ISD Banner

ISD Recovery and Resiliency Framework Activities

The following is a summary of each primary activity on the Recovery and Resiliency Framework in which Information Systems is designated the lead agency:

CP 4.4.1 Identify primary County technology infrastructure, business systems, and critical facilities needed to support the essential services and critical business operations.

Intends to address:

  • Loss of network connectivity including internet
  • Loss of core productivity applications including email, electronic documents, SharePoint
  • Loss of enterprise and line of business applications and services due to a compromised ISD Data Center (would impact everything from 911 and Computer Aided Dispatch to Financial Systems and County Websites).

 Planned efforts for next 18 months:

  • Assess the completed Continuity of Operations Plan (CP 4.1.1) to determine IT Resiliency expectations for the various Business Applications in use throughout the County. Preparatory work has started.
  • Prepare Initial Essential Systems report for review and concurrence by departments.
  • Research and procure software tool to support 4.4.2 which will efficiently define complex technology dependencies for each of the Essential Systems.

CP 4.4.2 Identify community infrastructure and utility services that are essential to the operation of the County technology infrastructure and systems.

Intends to address:

  • Loss of electrical power and internet carrier services to the ISD Data Center that would impact services.

Planned efforts for next 18 months:

  • Primary utility and telecommunication services have been reviewed to determine potential risks.
  • Development of priorities and work plans pending resources.

CP 4.4.3 Assess risks and hazards that currently exist in the County technology infrastructure and community infrastructure and utilities.

Intends to address:

  • Critical Facility Redundant Internet Feeds and Pathways
  • Critical Internal Facility Power Retrofit
  • Critical Facility Power Retrofit (Transfer Switches)
  • Critical Facility Redundant Grid-Power Feed to Campus/Data Center
  • Hardening of Wireless Communications Infrastructure

Planned efforts for next 18 months:

  • Prepare Business Impact Analysis (BIA) for County technology infrastructure and community infrastructure and utilities.
  • Document and harden current infrastructure and utility disaster exposure through the Hazard Mitigation Grant Program as we implement modernization projects to address technology and community infrastructure and utilities.
  • Notice of Intend has been approved for several projects.  ISD will complete applications to help fund the activities.
    • Project Number:  DR-4382-0258, Critical Facility Redundant Internet Feed
    • Project Number:  DR-4382-0260, Critical Facility Power Retrofit
    • Project Number:  DR-4382-0261, Critical Facility Power Retrofit
    • Project Number:  DR-4382-0267, Critical Facility Redundant Power Feed
    • Project Number:  DR-4382-0252, Hardening of Wireless Communications Infrastructure

CP 4.4.4 Prioritize technology infrastructure modernization projects that directly relate to mitigating risks for points of failure that affect accessibility and scalability of critical business systems.

Intends to address:

  • Implement hazard mitigation projects and modernization plans that improve IT resiliency across critical business systems.

Planned efforts for next 18 months:

  • Resilient Architecture: Virtualizing critical server, storage, and database structures to allow movement of service delivery between data centers and cloud providers.  Implementation will allow the shifting of workloads (compute, storage, application hosting) to available resource based on disaster scenario. This will improve dramatically time-to-recover after data center failure.
  • Network Connectivity:  Revise network architecture to ensure access to Internet and to applications running offsite by adding circuits to ensure diverse paths and automated rerouting of traffic. Implementing this design would allow off-campus remote sites to continue to access Internet and cloud services even if the ISD Data Center and County campus were unusable. This is also a requirement to shift enterprise and line of business solutions to the cloud.
  • Core Productivity Applications: Microsoft offers cloud hosting services for email and document storage known as Office 365. Using Office 365 would protect email and documents from local disaster events affecting Sonoma County, since the data would be stored in secure facilities out-of-state.
  • Enterprise and Line of Business Applications and Services: ISD stores backup copies of our data and systems outside Sonoma County using a physical data center and cloud services. Implementing improved availability and recovery solutions to run enterprise and essential line business applications at other physical sites or in the cloud will be proposed and prioritized over the period.

CP 4.1.1 Establish priorities for essential services and critical business operations during and after a disaster or multi-hazard event (FES Lead).

Planned efforts for next 18 months:

  • Assist County Departments in coordination with the Emergency Management Department to develop IT component of Continuity of Operations Plan (COOP)
  • Facilitate Business Impact Analysis (BIA) for customer applications and critical business processes
  • Partner to identify and implement EOC operations solutions to replace and enhance functional capabilities of the command structure, e.g. logistics database, event log systems, staffing tools, GIS scenario templates, dash boards for situational awareness, etc.

In addition to activities in which ISD is the lead agency, we will continue to partner and support technology needs for Office of Recovery and Resiliency Framework activities related to modernizing systems for the EOC, public notification, the SafetyNet (ACCESS Sonoma County project), and support for activities defined under the Housing and Natural Resources areas as well.

Download the printable version