Disaster Recovery Management By: Chris Rozic COSC 481

Direction Differences between business continuity plan and a disaster recovery plan Differences between business continuity plan and a disaster recovery plan Two parts to properly manage a disaster recovery plan Two parts to properly manage a disaster recovery plan Pre-Planning tasks Pre-Planning tasks Four parts of preparation Four parts of preparation Actual process of Disaster Recovery Plan Actual process of Disaster Recovery Plan Six key parts to the creation of the plan Six key parts to the creation of the plan

Differences Business Continuity Plan Business Continuity Plan Proactive response Proactive response Nature of the business continuity Nature of the business continuity Services of primary concern Services of primary concern Disaster Recovery Plan Disaster Recovery Plan Reactive response Reactive response recovery steps needed recovery steps needed Services of primary concern Services of primary concern

Differences continued

Pre-Planning Tasks Examine the critical issues Examine the critical issues Critical business applications Critical business applications Performance indicators Performance indicators Allows for measurement of plans effectiveness Allows for measurement of plans effectiveness Identify possible scenarios and priorities Identify possible scenarios and priorities Analyze top disasters impact on the business Analyze top disasters impact on the business Approval Approval Submit proposal Submit proposal

Critical Issues Establish critical applications Establish critical applications 10 important Issues should be addressed and examined in: 10 important Issues should be addressed and examined in: Pre-stages of development Pre-stages of development During the development During the development Following the completion of development Following the completion of development

Performance indicators Combination of Combination of Project statuses Project statuses Test runs of the infrastructure Test runs of the infrastructure Examples of performance indicators Examples of performance indicators Periodic reports Periodic reports Representation Representation Periodic tests Periodic tests Review process Review process Analysis Analysis

Possible Scenarios Analysis of disasters should include: Analysis of disasters should include: Effects on communications Effects on communications Impact Impact Disruption Disruption Seven questions should be asked and well thought out Seven questions should be asked and well thought out

Approval Prepare a well directed and clear proposal Prepare a well directed and clear proposal Present to upper management Present to upper management Critical for obtaining the required resources Critical for obtaining the required resources Once approved then begin establishing plan Once approved then begin establishing plan

Actual process of Disaster Recovery Plan Six key parts to creation of plan Six key parts to creation of plan Working group Working group Perform risk assessments and audits Perform risk assessments and audits Establishing priorities Establishing priorities Developing a resiliency design and recover strategy Developing a resiliency design and recover strategy Up-to-date inventory and documentation Up-to-date inventory and documentation implementation implementation

Working Group Oversees the development and implementation of entire plan Oversees the development and implementation of entire plan Should include the key personal Should include the key personal Should be held responsible for Should be held responsible for Activities Activities Planning Planning Providing monthly reports Providing monthly reports

Risk Assessments and Audits Working group must thoroughly understand Working group must thoroughly understand Businesses technology Businesses technology Networks Networks Systems and services Systems and services Working Group should prepare risk analysis Working Group should prepare risk analysis

Establishing Priorities Three commonly used priority levels Three commonly used priority levels Mission critical Mission critical Require significant effort to restore Require significant effort to restore Important Important Require moderate effort to restore Require moderate effort to restore Minor Minor Addressed last Addressed last

Design and Recovery Strategy: Resiliency Design Resilience of the network three levels should be examined Resilience of the network three levels should be examined Reliable networks Reliable networks High-availability networks High-availability networks Nonstop network environments Nonstop network environments Evaluating the networks should be comprehensive Evaluating the networks should be comprehensive Network links Network links Hardware resiliency Hardware resiliency Network design Network design Network services resiliency Network services resiliency

Design and Recovery Strategy Continued: Recovery Plan Address all aspects of the business Address all aspects of the business Include the expected Include the expected Down time of services Down time of services Action plans Action plans Escalation procedure Escalation procedure Provide a determination of certain thresholds Provide a determination of certain thresholds Encompass a backup strategy Encompass a backup strategy

up-to-date inventory and documentation Up-to-date inventory lists include: Up-to-date inventory lists include: Locations Locations Devices Devices Vendors Vendors Used services Used services Contact names Contact names

up-to-date inventory and documentation Continued documentation should include documentation should include Complete inventory of priorities Complete inventory of priorities Reviews Reviews Gap and risk analysis Gap and risk analysis Implementation plan Implementation plan Disaster recovery plan Disaster recovery plan Appropriate training Appropriate training

Implementation Key decisions must be made regarding: Key decisions must be made regarding: How it should be implemented throughout the organization How it should be implemented throughout the organization Who the critical and key members should be and their associated roles Who the critical and key members should be and their associated roles Practice the actual disaster recovery process Practice the actual disaster recovery process