John A. Witkowski, MBCI

*** **** ****** 443-***-****

Berlin, Maryland 21811 qelj69@r.postjobfree.com

PROFILE

Expert in the development and implementation of the most effective of Disaster Recovery Plans for large-scale organizations, in both public and private sectors.

Extensive experience in designing Business Recovery Plans that not only ensures swift recovery of business processes after a disaster, but continuation of critical functions during the disaster itself.

Wide-ranging Project Management skills with a proven record of accomplishment of success.

Well-experienced in the development of data centers, network operations and call centers.

Vast international experience, including direct support of public/private sector organizations in the Middle East during the First Gulf War.

Working knowledge of LDRPS, Paragon and COOP planning software.

EDUCATION, CREDENTIALS & AFFILIATIONS

MASTER OF BUSINESS ADMINISTRATION & EDUCATION 1977

Pepperdine University, Los Angeles, California

BACHELOR OF SCIENCE, BUSINESS & EDUCATION 1973

Wayne State University, Detroit, Michigan

CERTIFIED BUSINESS CONTINUITY PROFESSIONAL (MBCI) 2001

Various FEMA Training Courses

Member, Board of Directors for the Great Lakes Business Continuity Recovery Group

Member, Board of Directors of Nations, Inc.

Contributing author to “Crisis Management for the Automotive Supply Chain,” published by the Automotive Industry Action Group (AIAG), 2003

Founding Member and Vice President, Board of Directors of Software Valley, Morgantown, West Virginia

Member of the National Contract Management Association

Life Time College Teaching Credentials

Licensed Building Contractor State of California

Working knowledge of Paragon, LDRPS and COOP planning software

PROFESSIONAL EXPERIENCE

AT&T 2008 - Present

Senior Technology Security Manager - CSO

Member of the SAS 70 and PCI audit teams

Provides second tier technical support, vendor coordination, software development, initial product

configurations and develops management methods for all installed technical security products.

Develop, test and maintain Business Continuity/Disaster Recovery plans for various business units.

Manage and develop technology plans to set and communicate technology directions for security and/or contingency planning.

Authentication Processes, Single Sign On and Encryption and provides consulting, advice and direction in specific product implementations.

JOHN A. WITKOWSKI PAGE TWO

PROFESSIONAL EXPERIENCE (continued)

AT&T 2008 -2009

Senior Project Manager – CSO – Integrated Services

Legacy USi, Information Assurance Group

Team lead on converting AT&T from the old SAS 70 guidelines to the company implementation of

SSAE 16 and ISAE 3402.

Disaster recovery planning, review and exercise of key applications.

Merger and integration team

Developed viable recovery strategies for fourteen business units to support the recovery of all business and technology during disasters.

Collaborated with management to determine acceptable risk levels; assisted business units in developing business impact analyses.

Defined and maintained the plan approval process; established, implemented and maintained plan audit program (self-audit policies and schedules).

Developed tested and maintained detailed Emergency Response and Command & Control Procedures; in the event of the need to execute a recovery plan, designated to serve as the coordinator of the establishment of the Command Center.

Member of the metrics team

Assess strategic technical plans and evaluate various technology issues.

Manage and develop technology plans to set and communicate technology directions for security and/or contingency planning.

Provide technical expertise and leadership supporting projects involving the implementation of the Corporation's technical security architecture.

Serve as a subject matter expert on various technical security products and methodologies such as Firewalls, Authentication Processes, Single Sign On and Encryption and provides consulting, advice and direction in specific product implementations.

Provides second tier technical support, vendor coordination, software development, initial product configurations and develops management methods for all installed technical security products.

Develop, test and maintain Business Continuity/Disaster Recovery plans for various business units.

Provided end-to-end project management and/or program management throughout the lifecycle of a project / program by directing the efforts of project/program team(s) using dotted-line authority to deliver a completed project and/or service.

Accountability for managing concurrent high complexity projects and/or programs, which may span multiple regions, functions and/or business units.

Responsible for detailed planning including program/project structure & staffing, estimating, resource allocation and assignment, detailed scheduling, critical path analysis, consolidating project plans.

Direct project and/or program activities utilizing the organization's standard processes to ensure the timely delivery of stated business benefits, comparing actuals to plans and adjusting plans as necessary. Assess, plans for, and manages project/program risks including mitigation & contingency plans; manages issues, jeopardizes, escalations and problem resolutions.

