Regional disaster recovery strategic review

The project issues
The Heads of IT in seven public authorities in West Yorkshire jointly commissioned a major strategic review to assess and benchmark the current status of IT Disaster Recovery Planning in the region. Our responsibilities included the production of an influential report which highlighted the strategic options for developing joint capabilities to achieve regional resilience.

The objectives of this assignment were to:

• review and summarise existing disaster recovery plans, capabilities and operational documentation
• review current technologies, highlighting disaster recovery capabilities and skills gaps
• determine Recovery Point and Recovery Time objectives
• highlight mission-critical capabilities
• assess disaster recovery maturity and existing measures in place
• offer guidance and recommendations to develop joint regional capabilities and offer options for further consideration to include the identification of cost savings
• promote awareness of Business Continuity Management and signpost additional sources of knowledge and expertise in Business Continuity Management and suggest ways of improving regional resilience

The Socitm Consulting solution
Background information was gathered by completing a generic Business Impact Analysis (BIA) and technology-focused Risk and Threat Assessment (RA) issued in advance of face-to-face meetings with either a key individual or individuals from each authority’s ICT department. Data gathering and analysis followed approved guidelines defined by the Business Continuity Institute and contained within PAS 56 (soon to be replaced by BS 25999) and ISO 17799.

External Analysis and Research was carried out on the internet and with agencies such as the Civil Contingencies Secretariat, British Standards Institute and the Business Continuity Institute.

A number of structured interviews were carried out with various WYRH representatives. Individuals were self-selected, chosen for their detailed managerial and technical knowledge of technology environments, management responsibilities, organisational structures and geographic dispositions within individual ICT departments.

In addition to interviews, we reviewed existing documentation relevant to continuity planning to determine:

• the business appetite for, and adoption of, continuity planning and risk management/ awareness as a management discipline
• Recovery Point and Recovery Time Objectives
• key technology enablers
• information security policies
• whether or not existing Disaster Recovery contracts existed and is so what were the key highlights
• gap analysis, dependency modelling and options evaluation
• advice mapping: PAS56, ISO 17799, Audit Commission, Business Continuity Institute, Socitm, Emergency Planning Society , ALARM

The benefits to the client
The following benefits accrued to the client:

• Cost savings in terms of project management and solution procurement
• Reduced duplication of effort leading to efficiency gains
• Improved co-operation, integration and cross-functional working
• Improved situational awareness specifically of threats and vulnerabilities so Senior Management decision making is better informed about the balance of risks to operations
• Highlighting of individual and regional risk profiles as required by the Civil Contingencies Act
• Achieving strategic oversight, operational peace of mind and tactical accountability
• Reduced the cost of risk management through single cross-party process integration
  Improved ‘normal’ business
• Effective targeting of risk mitigation and risk management resources
• Proven ability to plan, the confidence to cope, the reassurance to recover
• Proven evidence of a risk and continuity management process consistent with best practice guidelines leading to regional compliance
• Regional consensus in terms of priorities, resources and timescales, mission critical capabilities, applications and services restoration
• Regional benchmarking, strategic influence, national agenda setting

Project identification
Client organisation: Leeds City Council on behalf of the West Yorkshire Heads of ICT
Client contact: Terry Booth, Assistant Technical Design Architect, 0113 24 78981, terry.booth@leeds.gov.uk
Lead consultant: james.royds@socitm.gov.uk
Project No. 5280