Gartner Security & Risk Management Summit

Risk Management & Compliance Program

How does the enterprise ensure continuing operations, systems availability, and plan for recovery when something goes wrong…goes wrong…goes wrong? These sessions help organizations anticipate the unanticipated and work to reinforce a discipline of continuity in the corporate culture.

Sessions

Operations Resilience: How Achievable Will It Be?

20 June, 2011 (11:30 AM - 12:30 PM)

This presentation takes a look forward at the phased transition from recovery-centric to resiliency-centric operations management. The overarching business objective is improved operations agility across a dispersed and electronically integrated organization. The impact of virtualization technology, nascent public cloud services and improved management automation on facilitating this transition will be discussed.

Building Resilience into the Development Life Cycle

20 June, 2011 (02:30 PM - 03:30 PM)

All too often, the management of applications and business process recovery are only considered following the completion of production turnover. However, given the fact that most new applications are implemented to improve business operations and competitiveness, improvements specific to maintaining a high degree of applications resilience need to be baked into the application logic and support procedures from Day 1. This session will discuss best practices for integrating recoverability and resilience into the systems development life cycle.

Roundtable: Crisis Management (PLEASE STOP BY THE ONE-ON-ONE SCHEDULING DESK FOR ADDITIONAL AVAILABILITY)

21 June, 2011 (08:15 AM - 09:15 AM)

This AUR provides an opportunity for conference participants to discuss best practices in crisis management.

Standards Comparison: BS 25999, NFPA 1600 and ASIS SPC.1-2009

21 June, 2011 (08:15 AM - 09:15 AM)

The US PS-Prep program has to-date chosen three standards against which an organization can obtain BCM certification: BS 25999, NFPA 16000 and ASIS SPC.1-2009. This presentation reviews and compares the three standards so that an organization can chose the best standard for their level of BCM program maturity.

Roundtable: Achieving your IT Resilience Goals (PLEASE STOP BY THE ONE-ON-ONE SCHEDULING DESK FOR ADDITIONAL AVAILABILITY)

21 June, 2011 (10:45 AM - 11:45 AM)

This AUR provides an opportunity for conference participants to discuss how virtualization, 24x7 availability, data replication and other technologies can assist the IT DRM program.

Social Software and Recovery

21 June, 2011 (10:45 AM - 11:45 AM)

Social software can benefit and inhibit recovery operations: the extended communications channels can better distribute vital information about impacted people and operations so that the right resources get to the right place at the right time. On the other hand, social software can greatly impact the reputation of the organization's recovery as anyone who has something to say about your recovery operations can say it in a very open forum. This session explores the do's and don'ts of using social software for recovery purposes.

Uptime All the Time

21 June, 2011 (02:00 PM - 03:00 PM)

The increasing speed of business demands around-the-clock availability for mission-critical applications and IT services. Meanwhile, the proportions of mission-critical applications are growing, due to application integration and componentization, and they are being changed and enhanced more frequently due to rapidly changing business requirements and the use of more agile development methodologies. The result can be increased application and business process downtime if resiliency strategies, architectures and processes are not well developed and executed. If your business is demanding higher levels of availability—or 100% availability, you will not want to miss this presentation.

Net It Out: BCM Strategic Planning Assumptions Uncovered

21 June, 2011 (04:30 PM - 05:15 PM)

Strategic Planning Assumptions – SPAs – are a key Gartner deliverable. This rapid-fire session will review the SPAs related to BCM and IT DRM, including: organization certification, cloud computing and more

BCM Software Marketplace Review: Emergency Mass Notification Services and BCMP

21 June, 2011 (04:30 PM - 05:15 PM)

BCM software usage is growing year over year. This session presents the marketplace for emergency/mass notification services (EMNS) software.

Case Study: Domestic Homeland Terrorism Threat

22 June, 2011 (08:30 AM - 09:30 AM)

Mr. Giuliano’s presentation will cover an overview of the terrorism threat to the Homeland and the FBI’s responsibilities in detecting, deterring, and defeating this terrorism threat.

Disaster in the Cloud

22 June, 2011 (11:00 AM - 12:00 PM)

Cloud computing is putting their eggs into someone else’s experimental basket. Data within externally provisioned services is vulnerable to provider business failure, hackers, other customers, and even cascading failure, in very different ways from traditional in-house computing. It is impossible to verify comprehensive backups exist, or that data loss recovery is possible. Vendor viability, transparency and performance should be significant concerns when your software, data, processes, configuration, templates, and backups are all located within the cloud of a company whose business goal is to make it impossible for you to leave. (a version of this pitch scored 4.59 as the closing keynote in London).

Roundtable: Mobile Applications and Recovery (PLEASE STOP BY THE ONE-ON-ONE SCHEDULING DESK FOR ADDITIONAL AVAILABILITY)

22 June, 2011 (01:30 PM - 02:30 PM)

This AUR provides an opportunity for conference participants to discuss how applications can be fine-tuned for mobile devices making recovery easier for the entire workforce.

Modernizing Recovery into Resilience

22 June, 2011 (01:30 PM - 02:30 PM)

This presentation discusses the substance of disaster recovery modernization initiatives, along with its associated business, technology and operations drivers . The related operations resilience improvement case will also be discussed, along with specific guidelines for project justification and execution.

Case Study: Mobile Technologies In Disaster Recovery

22 June, 2011 (04:00 PM - 05:00 PM)

Remote access will play a critical but erratic role during business disruptions. This session assesses the landscape of technologies available and their readiness to help with each phase of a disruption with emphasis on real case studies. Supporting work practices to be considered include integration of Telework with EMNS, use of personal and ad hoc equipment, and VPN scalability.

Workshop: BCM Maturity (Pre-Registration is now closed, please stop by the Information Desk for additional availability)

23 June, 2011 (08:30 AM - 10:00 AM)

Using ITScore for Business Continuity Management, this workshop allows each organization to assess their current level of maturity of the BCM program.

Workshop: KRI Development (Pre-Registration is now closed, please stop by the Information Desk for additional availability)

23 June, 2011 (10:15 AM - 11:30 AM)

Using the Gartner Business Value Model, this workshop help you develop your own set of organization-specific KPIs and KRIs for availability.