Transcription
TemplateIT DisasterRecovery Planning:A Template
When disaster strikes, business suffers. A goal of business planning is to mitigatedisruption of product and services delivery to the greatest degree possible whendisruption due to disaster occurs. Business continuity is the overarching concern.An IT disaster recovery plan is the lynchpin of an overall business continuity strategy.And the purpose of business continuity is to maintain a minimum level of service whilerestoring the organization to business as usual. If a business fails to put a disasterrecovery plan in place then, when disaster strikes, the company risks losing customersto competitors, losing funding and having the need for its products or services reevaluated and deemed unnecessary.Micro Focus encourages every organization to proactively execute an IT DisasterRecovery plan. To assist, we provide you with a template as a springboard for yourorganization’s customized plan. Please contact a Micro Focus representative when youare ready!XYZ Organization IT Disaster Recovery Plan Revision HistoryREVISIONDATENAMEDESCRIPTION
Table of ContentsXYZ Organization IT Disaster Recovery Plan Revision History . 2Information Technology Statement of Intent . 5Policy Statement . 5Objectives . 5Key Personnel Contact Info . 6Notification Calling Tree . 7External Contacts. 8External Contacts Calling Tree . 101Plan Overview . 111.1Plan Updating . 111.2Plan Documentation Storage . 111.3Backup Strategy . 111.4Risk Management. 122Emergency . 122.1Alert, escalation and plan invocation . 122.1.1Plan Triggering Events . 122.2.2Assembly Points . 142.2.3Activation of Emergency Response Team . 142.3Disaster Recovery Team . 142.4Emergency Alert, Escalation and DRP Activation . 142.4.1Emergency Alert . 152.4.2DR Procedures for Management . 152.4.3Contact with Employees . 152.4.4Backup Staff . 152.4.5Recorded Messages / Updates . 162.3.7Alternate Recovery Facilities / Hot Site . 162.3.8Personnel and Family Notification . 163Media . 163.1Media Contact . 16
3.2Media Strategies. 163.3Media Team . 163.4Rules for Dealing with Media . 164Insurance . 175Financial and Legal Issues . 175.1Financial Assessment. 175.2Financial Requirements . 175.3Legal Actions . 176DRP Exercising . 18Appendix A – Technology Disaster Recovery Plan . 19Templates Disaster Recovery Plan for System One . 19Disaster Recovery Plan for System Two . 21Disaster Recovery Plan for Local Area Network (LAN) . 23Disaster Recovery Plan for Wide Area Network (WAN) . 25Disaster Recovery Plan for Remote Connectivity . 27Disaster Recovery Plan for Voice Communications . 29Appendix B – Suggested Forms . 31Damage Assessment Form. 31Management of DR Activities Form . 31Disaster Recovery Event Recording Form . 32Disaster Recovery Activity Report Form . 32Mobilizing the Disaster Recovery Team Form . 33Mobilizing the Business Recovery Team Form . 33Monitoring Business Recovery Task Progress Form . 34Preparing the Business Recovery Report Form . 34Communications Form . 35Returning Recovered Business Operations to Business Unit Leadership . 35Business Process/Function Recovery Completion Form . 36
Information Technology Statement of IntentThis document delineates our policies and procedures for technology disaster recovery,as well as our process-level plans for recovering critical technology platforms and thetelecommunications infrastructure. This document summarizes our recommendedprocedures. In the event of an actual emergency situation, modifications to thisdocument may be made to ensure physical safety of our people, our systems, and ourdata.Our mission is to ensure information system uptime, data integrity and availability, andbusiness continuity.Policy StatementCorporate management has approved the following policy statement: The company shall develop a comprehensive IT disaster recovery plan.A formal risk assessment shall be undertaken to determine the requirementsfor the disaster recovery plan.The disaster recovery plan should cover all essential and criticalinfrastructure elements, systems and networks, in accordance with keybusiness activities.The disaster recovery plan should be periodically tested in a simulatedenvironment to ensure that it can be implemented in emergency situations andthat the management and staff understand how it is to be executed.All staff must be made aware of the disaster recovery plan and their ownrespective roles.The disaster recovery plan is to be kept up to date to take into accountchanging circumstances.ObjectivesThe principal objective of the disaster recovery program is to develop, test anddocument a well-structured and easily understood plan which will help the companyrecover as quickly and effectively as possible from an unforeseen disaster oremergency which interrupts information systems and business operations. Additionalobjectives include the following: The need to ensure that all employees fully understand their duties inimplementing such a planThe need to ensure that operational policies are adhered to within allplanned activitiesThe need to ensure that proposed contingency arrangements are cost-effectiveThe need to consider implications on other company sitesDisaster recovery capabilities as applicable to key customers, vendors and others
Key Personnel Contact InfoName, TitleContact OptionWorkAlternateMobileHomeEmail AddressAlternate EmailWorkAlternateMobileHomeEmail AddressAlternate EmailWorkAlternateMobileHomeEmail AddressAlternate EmailWorkAlternateMobileHomeEmail AddressAlternate EmailWorkAlternateMobileHomeEmail AddressAlternate EmailWorkAlternateMobileHomeEmail AddressAlternate EmailContact Number
Notification Calling TreePersonIdentifyingIncident
External ContactsName, TitleLandlord / PropertyManagerAccount Number NoneContact OptionWorkMobileHomeEmail AddressPower CompanyAccount NumberTelecom Carrier 1Account NumberTelecom Carrier 2Account NumberHardware Supplier 1Account NumberServer Supplier 1Account Number.Workstation Supplier 1Account NumberWorkMobileHomeEmail AddressWorkMobileFaxHomeEmail AddressWorkMobileHomeEmail AddressWorkMobileEmergencyReportingEmail AddressWorkMobileFaxEmail AddressWorkMobileHomeEmail AddressContact Number
Name, TitleOffice Supplies 1Account NumberC3095783Contact OptionWorkMobileHomeEmail AddressInsurance – NameAccount NumberSite Security –Account NumberOff-Site Storage 1Account NumberOff-Site Storage 2Account NumberHVAC –Account NumberPower Generator –Account NumberOther –Account NumberWorkMobileHomeEmail AddressWorkMobileHomeEmail AddressWorkMobileHomeEmail AddressUser IDPasswordHomeEmail AddressWorkMobileHomeEmail AddressWorkMobileHomeEmail AddressWorkMobileHomeEmail AddressContact Number
External Contacts Calling Tree
recovery plan in place then, when disaster strikes, the company risks losing customers to competitors, losing funding and having the need for its products or services re-evaluated and deemed unnecessary. Micro Focus encourages every organization to proactively execute an IT Disaster Recovery plan. To assist, we provide you with a template as a springboard for your organization’s
