SlideShare uma empresa Scribd logo
1 de 24
© 2013 IBM Corporation
Resilience in Action
- Lessons Learned from Hurricane Sandy
Paige Poore
Director, IBM Business Continuity Management
© 2013 IBM Corporation2
Resilience in action = constantly evolving
© 2013 IBM Corporation3
Lessons Learned from
Superstorm Sandy
= Knowledge
Identify Areas of Focus
= Enhance
Elevate the Discussion
C - suite Engagement
= Effectiveness
Learn
Elevate Identify
Resilience in action =
constantly evolving
© 2013 IBM Corporation4
LEARN
Learn from experience
– Lessons Learned
© 2013 IBM Corporation5
LESSONS
LEARNED
Hurricane Sandy
IBM
Observations
Additional Lessons Learned –
non IBM examples
© 2013 IBM Corporation6
Lessons Learned from
Superstorm Sandy
= Knowledge
Learn
Identify
Based on the lessons
learned and your
unique business
situation - Identify
where you want to
focus,
© 2013 IBM Corporation7
Resilience in Action
In addition to the lessons learned from Hurricane Sandy,
Consider new risks on your horizon.
Where do you want/need to enhance?
An evolving story…..
Lessons Learned - New Strategic Risks
Expansion into Growth Markets
Consolidation
Acquisitions, Mergers
Additional Considerations –
Changing Employee Demographics
Work from Home Strategies / Testing
Planning: Business Impact vs. Events
Which ones are applicable to your unique situation?
© 2013 IBM Corporation8
Lessons Learned from
Superstorm Sandy
= Knowledge
Identify Areas of Focus
= Enhance
Learn
Elevate Identify
Elevate the
discussion. Drive C-
Suite engagement to
be effective
© 2013 IBM Corporation9
Resilience in Action
Elevate the discussion to drive C-Suite Engagement
Use language the business understands
Take an Enterprise View
Lower the barriers of adoption
© 2013 IBM Corporation10
Lessons Learned from
Superstorm Sandy
= Knowledge
Identify Areas of Focus
= Enhance
Elevate the Discussion
C - suite Engagement
= Effectiveness
Learn
Elevate Identify
Resilience in action =
constantly evolving
© 2013 IBM Corporation11
We are all facing the same challenges
THANK YOU
for the opportunity to share insights and learn from each other!!
Hurricane Sandy & Lessons Learned – Parting Thoughts
© 2013 IBM Corporation12
Reference Detail – Lessons Learned from Hurricane Sandy
© 2013 IBM Corporation13
LESSONS
LEARNED
Hurricane Sandy
© 2013 IBM Corporation14
Resilience in Action
Superstorm Sandy Facts
• Damage estimates over $70 billion in the US
•Property damage, loss of business, an increase in living expenses, loan delinquencies and more.
•Insurance claims estimated to be between $10 and $20 billion (lots of exclusions for flood
damage)
•Over 72,000 New Jersey homes or businesses damaged or destroyed.
• Over 125 deaths in the US
• 2 days of downtime for the NYSE:1st time in 30 years due to a weather-related event
• Immediate economic impact of Sandy:
•Output of US factories, mines & utilities fell 0.4% in Oct/12
•Overall retail sales fell 0.3% in Oct/12
•Nov/12 report jobless claims surged 78,000 to 439,000
• (FCC) At one point, 25% of cell towers in Superstorm Sandy’s path were affected.
• Wireless carriers AT&T, T-Mobile, Verizon and Sprint were all impacted.
• Over 18,000 flights cancelled
• Over 8.5 millions homes and business without power (some over 2 weeks)
© 2013 IBM Corporation15
Resilience in Action
With Hurricane Sandy growing and the unpredictable path… the
threat for power outages was a large area of the United States and
Canada.
© 2013 IBM Corporation16
Resilience in Action
Oct 22 – “Tropical Storm” Sandy, 40 mph winds
Oct 24/25 – Becomes Category 1 Hurricane, 110 mph winds
Oct 28th - Warning of potential ‘super-storm’
Sandy’s Status Date
• W Oct 22 Oct 22: Tropical Depression 19 officially became
“Tropical Storm Sandy”, 40 mph winds
Oct 24 – 25: Becomes a Category 1 Hurricane,
crosses Caribbean,& Jamacia, 80 mph winds. 20” +
rain in Hispaniola, Over 50 people die in Haiti.
Oct 26 : Hurricane strikes Cuba, 110 mph winds, slight
turn, crosses Bahamas
Oct 27 : Turns NE, weakens but re-intensifies
Oct 28: Warning that Sandy could turn into a
“powerful super-storm”
• Sandy continued moving NE along coast, Max. winds
of 80 mph.
• Additional contributors: High-pressure cold front
north of Sandy started forcing Sandy Northwest
towards US coast.With full moon, storm surge
expected to be 12 feet.
• Sandy expanded to 1,000 miles
Oct 23
Oct 24
Oct 25
Oct 26
Oct 27
Oct 28
Oct 29
Oct 30
Oct 31
Nov 1
Nov 2
Nov 3
Nov 4
Nov 5
Nov 6
Nov 7
Nov 8
