MANAGING ISD

Chapter 6-3
OPERATIONAL
- DISASTER RECOVERY
PLANNING

OVERVIEW

Daily routine life

highly depends
on IT

Incident like Sept

11, Katrina 2005,
tsunami 2004
and other crises
reminders us to
be prepared for
the worst
> DISASTER
RECOVERY

IT disasters can
come in all
shapes and
sizes, hardware
failures,
computer
viruses,
blizzards, floods,
and terrorist
attacks

OVERVIEW
Even though there have solutions to various
outages and failures, such as redundant
servers, backups, transactions logs, but it can
only handle the failure of specific component.
What
if the
entire
environment
fails?
The
key
to good
disaster
recovery is

the
involvement
of
as
many
components and all facets of the
organization
including
every
department, employee, customers,
suppliers

DEFINING
THE SCOPE
Depends on the organization
dependent on IT and how much
money to invest

DEFINING
THE SCOPE
Key questions:
Which critical applications and
services?
How quickly it must recover?
What other scenario to plan for?
How long the interruption to
recover?
How quickly to access the data and
system?

SCOPE
DEFINITION
PHASE

Objective
Recover Time
Objective (RTO)

The amount of time

between the disaster and
when services are
restored

Recover Point
Objective (RPO)
The age, or freshness, of
the data available to be
restored

DISASTER
RECOVERY
COMMITTEE

Depending on the priorities, the involvement of

other department, including:
Finance
Human Resources

The committee can:

Develop the plan (before the
disaster)
Provides leadership and guidance
to the rest of organization (during
the disaster recovery)

Legal
Key User Dept (Mfg,
Customer service)
Building Facilities

APPLICATION
ASSESSMENT

Inventory is a critical tool for disaster

recovery planning
It can be used to assess, along with
other dept

APPLICATION
ASSESSMENT

Set up some guidelines for the

assessment, base on the framework
of the organization priorities
Consideration:
The application
The data loss

Disaster Recovery Plannin

DRP
Communicati
on plan
Regular
updatingkey
and
A plan for contacting
testing
personnel, customers,

Documentati
on

vendors etc

Real estate
and IT
facilities

Hardware
availability
Off site
storage of
data

Disaster Recovery Plannin

DRP
Communicati
on plan
Written material
Regular
describing the
existing
updating
and
environment, procedures
testing
for declaring a disaster,
procedure for reestablishing services in a
disaster recovery mode

Documentati
on

Real estate
and IT
facilities

Hardware
availability
Off site
storage of
data

Disaster Recovery Plannin

DRP
Communicati
on plan
Regular
updating
Where will people
meetand
if
testing
the facility is suddenly

Documentati
on

off-limits, inaccessible, or
out of commission.

Real estate
and IT
facilities

Hardware
availability
Off site
storage of
data

Disaster Recovery Plannin

DRP
Communicati
on plan
Regular
updating and
Have an up-to-date
testing

Documentati
on

copy of data at an
off-site facility

Real estate
and IT
facilities

Hardware
availability
Off site
storage of
data

Disaster Recovery Plannin

DRP
Communicati
on plan
Regular
updating and
testing

Documentati
on
Can get replacement
hardware if it
destroyed

Real estate
and IT
facilities

Hardware
availability
Off site
storage of
data

Disaster Recovery Plannin

DRP
Communicati
on plan
Regular
updating and
testing

Documentati
on
Regularly test and
update the disaster
recovery plan to
ensure it retains its
value
Real
estate

Hardware
availability

and IT
facilities

Off site
storage of
data

COMMUNICATIO
N PLAN
Must have a call list in printed an
electronic form:
Of home phone number, mobile number, pin
number for handheld devices and non-work
email address
Of all members of IT, key executives,
individuals from key dept, key partners and
suppliers and appropriate regulatory agencies
The list of account number for each
telecommunication services

DOCUMENTATIO
N
A disaster recovery documentation is the
foundation of an effective disaster recovery
plan
It included the existing environment
Every key member should have at least two
copies of the documentation ( each at office
and home)
All documentation should be reviewed and
updated at least once a year to reflect
changes to the environment, operations,
procedures etc

REAL ESTATE &

IT FACILITIES
Where to go?
DR facilities considerations
Proximity to your location
Costs
Standby fee, activation fee, use fee, test fee

Number of clients
Other required services
Space, hardware, staff, telecommunication, air
conditioning, electricity, furniture, phones etc

OFF-SITE DATA
STORAGE
Backup tapes
To get those:

Contact information
Method to identifying which tape to retrieve
Customer ID, account number to identify yourself
The address where the tape should be delivered

OFF-SITE DATA
STORAGE
Data Replication
A number of storage vendors have solutions for
replicating data between sites
Database vendors have features and utilities to
keep multiple copies of database
Transaction logs

HARDWARE
AVAILABILITY
Size of the environment
More large more complex environment,
and more difficult to ensure the
equipment is available

Duplicating the entire environment

Make sure the application software has
to be recompiled before it will run on the
hardware you have

Equipment at home

REGULAR UPDATING &

TESTING

Review and update

At least once a year

Emergency contact list is current

Internal safety net is working
The backup tapes can be read by the equipment at
the backup site
Copies of media and installation instructions for the
requisite software
Have current critical password

REGULAR UPDATING &

TESTING

Testing

Need to offline the primary site for a while

Develop a test plan to ensure things are working as
expected
Coordinate other users to prepare and participate
Do the post mortem

Chapter 5-1

AFTER THE DISASTER

AFTER THE
DISASTER
When the disaster is over, you can return
to your primary facility.
It needs to have a plan to get the data
from the disaster recovery facilities back
to your primary site

REGIONAL AND
CATASTROPHIC DISASTER

The local computer retailer may be rushed

by other organization
Hotel rooms may sold out
Telephone companies will be very busy
The vendors and service providers are not
functioning
The employees priority will not the
company but their families

ACT MODEL
.
A
acknowledge
and name
the trauma

C
communicat
e both
competence
and caring

T
transition.
Communicat
e an
expectation
of recovery

Business Continuity Plannin

BCP
Business Continuity Planning and Disaster
Recovery are often used as
interchangeable terms

Business Continuity
Planning (BCP)

Disaster Recovery
(DR)

Is a methodology used to
create a plan for how an
organization will resume
partially or completely
interrupted critical
functions within a
predetermined time after a
disaster or disruption

Is the ability of an
infrastructure to restart
operations after a disaster

Business Continuity Plannin

BCP
Issues cover in BCP & DR

BCP

Disaster Recovery (DR)

Communication plan (List of

phone numbers, a large number
of employees)
Place to meet and continue the
business
Plans for continuing key business
operations and working with
critical partners
Copies of vital files and
information
Availability of cash

Secondary data centers

Off site storage of backup tape
Redundancy of technical
resources
Replication of data
UPS and generation solution

BENEFITS OF
DRP
The hidden benefits of a good disaster
recovery planning.

Know
exactly the
location of
each
hardware
by
preparing
the

Having the
list of
current
contacts
lists for
people
outside
direct

Having
complete
data
backup
procedure
and set-up
off-site
backup

Thats all.