Business Continuity Position Description

1 For internal use of MIT only. Business Continuity Position Description February 9, 2015 February 9, 2015 Page i For internal use of MIT only. Version 4 Business Continuity Position Description Table of Contents General Characteristics .. 2 Career Path .. 3 Explanation of Proficiency Level Definitions .. 8 Summary Proficiency Matrix .. 9 Proficiency Matrix .. 10 February 9, 2015 Page 2 For internal use of MIT only. Version 4 Business Continuity Position Description General Characteristics Individuals within the Business Continuity Specialist role are responsible for the development, integration and implementation of the enterprise IT Business Continuity (BC) and disaster recovery (DR) management programs. The objective of these programs is to support timely operations recovery following the occurrence of an outage or major disasters, such as fires, earthquakes, floods, biochemical attacks, pandemics, electrical disruptions, and network disruptions which result in the partial or complete disruption of Business operations.

2 These individuals must ensure financial loss is minimized or eliminated and critical customer service capabilities remain operational. The Business Continuity Specialist plans and coordinates Business Continuity and disaster recovery strategies that comply with applicable regulations and organizational priorities. They develop risk management procedures, Continuity scenarios and contingency plans for systems and networks to maintain operations during downtime and/or major disasters. Periodically they test contingency capabilities, report deficiencies, and identify and coordinate resolution of issues. Individuals coordinate all hardware, software and network requirements with backup facility, IT teams, and vendors to ensure the required configurations are in place. They also evaluate and select vendors, and develop service level risk management agreements with Business partners and vendors. Business Continuity professionals must have strong communication skills to effectively collaborate with other recovery team members.

3 In addition, knowledge of Business processes is required. They also demonstrate extensive knowledge in networking, databases and systems operations, and are skilled in complex problem analysis. February 9, 2015 Page 3 For internal use of MIT only. Version 4 Business Continuity Position Description Career Path The following section is intended to serve as a general guideline for each relative dimension of project complexity, responsibility and education/experience within this role. This table is not intended for use as a checklist to facilitate promotions or to define specific responsibilities as outlined in a job Description . Actual responsibilities and experiences may vary. Title Business Continuity Specialist I Business Continuity Specialist II Business Continuity Specialist III Dimension Work Complexity Performs Business Continuity and disaster recovery planning and analysis for low to moderately complex assignments.

4 Works on one or more projects as a team member and supports Business Continuity and disaster recovery activities, sometimes requiring direction and guidance from senior personnel. Performs Business Continuity and disaster recovery planning and analysis for medium to highly complex assignments. Works on multiple projects as a team member and leads Business Continuity and disaster recovery planning components. Leads multiple projects. Assists with strategic direction and coordination of enterprise-wide Business Continuity and disaster recovery efforts. Serves as a subject matter expert in disaster recovery and Business Continuity planning. Typical Responsibilities Business requirements Analyzes technical and Business requirements that drive critical Business functions. Analyzes technical and Business requirements that drive critical Business and ecosystem functions. Analyzes complex technical and Business requirements that drive critical Business and ecosystem functions.

5 BC & DR Planning/ Design/ Implementation Assists with developing and documenting tactical Business Continuity and disaster recovery plans. Provides guidance on Business Continuity and disaster recovery design and implementation for Institute-wide disaster recovery management programs, including maturity models, methodologies, sourcing strategies, plans, metrics and scorecards for all components of the programs. Contributes to designing and implementing the Institute-wide Business Continuity and disaster recovery management programs, including maturity models, methodologies, sourcing strategies, plans, metrics and scorecards for all components of the program(s). February 9, 2015 Page 4 For internal use of MIT only. Version 4 Business Continuity Position Description Title Business Continuity Specialist I Business Continuity Specialist II Business Continuity Specialist III Develops risk management procedures, Business Continuity scenarios, and contingencies and advises on Business Continuity and disaster recovery plans.

6 Identifies and makes recommendations regarding critical points of failure. Recommends changes required to expand recovery plans. Develops risk management procedures, Business Continuity scenarios, and contingencies and advises on Business Continuity and disaster recovery plans. Identifies and makes recommendations regarding critical points of failure. Recommends changes required to expand recovery plans. Reviews select changes to ensure they are appropriately assessed, tested, and incorporated into the larger Institute plan. Ensures Business Continuity and disaster recovery plans are documented and maintained. Contributes to senior management reports on the Business impact, cost, and expectations of the Institute s disaster recovery plan. Assessment Coordinates, assesses and communicates requirements associated with Business impact, Continuity , and recovery. Participates in new activities with appropriate technology groups, resulting in recommendations to enable timely, effective decisions regarding Business impact, Coordinates, assesses and communicates requirements associated with Business impact, Continuity , and recovery.

7 Participates in new activities with appropriate technology groups, resulting in recommendations to enable timely, effective decisions regarding Business impact, February 9, 2015 Page 5 For internal use of MIT only. Version 4 Business Continuity Position Description Title Business Continuity Specialist I Business Continuity Specialist II Business Continuity Specialist III Continuity , and recovery. Continuity , and recovery. Testing Assists in the development and implementation of disaster recovery test plans. Participates in recovery drills. Coordinates the development of disaster recovery test plans, testing, and documentation for each application. Engages application and systems management in disaster recovery testing, objectives and auditing. Participates in and plans recovery drills. Coordinates the administration and logistical procedures for disaster recovery testing, and integration of all enterprise critical systems.

8 Identifies and coordinates resolution of recovery issues. Ensures recovery drills are performed. Analyzes recovery drill performance and recommends changes to plan, as needed. Risk Analysis Performs on-going risk analysis of existing disaster recovery plans and provides feedback. Performs on-going risk analysis of existing disaster recovery plans. Recommends risk management strategies. Performs on-going risk analysis of existing disaster recovery plans that have enterprise-wide impact. Approves and develops risk management strategies. Policies / Standards Assists in developing documentation of policies, procedures and standards. Works with Environmental Health & Safety Office, Facilities, Risk Management Office, Audit, and Office of General Council to implement appropriate policies and standards. Develops and refines documentation of policies, procedures and standards.

9 Works with Environmental Health & Safety Office, Facilities, Risk Management Office, Audit, and Office of General Council to implement appropriate policies and standards. BC & DR Support Assists with the execution of the Business Continuity and disaster recovery plan(s). Assists with the execution of Business Continuity and disaster recovery plan(s). Interfaces with various vendors to ensure rapid recovery such as hardware Oversees the execution of Business Continuity and disaster recovery plan(s). Coordinates with all hardware, software and network requirements with backup February 9, 2015 Page 6 For internal use of MIT only. Version 4 Business Continuity Position Description Title Business Continuity Specialist I Business Continuity Specialist II Business Continuity Specialist III drop ship, records retrieval, and network connectivity. Assists in the restoration of lost service.

10 Facility, IT team and vendors to ensure required configurations are in place. Ensures service level agreement meet Business continuance and disaster recovery planning requirements . Research / Evaluation Assists with Business Continuity and disaster recovery research efforts to ensure current plans reflect industry best practices . Assists with Business Continuity and disaster recovery research efforts to ensure current plans reflect industry best practices . Assists in the evaluation and selection of vendors. Researches technology and processes in the industry to ensure that the enterprise Business Continuity and disaster recovery processes are founded on best practice. Assists in the evaluation and selection of vendors. Training Assists in employee Business Continuity and disaster recovery awareness efforts as needed. Assists in or conducts employee Business Continuity and disaster recovery awareness programs, as needed.