Nov 9
Moving off into Atlantic? No
© 2013 IBM Corporation17
Resilience in Action
Oct 29 - Sandy hits New Jersey
Oct 30 - moves inland, impacting NY and NE region
Sandy’s Status Date
Oct 22
Oct 29: Sandy makes a sharp turn NE towards
New Jersey.
• Numerous weather systems collide
• Up to 36 inches of snow in parts of Virginia, West
Virginia and North Carolina.
• Around 8:00 pm, Sandy hits New Jersey.
• Storm downgraded to a “post-tropical nor’easter”.
• Full Moon caused storm surges of 14 feet.
• Regional power and Telco (voice & data) outages.
Oct 30: Sandy moving inland, weakening
• Storm was still impacting New York and Northeast
region because of the “back-side” of the storm.
• Over 8.5 millions homes and business without
power (some over 2 weeks)
Oct 23
Oct 24
Oct 25
Oct 26
Oct 27
Oct 28
Oct 29
Oct 30
Oct 31
Nov 1
Nov 2
Nov 3
Nov 4
Nov 5
Nov 6
Nov 7
Nov 9
© 2013 IBM Corporation18
LESSONS
LEARNED
IBM
Observations
© 2013 IBM Corporation19
LESSONS
LEARNED
Additional Lessons Learned –
non IBM examples
© 2013 IBM Corporation20
Resilience in Action
PEOPLE – does your business continuity plan adequately address your people?
Questions to ask ….
• Are your employees and their families safe?
• Will people be available? Where do employees go to work?
• Who are decision makers during a crisis and where are they?
Actions to Consider…
Primary focus of BCP should be your employees
Have alternate locations for employees to work
Consider having alternate teams available
Clear definition of roles prior, during and after disaster
© 2013 IBM Corporation21
Resilience in Action
COMMUNICATIONS – how does your business continuity plan address disruption to
voice and/or data communications?
Questions to ask ….
• How / When / Who / What… to communicate to your employees, customers, suppliers, media and public
at large?
• How do employees communicate with your company?
• What methods of communications do you use (landline, cell, internet, social media, etc.)?
• Telecommunications redundancy?
Actions to consider…
Create an communications plan for internal & external, especially who should and should not speak
for the company.
Create centralized number, email address, web site or social media guidelines for use during crisis
events
Consider alternate communication tools: satellite phones, cell phones outside of affected region,
common email address, wireless cards for laptops, text messaging
© 2013 IBM Corporation22
Resilience in Action
POWER – how does your business continuity plan address loss of
power?
Evaluate for…
Risky location such as in basements or below sea level;
Lack of maintenance or inconsistent maintenance
Inadequate fuel supply (and inability to get it during disaster conditions);
Inadequate power from generators because generator capacity does not mirror the growth in equipment
Actions to Consider…
Consider location of redundant power supplies
Ensure redundant power supplies are tested
Ensure adequate fuel supply - Have multiple contracts with different supplies
Ensure redundancy capacity at the correct levels to support critical infrastructure, Include in
change management process
Have contracts for acquisition of generators
© 2013 IBM Corporation23
Resilience in Action
SUPPLY CHAIN – does your business continuity plan address what
you will do if your supply chain(s) can not deliver their products or
services to you?
Example ….
Company were not aware of which suppliers they were dependent on and when a supplier had a
disaster, the company lost the products/services they expected from the supplier, creating another
disaster.
Which supply chains put you at risk and are they single source (i.e. Telco’s)?
Actions to Consider…
Identify your critical suppliers
Understand the impact
Identify a risk mitigation strategy for critical suppliers
© 2013 IBM Corporation24
Resilience in Action
BCP – is your Business Continuity Plan accessible and up-to-date?
Questions to ask ….
BCP’s outdated or not available at time of crisis
Employees not aware of BCP and their roles and responsibilities during a crisis.
BCP’s were not tested.
No or limited availability of data and hardware
Actions to Consider…
Keep BCP current & Integrate plan with IT and business change management
Test plan annually or more often - “table top exercises”
Create crisis teams to manage crisis events
Reinforce/Communicate importance of BCP (from the top) and that everybody is
responsible and plays a critical role.

