[Mission & Objectives]
[Strategic Plan For Information Security]
Information Security Services
[Statewide Policies and Guidelines]
[Security Standards Deviation Reporting]
[Statewide Security Initiatives]
[Antivirus Tools and Updates]
[Information Security Portal]
[Security Documentation]
[2004 Security Assessment]
[Emergency Alerts]
[Incident Management]
[Information Security Incident Reporting]
[NC-ISAC]
Risk Management Services
[Continuity of Operations and IT Business Continuity]
[Internal Audit Charter]
[Risk Management Services ]
[Business Continuity Software Updates and Training]
[State Chief Information Officer]
[Office of Information Technology Services]
State agencies need support and assistance to identify the benefits and opportunities that the consolidation of IT infrastructure services will offer them. N ew Risk Management, Business Impact Analysis, Business Continuity, and automated notification tools and techniques will be evaluated and implemented along with the appropriate training. As the Second Data Center becomes operational in January 2008, agencies will need to update their business continuity and disaster recovery plans to reflect the new direction for these services provided by ITS. The Office of Information Technology Services (ITS) is the custodian of an enterprise license for two Strohl Systems business continuity planning tools that assist agencies in meeting the requirements of NC General Statute 147‑33.89, Executive Order 102 and Executive Order 118. The BIA tool helps agencies gather pertinent information on potential threats and essential business processes, identify and understand their vulnerabilities and determine the resources that must be protected and recovered. With this information, agencies can use the second tool, LDRPS, to develop and maintain viable business continuity plans, including continuity of operations (COOP), continuity of government (COG) and pandemic plans that document appropriate strategies and identify resources (people, hardware, software, vital records, etc.) for restoring key services. Executive Branch Agencies are required to submit an IT Business Continuity Plan each year in June to the State CIO, therefore timing of the upgrade is critical. Users will need adequate time to install and acclimate to the newer web-based version, migrate their data from the older version, test the upgrade, train end-users, and prepare next year’s plan by June 2008. The completion of this upgrade initiative could take approximately 18 months at which time the state’s current version of business continuity software would be unsupported. Many agencies want to start to use the web based upgrade as soon as possible. The upgraded BCP tools will enable ITS to rollup consolidated agency plans into an enterprise plan which is a much needed feature. The upgraded functions of the new tool set will help them to identify and mitigate risks