IT DSP Findings & Recommendations

Findings and Recommendations City of Berkeley: Digital Strategic Plan and Cost Allocation Plan

October 17, 2016 v5.1

 Verify and validate BCP to ensure its effectiveness and efficiency for recovery of City operations on a yearly basis.  Obtain a more powerful emergency generator for City Hall.

 Backup power for building 1947 Center St.  Develop and adopt a Business Continuity Plan Benefits:  Improved track-ability.  Enhanced reporting.  Improved customer service.  Can show trends and justify budget and resources.

 It would allow for identifying KPIs.  Better business continuity planning.  Better service to the community and meeting the community needs.

O 4

Disaster Recovery Plan Findings:

The DSP project revealed that the City does not have a Disaster Recovery Plan, including coordination/notification between EOC and IT. There is a single point of failure for the network, AT&T and insufficient battery capacity to meet the needs. According to City staff this result in the following:  The inability to recover systems / data in the event of a natural or manmade disaster.  Inconsistent emergency operations response.  Risk to City’s Information Systems.  Could impact service delivery.  Could impact public safety resulting in increased liability and costs.  Risk in the event of a disaster. Recommendations:  Develop a DR plan, in collaboration with the City Resilience and Strategic Plan. Include policies, processes and procedures to recover and ensure business continuity in regards to technological infrastructure in the event of a disaster whether manmade or natural. This might entail retaining a professional organization to develop a Disaster Recovery Plan if City IT staff lack the expertise to develop the DR Plan. Disaster recovery planning is a subset of a larger process (the Business Continuity Planning) and should include planning for resumption of applications, data, hardware, communications (such as networking) and other IT infrastructure. The disaster recovery plan should address three key control measures:  Preventive measures: controls aimed at preventing an event from occurring.  Detective measures: controls aimed at detecting or discovering unwanted events.  Corrective measures: controls aimed at correcting / restoring systems after a disaster.  Integrate with EOC.  Coordinate with Public Works.  Adopt a formal Service Level Agreement (SLA) so IT can get Public Works engaged with a sense of urgency an SLA.  Infrastructure upgrades: network redundancy, larger generators, more generators at remoted sites (28), and larger UPS at remote sites.  Explore utilizing the Cloud as a backup disaster recovery site.

Digital Strategic Plan: Findings & Recommendations

© 2016 109 ThirdWave Corp 11400 W. Olympic Blvd. Suite 200 Los Angeles CA 90064 310.914.0186 V 310.312.9513 F

Made with FlippingBook HTML5