Mais conteúdo relacionado

Semelhante a Resilience In Action: Lessons Learned From Hurricane Sandy, Paige Poore, IBM Client Community Meeting, 23.5.13

2009_NYC_OpRiskUSA_Conf
2009_NYC_OpRiskUSA_Conf2009_NYC_OpRiskUSA_Conf
2009_NYC_OpRiskUSA_Conf
Peter Poulos
 
Best Practices for Proactive Disaster Recovery and Business Continuity
Best Practices for Proactive Disaster Recovery and Business ContinuityBest Practices for Proactive Disaster Recovery and Business Continuity
Best Practices for Proactive Disaster Recovery and Business Continuity
ReadWrite
 
Planning For Disaster And Everyday Threats Wp111438
Planning For Disaster And Everyday Threats Wp111438Planning For Disaster And Everyday Threats Wp111438
Planning For Disaster And Everyday Threats Wp111438
Erik Ginalick
 

Semelhante a Resilience In Action: Lessons Learned From Hurricane Sandy, Paige Poore, IBM Client Community Meeting, 23.5.13 (20)

Unti-Claims Handling Following Catastrophes 2013-10
Unti-Claims Handling Following Catastrophes 2013-10Unti-Claims Handling Following Catastrophes 2013-10
Unti-Claims Handling Following Catastrophes 2013-10
 
2009_NYC_OpRiskUSA_Conf
2009_NYC_OpRiskUSA_Conf2009_NYC_OpRiskUSA_Conf
2009_NYC_OpRiskUSA_Conf
 
Dr Steve Goldman's Top Ten Business Continuity Predictions / Trends for 2014
Dr Steve Goldman's Top Ten Business Continuity Predictions / Trends for 2014Dr Steve Goldman's Top Ten Business Continuity Predictions / Trends for 2014
Dr Steve Goldman's Top Ten Business Continuity Predictions / Trends for 2014
 
Best Practices for Proactive Disaster Recovery and Business Continuity
Best Practices for Proactive Disaster Recovery and Business ContinuityBest Practices for Proactive Disaster Recovery and Business Continuity
Best Practices for Proactive Disaster Recovery and Business Continuity
 
The Great Disruption No One Planned For: COVID-19
The Great Disruption No One Planned For: COVID-19The Great Disruption No One Planned For: COVID-19
The Great Disruption No One Planned For: COVID-19
 
Amalfi core coop-v5a
Amalfi core coop-v5aAmalfi core coop-v5a
Amalfi core coop-v5a
 
Continuity Planning 101
Continuity Planning 101Continuity Planning 101
Continuity Planning 101
 
05.Media relations and Crisis comms
05.Media relations and Crisis comms05.Media relations and Crisis comms
05.Media relations and Crisis comms
 