Define project/program scope and ensures changes to scope and deliverables are managed using the change control process.

Act as liaison with client and IT leadership, providing communication and status regarding the progress of the project/program.

Utilizes knowledge of business, industry and technology to incorporate business process improvements into the organization and/or to develop business strategies and functional/business/technical architectures.

JOHN A. WITKOWSKI PAGE THREE

PROFESSIONAL EXPERIENCE (continued)

BCRS, INC 2007 – 2008

Senior-Level Consultant, Business Continuity, Disaster Recovery Services & Crisis Management

Identified potential risks and controls to mitigate risks to the organization’s ability to conduct daily

business.

Collaborated with management to determine acceptable risk levels; assisted business units in developing business impact analyses.

Identified critical business processes and established acceptable recovery time periods, expected losses

and other contingencies.

Developed viable recovery strategies for business processes to support the recovery of business and

technology after disasters while still maintaining ongoing operations.

Managed contractual agreements for Disaster Recovery services including RFP’s; ensured that such

contracts were in place and reflected current technical configurations as well as provisions for

sufficient capacity for testing/recovery.

Developed tested and maintained detailed Emergency Response and Command & Control Procedures;

in the event of the need to execute a recovery plan, designated to serve as the coordinator of the

establishment of the Command Center.

Defined strategies for initial on-site activities including identification of methods for the protection of

all organizational assets.

Ensured corporate awareness of the Disaster Recovery Program by establishing and implementing a

training program for all employees.

Developed and implemented testing strategies to addresses critical systems including definition of

exercise goals/objectives

Defined and maintained the plan approval process; established, implemented and maintained plan

audit program (self-audit policies and schedules).

Established and implemented an innovative method of ensuring that new equipment, processes,

services and systems were addressed from a Disaster Recovery perspective.

Developed and implemented a yearly budget plan in conjunction with senior leadership.

IBM GLOBAL TECHNOLOGY - Consultant 2006 – 2007

Senior-Level Consultant with IBM’s Business Continuity & Security Services

Supervised the audit and hot site testing of Disaster Recovery and Business Continuity Plans for a large worldwide manufacturing company.

Key player in the development of a Crisis Management Plan for a large US insurance company; developed and deployed various checklists for the Crisis Management Team; developed requirements for the Crisis Management Center Command Center; audited the Tabletop Testing Exercise Scenario used to train and educate senior management; and verified compliance with all organizational and Sox policies.

Developed a Recoverability Gap Analysis for a major southern university; audited the following current recovery capabilities: current state of daily operations as it relates to recoverability; general Disaster Recovery readiness; validation of recovery objectives; identification of high-level recovery alternatives; and confirmation of compliance with all policies, procedures as required by the State. Conducted a risk and threat analysis against the current data center and developed recommendations for the improvement of security, maintenance and general operations of the current location.

Directed and coordinated the implementation of a large Maryland Operation and IT Disaster Recovery/Business Continuity Program for a large lobbying group; developed and modified plans for the Maryland Operations and IT groups and their current Business Continuity/Disaster Recovery Program; developed a Gap Analysis; collaborated with the program managers to structure the project and manage the Business Continuity/Disaster Recovery Program elements.

JOHN A. WITKOWSKI PAGE FOUR

PROFESSIONAL EXPERIENCE (continued)

VERIZON TELECOMUNICATIONS COMPANY 2006 - 2006

Senior Staff Consultant - Global Network Operations Center

Executed multiple services and provided input to the development and maintenance of the BCP/DRP offerings in support of a worldwide banking institution.

Served as the primary BCP interface with the Network Operations Center (NOC) for Amsterdam, London and Brazil.

Reviewed various customer site Disaster Recovery/Business Continuity Plans; advised and documented whether the individual recovery plans met audit requirements.

Reviewed 120+ tier one site worldwide and audited their compliance with the bank’s standard policy requirements.

Developed standard test and validation procedures for both the NOC and SOC.

Wrote procedures used to interface with key vendors and other subcontractors during a disaster or simulation.

CGI - CONSULTING 2004 – 2005

Senior Consultant – State of Ohio

Established a comprehensive open system Disaster Recovery Program.

Executed multiple services: Business/Application Impact Analysis; Risk & Threat Assessments; and Alternate Processing Options Analysis for a State agency.

Facilitated an Information Protection Analysis; reviewed and documented data protection practices and procedures; created a Disaster Recovery Plan template used to develop a comprehensive open systems recovery plan.

