPS
Uninterruptible Power Supply Uninterruptible Power Supply
Mitigation
– – Fail Fail-
Over Hardware – – Establishing Backup Establishing Backup Communications Communications – – Harden TMC Harden TMC – – Anti Anti-
Virus Software – – Network Intrusion Network Intrusion Prevention Prevention – – Security Standards Security Standards – – On On-
going Maintenance
Recovery
– – Access to Data Access to Data Backups Backups – – Access to Access to Documentation Documentation – – Personnel Activation Personnel Activation – – Chain of Command Chain of Command – – Access to Alternate Access to Alternate Site Site – – Software Licensing Software Licensing – – Enable Backup Enable Backup Communications Communications – – Personnel Needs Personnel Needs
Physical and Logical Access Control Control
Hardware and Software Standards Standards
Communication Standards
Internal Communications
Inter-
agency Communications
Communications with the Media and Public
Method and Schedule of Data Backups
Storage of Data Backups
Identify who can declare an Emergency
Procurement Authority
Access to Documentation during an emergency
Activation of Personnel during an emergency
Identify Recovery Team
Develop Situational Responses Responses
Prioritize Mitigation and Recovery Strategies Recovery Strategies
Establish Service Level Metrics Metrics
Select Type of Alternate Facility Facility
Plan Alternate Site
Determine Fixed Needs
Obtain Funding to Implement Plan Plan
Documentation
Contingency Plan
Network Documentation
System Passwords
Contact List
Process Manual
Procedures Manual
Policy Manual
Occupant Emergency Plan
Version Control
Backup Power
Data Recovery
Alternate Communication Paths Paths
Test with other Agencies
Returning to the TMC
Post Testing Updates
Third Party Observation
Funding for On-
going Testing and Upgrades Testing and Upgrades
Ongoing Budget for Recovery and Mitigation
Establish Trigger Events and Schedules for Reviewing the Plan Reviewing the Plan
Update Documents as Necessary
Configuration Management for Documents
Continued Periodic Testing
Hardware and Software Upgrades at Upgrades at Alternate Sites Alternate Sites
Management Commitment
Establish Policies for: – – Hardware & Software Standardization Hardware & Software Standardization – – Data Backup Data Backup – – Documentation Management Plan Documentation Management Plan – – Establish Requirements for System Establish Requirements for System Availability Availability – – Roles and Responsibilities Defined and Roles and Responsibilities Defined and Communicated Communicated
Publish TMC Mission Statement
Prioritize Functions to be Recovered
Lines of Authority Defined
Define Types of Outages and Responses
Security Standards
1. 1. Organization Self Assessment Organization Self Assessment 2. 2. Identify Executive Sponsor Identify Executive Sponsor 3. 3. Obtain Funding for Project Obtain Funding for Project 4. 4. Establish dialog with relevant agencies Establish dialog with relevant agencies 5. 5. Begin Planning for Recovery and Mitigation Begin Planning for Recovery and Mitigation
Purpose
– – Describes why recovery and mitigation plans are Describes why recovery and mitigation plans are important to the success of TMCs important to the success of TMCs – – Provides guidance and recommended practices for Provides guidance and recommended practices for planning, initiating, developing, and implementing planning, initiating, developing, and implementing recovery and mitigation plans recovery and mitigation plans
Intended Audience
– – Individuals involved in the planning, design, and/or Individuals involved in the planning, design, and/or maintenance of a TMC maintenance of a TMC
Chapter 1: Recovery and Mitigation in the TMC: Definitions and Purpose Definitions and Purpose
Chapter 2: Synthesis of Current Practices
Chapter 3: The Planning Process
Chapter 4: Recovery and Mitigation Policies
Chapter 5: Types and Causes of System Outages and Related Recovery and Mitigation Related Recovery and Mitigation
Chapter 6: Testing Preparedness
Chapter 7: Ongoing Support of the Plan
Chapter 8: Summary
TMC Pooled Funds Study Website ( (http://tmcpfs.ops.fhwa.dot.gov http://tmcpfs.ops.fhwa.dot.gov) )
– – Projects Projects – – Current Projects Current Projects – – Recovery and Mitigation for Transportation Management Recovery and Mitigation for Transportation Management Centers Centers – – http:// http://tmcpfs.ops.fhwa.dot.gov/cfprojects/new_detail.cfm?i tmcpfs.ops.fhwa.dot.gov/cfprojects/new_detail.cfm?i d d=79&new=0 =79&new=0