BC Awareness Workshop
BC Awareness WorkshopBC Awareness Workshop
BC Awareness Workshop
 
Industry impact and lessons learned from hurricane sandy summary report 010913
Industry impact and lessons learned from hurricane sandy   summary report 010913Industry impact and lessons learned from hurricane sandy   summary report 010913
Industry impact and lessons learned from hurricane sandy summary report 010913
 
Planning For Disaster And Everyday Threats Wp111438
Planning For Disaster And Everyday Threats Wp111438Planning For Disaster And Everyday Threats Wp111438
Planning For Disaster And Everyday Threats Wp111438
 
Disaster Recovery vs. Business Continuity
Disaster Recovery vs. Business ContinuityDisaster Recovery vs. Business Continuity
Disaster Recovery vs. Business Continuity
 
Business Continuity as a Career
Business Continuity as a CareerBusiness Continuity as a Career
Business Continuity as a Career
 
EMERGENCE OF NEW DIGITALIZATION TECHNIQUES IN ORGANISATIONS IN.pptx
EMERGENCE OF NEW DIGITALIZATION TECHNIQUES IN ORGANISATIONS IN.pptxEMERGENCE OF NEW DIGITALIZATION TECHNIQUES IN ORGANISATIONS IN.pptx
EMERGENCE OF NEW DIGITALIZATION TECHNIQUES IN ORGANISATIONS IN.pptx
 
Touchpoint Media Content Marketing
Touchpoint Media Content Marketing Touchpoint Media Content Marketing
Touchpoint Media Content Marketing
 
Business continuity 2013
Business continuity 2013Business continuity 2013
Business continuity 2013
 
A Game Plan for Making Decisions Before, During, and After a Crisis Hits Your...
A Game Plan for Making Decisions Before, During, and After a Crisis Hits Your...A Game Plan for Making Decisions Before, During, and After a Crisis Hits Your...
A Game Plan for Making Decisions Before, During, and After a Crisis Hits Your...
 
Crisis Management Strategies When Disaster Strikes
Crisis Management Strategies When Disaster StrikesCrisis Management Strategies When Disaster Strikes
Crisis Management Strategies When Disaster Strikes
 
Managing Through the COVID-19 Crisis: A Guide for All Business Leaders
Managing Through the COVID-19 Crisis: A Guide for All Business LeadersManaging Through the COVID-19 Crisis: A Guide for All Business Leaders
Managing Through the COVID-19 Crisis: A Guide for All Business Leaders
 
Managing Risk
Managing RiskManaging Risk
Managing Risk
 

Último

Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
panagenda
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Safe Software
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 

Último (20)

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Top 10 Most Downloaded Games on Play Store in 2024
Top 10 Most Downloaded Games on Play Store in 2024Top 10 Most Downloaded Games on Play Store in 2024
Top 10 Most Downloaded Games on Play Store in 2024
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
Top 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsTop 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live Streams
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
 
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 

Resilience In Action: Lessons Learned From Hurricane Sandy, Paige Poore, IBM Client Community Meeting, 23.5.13

