creating an it disaster recovery plan. disaster recovery vs business continuity events plan...
TRANSCRIPT
![Page 1: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/1.jpg)
Creating an IT
Disaster Recovery Plan
![Page 2: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/2.jpg)
Disaster Recovery vs Business Continuity
Events
Plan Development Determining which services (thus servers) DR Plan design parameters Select a Strategy Test
Questions/discussion
A web-based aid for planning
![Page 3: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/3.jpg)
THEY ARE NOT EQUIVALENT!
Disaster Recovery Plan
Vs
Business Continuity Plan
![Page 4: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/4.jpg)
IT Disaster Recovery Plan is just a part of a Business Continuity Plan
Credit:
www.theiia.org/technology
![Page 5: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/5.jpg)
![Page 6: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/6.jpg)
Events Causing Disruptions
• Natural– Hurricane– Flood– Tornadoes– Earthquakes– Fire
• Man-made– Power outage– Cooling outage– Network outage– Chemical spills– Civil unrest– Disgruntled person– Water main break– Computer viruses– Fire
![Page 7: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/7.jpg)
Funnel Cloud in downtown Baton RougeSeptember 18, 2009
![Page 8: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/8.jpg)
There is no magic bullet!
But there are some guiding parameters to help you develop an adequate plan.
1. Identify which servers2. Determine values for two critical design
parameters: RTO and RPO3. Decide on a strategy4. TEST IT
![Page 9: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/9.jpg)
1. Determine which servers
Identify department’s business functions, lines of service
External and Internal
Determine which ones are “critical”
![Page 10: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/10.jpg)
1. Determine which servers (cont)
What application programs managed by your department support those critical lines of business
Which server(s) support those application programs
![Page 11: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/11.jpg)
1. Determine which servers (cont)
Now you have identified which servers must have a DR Plan.
Servers and applications not supporting any critical business functions don’t need a DR Plan.
Note: Office space, classroom space, buildings, etc, that are used for critical business functions are covered by the Business Continuity Plan, not the IT Disaster Recovery Plan.
![Page 12: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/12.jpg)
2. Disaster Recovery Design Parameters
• Dependent on the requirements of the business function(s)
• Two categories:• How quickly the service must be restored (RTO)• How current the restored data must be (RPO)
Examples:If Payroll function must be up within 2 days, DR Plan must be less than or equal to that. (RTO)
Student course enrollment data must be data from current semester. (RPO)
![Page 13: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/13.jpg)
2. Disaster Recovery Design Parameters
RTORecovery Time Objective
How quickly must the service be restored?
(How long can the business function be without the service?)
![Page 14: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/14.jpg)
2. Disaster Recovery Design Parameters
RPO Recovery Point Objective
How old can the backups be used to restore the system?
(How many updates can be lost/discarded/recreated– those entered since the backups were taken?)
![Page 15: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/15.jpg)
2. Disaster Recovery Design Parameters
![Page 16: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/16.jpg)
3. Decide on a strategy
Frequency of backupsLocation of backupsContract for hot site
Contract for quick shipMirrored site
Mutual assistance agreement(Hope Santa brings a server)
![Page 17: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/17.jpg)
Plans can address multiple threats• An “all hazards” plan
Store your backups outside of the “blast” zone, and your plan, too!
Write your plan as a recipe for someone else (hired gun) to execute
![Page 18: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/18.jpg)
4. TEST IT
You must test your plan• Document your test results• Improve upon your plan• Repeat!
![Page 19: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/19.jpg)
Remember, users are waiting!
![Page 20: Creating an IT Disaster Recovery Plan. Disaster Recovery vs Business Continuity Events Plan Development Determining which services (thus servers)](https://reader038.vdocuments.mx/reader038/viewer/2022110400/56649dbd5503460f94aaf376/html5/thumbnails/20.jpg)
The Institute of Internal Auditorshttp://www.theiia.org/guidance/technology/Click on “Global Technology Audit Guide”, then “Business Continuity Management”
FEMAhttp://www.fema.gov/business/bc.shtm
Disaster Recovery Journalhttp://drj.com http://www.drj.com/index.php?option=com_content&task=view&id=761&Itemid=454 http://www.drj.com/index.php?option=com_content&task=view&id=753&Itemid=449
North Carolina State Universityhttp://www.ncsu.edu/ehs/BCP/index.php http://www.ncsu.edu/ehs/BCP/planning_templates/ingredients_plan.php
Continuity Centralhttp://www.continuitycentral.com/bcpd.htm
LSUhttp://lsucpt.lsu.edu