What is the object of the project?

This sub-project (Sub-project 1) consists in preparing a study and implementing the actions necessary to ensure Business Continuity across Public Administration, so that the employees of any public sector entity to be included in this action are able to carry out their work tasks remotely in a secure manner. The project will look into the needs for the entire Public Administration. It is part of the broader action to enhance the security of public sector information, which provides for the procurement of approximately 1,150 laptops, 4G/5G connections from an Internet Service Provider (ISP) and a VPN connection via the SYZEXIS network.
The project will initially look into the needs of the entire public sector and develop a Business Continuity Plan for the entire public sector, whereas the relevant actions to be implemented in the initial phase will affect an pilot ‘group’ of employees, i.e. the employees of the Ministry of Digital Governance.

More specifically, the purpose of the study consists in analyzing the various activities, taking stock of what is needed to carry out the activities successfully, and predicting the potential consequences in case of unexpected outage of a public sector activity. As part of this study, a Business Impact Analysis will also be drawn up. In preparing the analysis, the project team will map in detail the activities relating to the following:

• Critical importance of each activity for the overall success of the investment.
• Analysis of the resources used and necessary for the effective execution of each activity, both during normal operation and in case of emergency, in the following main axes: o Human resources
  o Facilities
  o Technology & IT systems
  o Third parties and suppliers
• Assessment of the potential consequences of each activity outage.

The following will also be defined for each activity:

• the maximum permitted duration of an activity outage;
• the maximum acceptable time for recovery of an activity after an incident that has caused outage; and
• the maximum acceptable time limit for data loss.