TABLE OF CONTENTS ONLY IT Resiliency Benchmarking Report

Transcription

1 TABLE OF CONTENTS ONLY IT Resiliency Benchmarking Report Prepared by BC Management, Inc. October 2016 Benchmarking. Plan Ahead. Be Ahead. Data collected between July September 2016

2 Table of Contents Reporting History 4 Study Methodology 4 Assessment of Data & Reporting 4 Participant Data & Respondent Characteristics ~ An overview of respondent characteristics IT Resiliency Planning Assessment - Awareness Study Topics Characteristics of IT/Disaster Recovery/ Resiliency Program Data Backup Designated Disaster Recovery Sites Select all that describe the IT/ Disaster Recovery/ Resiliency program Cross reference between select all that best describe the IT/Disaster Recovery/ Resiliency program and how dispersed your organization is 12 Length of time the IT/ Disaster Recovery/ Resiliency program has existed 13 The last time the IT/ Disaster Recovery/ Resiliency program had been thoroughly updated 13 Maturity of the IT/ Disaster Recovery/ Resiliency program self assessment on a rating scale 14 Number of IT/ Disaster Recovery/ Resiliency program planning personnel (dedicated to program, involved, but not dedicated and contract/ consulting) Cross reference between number of IT/ Disaster Recovery/ Resiliency program planning personnel and number of people employed by organization (all locations) 15 Number of End-Point devices (computers, mobile devices, etc) 16 Cross reference between number of End-Point devices (computer, mobile devices, etc) and number of people employed by organization (all locations) 16 Number of servers (physical and virtual) 17 Cross reference between number of servers (physical and virtual) and number of datacenters locations (including virtual datacenters, cloud, etc) 17 Percent of the IT infrastructure is outsourced 18 Cross reference between percent of IT infrastructure outsourced by distribution of datacenter locations 18 Percent of the IT environment is virtualized 19 Cross reference between percent of IT environment virtualized by number of datacenter locations 19 Total amount of data in TB 20 Cross reference between total amount of data in TB by number of datacenter locations (including virtual datacenters, cloud, etc) 20 Total IT operational budget in USD 21 Percent of the total IT operational budget spent on Disaster Recovery/ Resiliency Planning 21 Cross reference between total IT operational budget by organization s annual gross revenues (before expenses) USD 22 Percent of the total IT capital budget spent on Disaster Recovery/ Resiliency Planning 22 Business and IT consultation on data backup 23 Data backup strategy cloud solutions 23 Data backup strategy tape 24 Backup technologies used within organizations 24 How often do organizations backup critical data 25 Do recovery site strategies meet critical requirements 25 Secured budget if researching new/different options 26 For recovery the Disaster Recovery site accommodates 26 The timeframe organizations would expect to have their most critical applications functional if the primary datacenter were lost 27 Staffing of designated Disaster Recovery sites 27 Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 2

3 Disaster Recovery Testing and Exercise Plan Development Disaster Recovery Training Program Management Integration with IT Operations Top concerns for designated Disaster Recovery sites 28 Distance from closest Disaster Recovery site and the primary production site 28 Distance from furthest Disaster Recovery site and the primary production site 29 Do the closest and furthest DR site share similar risks with primary production site? 29 Do the closest and furthest DR site share a power station and/or telecommunications network exchange with the primary production site? 30 If the furthest DR site is over 200 miles from primary production site, is there sufficient staffing to meet RTO during an event? 30 Last time organizations executed a Disaster Recovery test/exercise 31 Have past tests/exercises include business end-users 31 Have past tests/exercises include business partners (external interfaces) 31 Disaster Recovery technology testing documentation includes the following 32 Does the IT department have a designated budget for Disaster Recovery technology testing 32 On average the largest IT Disaster Recovery table-top exercise included how many participants 33 Last time organizations have documented or updated IT Disaster Recovery plans 33 The IT Disaster Recovery plan addresses the following topics 34 In the past year, the following groups have requested to see the IT Disaster Recovery plans 35 Integration of IT Disaster Recovery training within the organization 35 When is the next scheduled IT Disaster Recovery training 36 Integration of IT Disaster Recovery training into new hire orientation 36 Does the IT Disaster Recovery program have a designated executive sponsor 37 Is there a resource to ensure proper change management of Disaster Recovery documentation 37 Do organizations have a documented and approved IT Disaster Recovery policy 38 The IT Disaster Recovery policy documentation addresses the following criteria 38 Organizations level of understanding of the following compliance topics 39 Have organizations been externally audited on the following compliance topics in the past 12 months 40 Integration of IT Disaster Recovery into change management 41 Integration of IT Disaster Recovery into application/ system development 41 Integration of IT Disaster Recovery into configuration management 42 Integration of IT Disaster Recovery into capacity planning 42 Integration of IT Disaster Recovery into IT budget planning 43 Is IT Resiliency part of the IT strategy 43 Thank you to BC Management s International Benchmarking Advisory Board Thank you to our Sponsors and those Organizations who Distributed the Study and/or Report About BC Management, Inc. 50 Customize a Report Exclusively for your Organization Table of Contents Only Please contact BC Management at info@bcmanagement.com if you re interested in purchasing this report. Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 3