FEDERAL MOGUL AUTOMOTIVE SUPPLIER 2003 – 2004

Program Manager, Business Continuity

Managed a comprehensive Business Continuity Development and Implementation Plan for 142 locations worldwide.

Ensured successful program implementation by educating and training employee’s at all organizational levels in all locations.

Developed company-wide business impact and risk assessments through creation of a software database program.

Audited programs within IT for compliance with State, Federal and international requirements.

Developed and audited company-wide business impact and risk assessments while creating a long-term Business Impact Analysis Process.

Implemented a Business Continuity Program for a major data center in the US, UK and other international sites.

Developed and implemented a back-up power plan for all domestic and international locations to enhance business continuation.

Directed business impact and risk assessments; served as the Subject Matter Expert for all Business Continuity and Disaster Recovery issues.

Ensured high-level cooperation through regular communication with the Executive Board and the CEO.

Coauthored the first supply chain business continuity and disaster recovery document for tier two and three automotive suppliers.

JOHN A. WITKOWSKI PAGE FIVE

PROFESSIONAL EXPERIENCE (continued)

SCHERING PLOUGH PHARMACEUTICAL COMPANY 2001 – 2003

Program Manager, Disaster Recovery

Established a comprehensive Disaster Recovery Program and managed all Disaster Recovery initiatives for the Corporate Information Systems Division.

Directly supported activities for five US centers and various global data centers locations while managing Disaster Recovery budgets.

Coordinated an enterprise-wide Business Impact Analysis and Applications Impact Analysis that encompassed all organizational applications and hardware.

Established a sustainable Business Impact Analysis Program for long-term Disaster Recovery efforts; developed a Business Continuity Program for all data centers and implemented risk assessments.

Ensured success of emergency plans by collaborating with Local, State and Federal agencies.

Established company-wide emergency communications by developing a corporate Disaster Recovery Website.

Created hot site testing activities for LAN/WAN, midrange and mainframe systems in collaboration with data center management and vendors.

Collaborated in the development of a global back-up communications plan; developed Disaster Recovery strategies for corporate managers.

AT&T TELECOMUNICATIONS 1999 – 2001

Assistant Manager, Disaster Recovery

Established a comprehensive Disaster Recovery program; managed all Disaster Recovery initiatives for five US data centers.

Developed Business Continuity and Disaster Recovery strategies for failover call centers, network monitoring operations centers.

Served as liaison between senior management and State/Federal compliance teams.

Directed risk assessments for 75 US locations while providing remediation strategies to strengthen weaknesses.

Improved survivability of IS operations through implementation of Disaster Recovery strategies; developed support teams by instituting a regular training program.

Direct support of LNS network operations center.

Managed 17 team members within Local Network Services; developed and implemented company-wide Disaster Recovery and Business Continuity strategies.

Directed team of field engineers in installation of equipment to support nationwide systems.

Supported installation through participation in site selection, construction and inventory management; ensured integration of proper HVAC and power equipment at vital nodes.

Supervised hiring, training, staff evaluations, proposal development and project budgets; created policies and procedures to ensure effective contingency planning.

Created and implemented a Y2K contingency planning program by assessing 200+ potential strategies.

NATIONS, INC., MILTIARY CONTRACTOR 1985 – 1999

Vice President of Finance and Administration

Established a comprehensive Disaster Recovery Program for numerous government agencies.

Managed all procurement and negotiations for all contracts.

Developed a company of 450 system engineers worldwide.

Negotiated various contracts from cost-plus to fixed-price.

Assisted in the development and response to various RFP’s worldwide.

Strong expertise with most government contract types.

Team lead on various military and government monitoring systems.

JOHN A. WITKOWSKI PAGE SIX

PROFESSIONAL EXPERIENCE (continued)

During Desert Storm/Desert Shield, led a team of 25 contractors in Saudi Arabia; instrumental in developing and implementing Business Continuity and Disaster Recovery plans for both military and civilian units in Desert Storm/Desert Shield.

Made presentations to senior-level management ranging from the joint unified commanders as well as numerous general officer briefings.

Traveled extensively around the world in many managerial, sales and production capacities; wide exposure and immersion in a variety of world cultures.

Negotiated contracts in Australia, Austria, Korea, United Arab Emirates, Saudi Arabia, UK, France, Germany and the Chec Republic.

Cleared to the TS/SCI level (no longer current).

Contact this candidate