Disaster Recovery Planning

Recorded Webinar

Overview

1. What is disaster planning?

2. Why do we need disaster plans?

3. How do we use disaster plans?

Definitions

Response: How we manage a disaster- Emergency operating procedure- Crisis management

Continuity: What we do despite a disaster- Disaster recovery- Business continuity

Recovery: How we return to normal- Long-term recovery

What we already knowRecovery is not certain

Recovery takes time

Recovery may require adaptation

Why is Planning Important?Minimize loss of life and injury to employees

Protect facilities, equipment, records and other assets that support essential functions

Minimize chaos

Why is Planning Important?Consistency of services

Reduce financial losses

Regulatory requirement

REDUCE AND MITIGATE THE DISRUPTION

Plan for what?

Severe Storms & Tornadoes

Winter Storms & Ice

Floods

Fire & Wild Fire

EarthquakesHazardous Materials

Attacks/TerrorismPandemics

Heat

Hazards and Risks

A/C FailureAcid LeakAsbestosBomb ThreatBomb BlastBurst PipeCable CutChemical SpillConstructionCorrupted DataEarthquakeEpidemic

EvacuationExplosionFireFloodFrozen PipesHail StormHuman ErrorIce StormLightningLost DataNetwork FailurePower Outage

Power SurgeProgrammer ErrorShootingSmoke DamageSnow StormTerrorismTheftTornadoTrain DerailmentTransformer FireVirusWind Storm

DisasterScope of Disaster

- Local- Regional- National- World Wide

Types of Disaster- Natural- Man-made

Steps to Take Before a DisasterPlan for Disaster

Always consider the “what if” and your vulnerability

Make resilience a key objective of all projects

Protect your assets

Plan for DisasterDevelop a Plan

Assess the risks of your community

Identify organizations and people critical to your recovery

Create a communication plan

How would your organization continue to deliver mission-critical services if normal business operations were interrupted?

Communications Risks & Human Records Hazards Resources

Business Emergency Insurance Data

Plan Elements1. Essential Functions

2. Key Personnel

3. Records, Systems and Equipment

4. Communications

5. Tests, Training and Exercises

1. Essential Functions

Those services that must continue at all times, even during and

after an emergency.

Mission critical

Business critical

Customer critical

1. Essential Functions

Identify the tasks necessary to achieving each essential function.

Determine the order in which essential functions should be resumed.

Now what?

2. Key Personnel

Those positions necessary to perform a business’ essential functions.

Identify the key personnel necessary to achieving each essential function.

Identify their function, not their individual abilities.

Now what?

3. Records, Systems and EquipmentRecord: Anything created or received by an

organization in the course of its business

Vital records are records, regardless of media which if damaged or destroyed would disrupt business operations and require replacement at considerable cost.

Systems and Equipment: Hardware, software and system data assets

Identify the vital records necessary to achieving each essential function.

Identify the systems and equipment, necessary to access your vital records.

Now what?

IT PlanningHuman error

Equipment failure

Third-party failure

Environmental hazards

Fire and other disasters

Terrorism and sabotage

4. CommunicationsAbility to communicate with essential

personnel, other businesses, organizations and customers.

Ability to support operational requirements

Access to data and systems

Communication PlanWho needs to be contacted?

How should they be contacted?

When do they need to be contacted?

What should they be told?

Communication Systems

• Voice lines• Fax lines• Data lines• Mobile phones

• Internet access• Email• Radio• Other

Link communication plan and systems to each essential function.

Now what?

5. Test, Train and Exercise• Teach employees their roles• Verify plan works• Clarify where plan needs revisions• Be aware of alert, notification and

deployment procedures• Ensure employees are able to perform

any necessary essential functions during an event that requires activation of the plan

Analyze the Potential Hazards• What are the hazards?

• What are the potential real problems?

• What are the hazards through the eyes of your business and your community?

Factors to Consider

Historical

Geographical

Technological

Human Error

Regulatory

Solve the Problem

Identify the biggest risk

Determine what can reduce the risk

Begin a process to reduce the risk

Your Goals

Plan to Stay in Business

Protect Your Investment

Talk to Your Employees

Then take the next step….

Develop a Plan for your Business