4 Reporting History Since 2001 BC Management, Inc. has been gathering data on business continuity management programs and compensations to provide professionals with the information they need to elevate their programs. Each year our organization strives to improve upon the study questions, distribution of the study and the reporting of the data collected. Below is a timeline detailing BC Management s eight years of business continuity reporting expertise First BC Management Study Launched BC Management's first annual business continuity management study was launched. The study focused exclusively on the factors that impact compensations within business continuity and related disciplines Program Management Section Added The study expanded to also include issues of importance in managing a business continuity program. BC Management published the first Business Continuity Management Benchmarking report Study Gained International Recognition BC Management launched an international distribution campaign to increase respondents worldwide. For the first time BC Management published customized business continuity compensation reports for Canada, the United Kingdom, India, and Asia Pacific. BC Management began offering customized program management benchmarking reports tailored to a companies specifications including, but not limited to industry, revenue, number of company employees and or number of company locations Study Elevated with Benchmarking Advisory Board and Advancement in Reporting The BC Management International Benchmarking Advisory Board * was formed to review the study and reporting to ensure it reflects topics of importance. WorldAPP Key Survey, a leader in survey technology, was selected to host the on-line study and assess the data. The reporting technology built into the study has significantly enhanced our ab ility to assess the data and thus given BC Management the ability to offer a true business intelligence dashboard assessment tool tailored for business continuity. The study was distributed in 5 languages, including: English, Spanish, French, Japanese and Chinese. * The advisory board is composed of 20 international thought leaders coming from the United States of America, Canada, Latin America, the United Kingdom, Singapore, Australia, China, Japan, and India. Our board encompasses not only business continuity, but also risk management, emergency management, high availability and environmental health and safety. Study Methodology The on-line study was developed by the BC Management team in conjunction with the BC Management International Benchmarking Advisory Board. WorldAPP Key Survey, an independent company from BC Management, maintains the study and assesses the data collected. Participants were notified of the study primarily through e-newsletters and notifications from BC Management and from many other industry organizations. The focus of the study was on IT Resiliency planning initiatives, which includes budgets, dedicated personnel, data backup, disaster recovery sites, exercises, plan development, training, program management, integration with IT operations and much more. All participants are given the option of keeping their identity confidential. Assessment of Data & Reporting BC Management reviewed and verified the data points received in the study. Data points in question were confirmed by contacting the respondent that completed that study. If the respondent did not include their contact information, than their response to the study may be removed. With our fourteen years of expertise in collecting and assessing such data points, BC Management has an exceptional understanding of what is considered questionable or unintelligible data. Study respondent contact information remains confidential and is never revealed. Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 4

5 Participant Data & Respondent Characteristics 193 study professionals from 20 countries participated in the study assessment from July 26, 2016 to September 17, Incomplete/ partial study responses were included as appropriate within the report. Complete responses were received from the following countries: Australia, Canada, Colombia, Costa-Rica, Croatia, Denmark, Germany, Guatemala, Greece, India, Japan, Mauritius, Mexico, New Zealand, Saudi Arabia, Singapore, Spain, United Arab Emirates, United Kingdom and United States of America. Company Gross Revenue (Before Expenses) in USD 18% 17% % 8% 1 8% 2% Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 5

6 Participant Data & Respondent Characteristics Continued Number of Company Locations - Corporate/ Operational Functions (Operational, Financial, Manufacturing, Distribution, etc) 3 27% % Number of Company Locations - Retail/ Customer Interfacing (Outlets, Call Centers, Stores, etc) 4 38% % Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 6

7 Participant Data & Respondent Characteristics Continued Distribution of Company Locations % 1 12% 17% Citywide Statewide/ Province Regional (within one country) National (one country) Regional (multi country) Global Number of Company Employees % 8% 2% 7% 2% Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 7

8 Participant Data & Respondent Characteristics Continued Percent of Respondents by Industry Exceeds 10 due to Multiple Selections % 7% 7% 7% 2% 2% 2% 2% 2% 2% 2% 2% 2% 2% 2% Other Industries Noted Include: Data Information, Distribution, Food & Beverages, Government contractor, Insurance Rating Agency, Insurance-Life, Media, Publishing, Information Solutions, Medical Supplies distribution, News, Legal & Tax & Accounting Information Services and Secure Content sharing Percent of Respondents by Job Title % 2% 2% Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 8