  • 1. © 2013 IBM Corporation Resilience in Action - Lessons Learned from Hurricane Sandy Paige Poore Director, IBM Business Continuity Management
  • 2. © 2013 IBM Corporation2 Resilience in action = constantly evolving
  • 3. © 2013 IBM Corporation3 Lessons Learned from Superstorm Sandy = Knowledge Identify Areas of Focus = Enhance Elevate the Discussion C - suite Engagement = Effectiveness Learn Elevate Identify Resilience in action = constantly evolving
  • 4. © 2013 IBM Corporation4 LEARN Learn from experience – Lessons Learned
  • 5. © 2013 IBM Corporation5 LESSONS LEARNED Hurricane Sandy IBM Observations Additional Lessons Learned – non IBM examples
  • 6. © 2013 IBM Corporation6 Lessons Learned from Superstorm Sandy = Knowledge Learn Identify Based on the lessons learned and your unique business situation - Identify where you want to focus,
  • 7. © 2013 IBM Corporation7 Resilience in Action In addition to the lessons learned from Hurricane Sandy, Consider new risks on your horizon. Where do you want/need to enhance? An evolving story….. Lessons Learned - New Strategic Risks Expansion into Growth Markets Consolidation Acquisitions, Mergers Additional Considerations – Changing Employee Demographics Work from Home Strategies / Testing Planning: Business Impact vs. Events Which ones are applicable to your unique situation?
  • 8. © 2013 IBM Corporation8 Lessons Learned from Superstorm Sandy = Knowledge Identify Areas of Focus = Enhance Learn Elevate Identify Elevate the discussion. Drive C- Suite engagement to be effective
  • 9. © 2013 IBM Corporation9 Resilience in Action Elevate the discussion to drive C-Suite Engagement Use language the business understands Take an Enterprise View Lower the barriers of adoption
  • 10. © 2013 IBM Corporation10 Lessons Learned from Superstorm Sandy = Knowledge Identify Areas of Focus = Enhance Elevate the Discussion C - suite Engagement = Effectiveness Learn Elevate Identify Resilience in action = constantly evolving
  • 11. © 2013 IBM Corporation11 We are all facing the same challenges THANK YOU for the opportunity to share insights and learn from each other!! Hurricane Sandy & Lessons Learned – Parting Thoughts
  • 12. © 2013 IBM Corporation12 Reference Detail – Lessons Learned from Hurricane Sandy
  • 13. © 2013 IBM Corporation13 LESSONS LEARNED Hurricane Sandy
  • 14. © 2013 IBM Corporation14 Resilience in Action Superstorm Sandy Facts • Damage estimates over $70 billion in the US •Property damage, loss of business, an increase in living expenses, loan delinquencies and more. •Insurance claims estimated to be between $10 and $20 billion (lots of exclusions for flood damage) •Over 72,000 New Jersey homes or businesses damaged or destroyed. • Over 125 deaths in the US • 2 days of downtime for the NYSE:1st time in 30 years due to a weather-related event • Immediate economic impact of Sandy: •Output of US factories, mines & utilities fell 0.4% in Oct/12 •Overall retail sales fell 0.3% in Oct/12 •Nov/12 report jobless claims surged 78,000 to 439,000 • (FCC) At one point, 25% of cell towers in Superstorm Sandy’s path were affected. • Wireless carriers AT&T, T-Mobile, Verizon and Sprint were all impacted. • Over 18,000 flights cancelled • Over 8.5 millions homes and business without power (some over 2 weeks)
  • 15. © 2013 IBM Corporation15 Resilience in Action With Hurricane Sandy growing and the unpredictable path… the threat for power outages was a large area of the United States and Canada.
  • 16. © 2013 IBM Corporation16 Resilience in Action Oct 22 – “Tropical Storm” Sandy, 40 mph winds Oct 24/25 – Becomes Category 1 Hurricane, 110 mph winds Oct 28th - Warning of potential ‘super-storm’ Sandy’s Status Date • W Oct 22 Oct 22: Tropical Depression 19 officially became “Tropical Storm Sandy”, 40 mph winds Oct 24 – 25: Becomes a Category 1 Hurricane, crosses Caribbean,& Jamacia, 80 mph winds. 20” + rain in Hispaniola, Over 50 people die in Haiti. Oct 26 : Hurricane strikes Cuba, 110 mph winds, slight turn, crosses Bahamas Oct 27 : Turns NE, weakens but re-intensifies Oct 28: Warning that Sandy could turn into a “powerful super-storm” • Sandy continued moving NE along coast, Max. winds of 80 mph. • Additional contributors: High-pressure cold front north of Sandy started forcing Sandy Northwest towards US coast.With full moon, storm surge expected to be 12 feet. • Sandy expanded to 1,000 miles Oct 23 Oct 24 Oct 25 Oct 26 Oct 27 Oct 28 Oct 29 Oct 30 Oct 31 Nov 1 Nov 2 Nov 3 Nov 4 Nov 5 Nov 6 Nov 7 Nov 8 Nov 9 Moving off into Atlantic? No
