Dr. Gerry Firmansyah CID Business Continuity and Disaster Recovery Planning for IT (W-IX)

Emergency Response and Recovery Emergency management overview Emergency response plans Crisis management Disaster recovery IT recovery Business continuity

Emergency management overview Regardless of how your company is organized, managed, and run, your emergency management process should follow a very simple rule: assign clear roles. If no one knows who’s in charge or who has the authority to make decisions, nothing gets done. On the other hand, if everyone believes they have the authority to make decisions, chaos will reign.

Emergency response plans The basic set of emergency response tasks are these: ❖ Protect personnel ❖ Contain incident ❖ Implement command and control (Emergency Response Team, Crisis Management Team step in) ❖ Emergency response and triage (medical, evacuation, search and rescue) ❖ Assess impact and effect ❖ Notification ❖ Next steps

Crisis management ❖ Emergency Response and Disaster Recovery ❖ Alternate Facilities Review and Management ❖ Communications ❖ Human Resources ❖ Legal ❖ Insurance ❖ Finance

Disaster recovery ❖ Activation Checklists ❖ Recovery Checklists

IT recovery Computer Incident Response Team (CIRT) There are five major areas of responsibility for the CIRT team.These are: ❖ Monitor ❖ Alert and Mobilize ❖ Assess and Stabilize ❖ Resolve ❖ Review

Business continuity ❖ Business continuity begins when disaster recovery ends. ❖ Challenge of the business continuity phase is determining what should be restored, what should be salvaged, and what should be replaced.