Consider as well that disaster recovery planning
"It isn't sexy, and nobody cares about it until something bad happens," United States Tennis Association CIO Larry Bonfante said, speaking at last week's CIO Decisions Conference. "People don't want to talk about this stuff."
They don't want to pay for it, either. Bonfante hosted a discussion on how CIOs can lead the creation of a business continuity plan. Nearby, Charles Kramer gave tips on convincing CEOs and CFOs to pay for disaster recovery.
"Typical ROI doesn't work, so you need to come up with other metrics to show why these projects have value," said Kramer, senior vice president and CTO at Social and Scientific Systems Inc. in Silver Spring, Md.
"Go to Google, go to 'news' and put in things like TJX," Kramer said, referring to the massive data breach at The TJX Cos Inc. in 2006.
But on top of all the advance planning comes a series of political maneuvers, Kramer said, including bringing business department heads into the fold and resorting to creative tactics. He recounted scheduling one meeting just minutes before a planned fire drill. Once outside the building he invited executives to a diner to finish the meeting. He hypothesized to them that the fire had been real, that they couldn't go back in the building. Then he pitched his disaster recovery plan.
"All that stuff changed very quickly, and I got an almost blank check," he said.
In some cases, straight-on scare tactics might be appropriate. Mention recent area disasters, Kramer said, and ask how the company would continue should it face such a travesty. But Kramer added caution.
"The one thing about fear is it's not something you can use very often," he said. "You can only go to that well so many times."
Bonfante hit a similar note in his talk, advising CIOs to pitch the importance of a business continuity plan by mentioning real disasters -- weather, terrorism, the failure of a power grid, even a bird flu outbreak among employees.
"I got a lot of traction off Katrina," Simpson said. "9/11 rose their eyebrows, but Katrina woke them up."
"I find the checks fly very fast when you're reacting to something," he added.
Simpson said he takes notes on each disaster recovery pitch he makes and reviews them before making the next one. Most often, you'll lose, but the issue is too crucial to give up, he said.
"Don't be afraid for them to tell you 'no,'" he said. "Just bring it in, throw it at them, because eventually it will get approved."
Let us know what you think about the story; email: Zach Church, News Writer