  • 17. © 2013 IBM Corporation17 Resilience in Action Oct 29 - Sandy hits New Jersey Oct 30 - moves inland, impacting NY and NE region Sandy’s Status Date Oct 22 Oct 29: Sandy makes a sharp turn NE towards New Jersey. • Numerous weather systems collide • Up to 36 inches of snow in parts of Virginia, West Virginia and North Carolina. • Around 8:00 pm, Sandy hits New Jersey. • Storm downgraded to a “post-tropical nor’easter”. • Full Moon caused storm surges of 14 feet. • Regional power and Telco (voice & data) outages. Oct 30: Sandy moving inland, weakening • Storm was still impacting New York and Northeast region because of the “back-side” of the storm. • Over 8.5 millions homes and business without power (some over 2 weeks) Oct 23 Oct 24 Oct 25 Oct 26 Oct 27 Oct 28 Oct 29 Oct 30 Oct 31 Nov 1 Nov 2 Nov 3 Nov 4 Nov 5 Nov 6 Nov 7 Nov 9
  • 18. © 2013 IBM Corporation18 LESSONS LEARNED IBM Observations
  • 19. © 2013 IBM Corporation19 LESSONS LEARNED Additional Lessons Learned – non IBM examples
  • 20. © 2013 IBM Corporation20 Resilience in Action PEOPLE – does your business continuity plan adequately address your people? Questions to ask …. • Are your employees and their families safe? • Will people be available? Where do employees go to work? • Who are decision makers during a crisis and where are they? Actions to Consider… Primary focus of BCP should be your employees Have alternate locations for employees to work Consider having alternate teams available Clear definition of roles prior, during and after disaster
  • 21. © 2013 IBM Corporation21 Resilience in Action COMMUNICATIONS – how does your business continuity plan address disruption to voice and/or data communications? Questions to ask …. • How / When / Who / What… to communicate to your employees, customers, suppliers, media and public at large? • How do employees communicate with your company? • What methods of communications do you use (landline, cell, internet, social media, etc.)? • Telecommunications redundancy? Actions to consider… Create an communications plan for internal & external, especially who should and should not speak for the company. Create centralized number, email address, web site or social media guidelines for use during crisis events Consider alternate communication tools: satellite phones, cell phones outside of affected region, common email address, wireless cards for laptops, text messaging
  • 22. © 2013 IBM Corporation22 Resilience in Action POWER – how does your business continuity plan address loss of power? Evaluate for… Risky location such as in basements or below sea level; Lack of maintenance or inconsistent maintenance Inadequate fuel supply (and inability to get it during disaster conditions); Inadequate power from generators because generator capacity does not mirror the growth in equipment Actions to Consider… Consider location of redundant power supplies Ensure redundant power supplies are tested Ensure adequate fuel supply - Have multiple contracts with different supplies Ensure redundancy capacity at the correct levels to support critical infrastructure, Include in change management process Have contracts for acquisition of generators
  • 23. © 2013 IBM Corporation23 Resilience in Action SUPPLY CHAIN – does your business continuity plan address what you will do if your supply chain(s) can not deliver their products or services to you? Example …. Company were not aware of which suppliers they were dependent on and when a supplier had a disaster, the company lost the products/services they expected from the supplier, creating another disaster. Which supply chains put you at risk and are they single source (i.e. Telco’s)? Actions to Consider… Identify your critical suppliers Understand the impact Identify a risk mitigation strategy for critical suppliers
  • 24. © 2013 IBM Corporation24 Resilience in Action BCP – is your Business Continuity Plan accessible and up-to-date? Questions to ask …. BCP’s outdated or not available at time of crisis Employees not aware of BCP and their roles and responsibilities during a crisis. BCP’s were not tested. No or limited availability of data and hardware Actions to Consider… Keep BCP current & Integrate plan with IT and business change management Test plan annually or more often - “table top exercises” Create crisis teams to manage crisis events Reinforce/Communicate importance of BCP (from the top) and that everybody is responsible and plays a critical role.