9 Participant Data & Respondent Characteristics Continued Level of Separation from Executive Management % Number of Datacenter Locations (Including Virtual Datacenters, Cloud, etc) % None More than 10 7% 1 Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 9

10 Participant Data & Respondent Characteristics Continued Datacenter Distribution % 1 17% 2 7% Citywide Statewide/ Province Regional (within one country) National (one country) Regional (multi country) Global Thank you to BC Management s International Benchmarking Advisory Board BC Management s International Benchmarking Advisory Board was instrumental in reviewing the study to ensure it focused on the topics that are of the greatest interest to continuity professionals today. The goal was to develop a credible reporting tool that would add value to the business continuity profession. A full listing of board members may be viewed at Thank you to our sponsors and organizations that assisted with this global effort A special thanks to our sponsoring organizations that assisted in translating our study. Without these organizations the study may not have been available in Chinese, Japanese and Spanish. Global Data Solutions LTD Sponsored the Chinese translation Risk Managers and Consultants Association Sponsored the Japanese translation MiaTomi Sponsored the Spanish translation Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 10

11 Distributing Organizations BC Management also greatly appreciates the efforts of those organizations that assisted in this global effort. The contribution of each individual organization does not indicate an endorsement of the study findings or the activities of BC Management, Inc. A full listing of distributing organizations is available on the complimentary IT Resiliency Planning Assessment and made available to those respondents who completed the BCM Annual Study. About BC Management, Inc. BC Management, Inc., founded in 2000, is an executive staffing and research firm solely dedicated to the business continuity, disaster recovery, risk management, emergency management, crisis management and information security professions. With decades of industry expertise, our staff has a unique understanding of the challenges professionals face with hiring, benchmarking and analyzing best practices within these niche fields. We Value Your Comments - Thank you for participating in our annual study. Your contribution adds value to our comprehensive reporting and allows us the opportunity to assess industry trends. Please share any comments or suggestions on how we can improve at info@bcmanagement.com. Customize Your Compensation and/or Program Management Benchmarking Report As a result of our advancement in reporting technology with World APP Key Survey, BC Management is able to offer a true benchmarking service exclusively for the business continuity management profession. Our benchmarking service includes a report (similar to this report) customized to your specific filters used to drill down to the data points that compare to your compensations or program planning initiatives. COMPENSATION RESEARCH DATA: Benefits of Our Customized Compensation Benchmarking Service Saves time and money in assessing compensations for current and future personnel. Provides a fair comparison on compensation bands based on expertise, degree, certification and geography. Assists in retaining current personnel based on compensations in the same geography and job title. Filters Available to Customize Your Compensation Report Employment Status may choose from full-time permanent, part-time permanent, independent contractor and unemployed. Geography may choose country, state/providence, or city. Job Title/ Position may choose from a selection of job titles. Discipline may choose multiple disciplines that are managed with the program (17 to choose from). Years of Experience may choose from an experience band of your choice. PROGRAM MANAGEMENT RESEARCH DATA: Benefits of Our Customized Program Management Benchmarking Service Allows you to assess the maturity of your business continuity program focusing on industry best practices, dedicated staff, budget breakouts, reporting structure, vendor utilization, program activation and much more. Provides assistance in presenting business case objectives to your executives to substantiate and expand your program. Prioritizes key initiatives in elevating the maturity of your programs. Assists in building a road map to advance your program and meet your goals. Makes you more efficient by eliminating the need to do research on your own. Provides an unbiased source on how your company compares to the industry; specifically other like organizations, which can be used to support your recommendations. Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 11

12 Filters Available to Customize Your Program Management Report Industry may choose more than one industry. Company Revenue may choose a revenue band of your choice. Number of Employees may choose a selection from number of company employees. Number of Locations may choose a selection from number of company locations in either operational and/or retail interfacing. Geographic Distribution may choose multiple countries as well as how the company locations are dispersed (global, multicountry, one country, regionally within one country, statewide or citywide). Disciplines within program may choose multiple disciplines that are managed with the program (17 to choose from). Scope of program may choose a combination of the following: global, multi-country, one country or regionally within one country. Maturity Rating of Program may choose on a scale of 1 to 5 with 1 being Very Immature and 5 being Very Mature (please note this is a self-rating by the study participant). Names of Organization may choose a list of company names that have participated in our study and completed the program management portion of the study. Please keep in mind that not all respondents indicated their company name. Many respondents kept their organizational name private. Also, not all study respondents qualified for the program management portion of the study. Only those respondents who managed a program were encouraged to participate in the second section of the study. ALL RESPONDENT CONTACT INFORMATION IS KEPT CONFIDENTIAL AND IS NEVER REVEALED! Inquiries For more information or to order a report please us at info@bcmanagement.com or call us at (714) or toll free within the United States (888) Copyright 2016 BC Management, Inc. All rights reserved. TABLE OF CONTENTS IT Resiliency Assessment Page 12