+ All Categories
Home > Documents > SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

Date post: 04-Jun-2018
Category:
Upload: arturo-de-lira-delgado
View: 220 times
Download: 0 times
Share this document with a friend

of 34

Transcript
  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    1/34

    IT Disaster Recovery PlanTemplate

    By Paul Kirvan, CISA, CISSP, FBCI,CBCP

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    2/34

    Revision History

    REVISION DATE NAME DESCRIPTION

    Original 1.0

    2

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    3/34

    Table of Contents

    By Paul Kirvan, CISA, CISSP, FBCI, CBCP......................................................................1

    Information Technology Statement of Intent.......................................................................5Policy Statement.................................................................................................................. 5

    Objectives ........................................................................................................................... 5

    Key Personnel Contact Info................................................................................................. 6

    Notification Calling Tree ................................................................................................ 7

    External Contacts................................................................................................................. 8

    External Contacts Calling Tree......................................................................................10

    1 Plan Overview.................................................................................................................11

    1.1 Plan Updating...........................................................................................................11

    1.2 Plan Documentation Storage....................................................................................11

    1.3 Backup Strategy....................................................................................................... 111.4 Risk Management.................................................................................................... 11

    2 Emergency Response...................................................................................................... 12

    2.1 Alert, escalation and plan invocation.......................................................................12

    2.1.1 Plan Triggering Events..................................................................................... 12

    2.1.2 Assembly Points...............................................................................................12

    2.1.3 Activation of Emergency Response Team........................................................12

    2.2 Disaster Recovery Team.......................................................................................... 13

    2.3 Emergency Alert, Escalation and DRP Activation.................................................. 13

    2.3.1 Emergency Alert............................................................................................... 13

    2.3.2 DR Procedures for Management.......................................................................142.3.3 Contact with Employees................................................................................... 14

    2.3.4 Backup Staff......................................................................................................14

    2.3.5 Recorded Messages / Updates.......................................................................... 14

    2.3.7 Alternate Recovery Facilities / Hot Site........................................................... 14

    2.3.8 Personnel and Family Notification................................................................... 14

    3 Media.............................................................................................................................. 15

    3.1 Media Contact......................................................................................................... 15

    3.2 Media Strategies......................................................................................................15

    3.3 Media Team............................................................................................................. 15

    3.4 Rules for Dealing with Media..................................................................................15

    4 Insurance ........................................................................................................................ 15

    5 Financial and Legal Issues.............................................................................................. 16

    5.1 Financial Assessment...............................................................................................16

    5.2 Financial Requirements........................................................................................... 16

    5.3 Legal Actions........................................................................................................... 16

    6 DRP Exercising...............................................................................................................16

    Appendix A Technology Disaster Recovery Plan Templates ........................................17

    3

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    4/34

    Disaster Recovery Plan for ................................................................... 17

    Disaster Recovery Plan for ...................................................................19

    Disaster Recovery Plan for Local Area Network (LAN)...............................................21

    Disaster Recovery Plan for Wide Area Network (WAN)..............................................23

    Disaster Recovery Plan for Remote Connectivity......................................................... 25

    Disaster Recovery Plan for Voice Communications..................................................... 27Appendix B Suggested Forms........................................................................................ 29

    Damage Assessment Form.............................................................................................29

    Management of DR Activities Form..............................................................................29

    Disaster Recovery Event Recording Form.................................................................... 30

    Disaster Recovery Activity Report Form...................................................................... 30

    Mobilizing the Disaster Recovery Team Form .............................................................31

    Mobilizing the Business Recovery Team Form ............................................................31

    Monitoring Business Recovery Task Progress Form ....................................................32

    Preparing the Business Recovery Report Form ............................................................ 32

    Communications Form ..................................................................................................33

    Returning Recovered Business Operations to Business Unit Leadership..................... 33

    Business Process/Function Recovery Completion Form...............................................34

    4

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    5/34

    Information Technology Statement of Intent

    This document delineates our policies and procedures for technology disaster recovery, as well as

    our process-level plans for recovering critical technology platforms and the telecommunications

    infrastructure. This document summarizes our recommended procedures. In the event of anactual emergency situation, modifications to this document may be made to ensure physical

    safety of our people, our systems, and our data.

    ur mission is to ensure information system uptime, data integrity and availability, and business

    continuity.

    Policy Statement

    !orporate management has approved the following policy statement"

    The company shall develop a comprehensive IT disaster recovery plan.

    # formal ris$ assessment shall be underta$en to determine the re%uirements for the

    disaster recovery plan.

    The disaster recovery plan should cover all essential and critical infrastructure

    elements, systems and networ$s, in accordance with $ey business activities.

    The disaster recovery plan should be periodically tested in a simulated environment to

    ensure that it can be implemented in emergency situations and that the managementand staff understand how it is to be e&ecuted.

    #ll staff must be made aware of the disaster recovery plan and their own respective

    roles.

    The disaster recovery plan is to be $ept up to date to ta$e into account changingcircumstances.

    Objectives

    The principal ob'ective of the disaster recovery program is to develop, test and documenta well-structured and easily understood plan which will help the company recover as

    %uic$ly and effectively as possible from an unforeseen disaster or emergency which

    interrupts information systems and business operations. #dditional ob'ectives include the

    following"

    The need to ensure that all employees fully understand their duties in implementingsuch a plan

    The need to ensure that operational policies are adhered to within all plannedactivities

    The need to ensure that proposed contingency arrangements are cost-effective The need to consider implications on other company sites (isaster recovery capabilities as applicable to $ey customers, vendors and others

    )

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    6/34

    Key Personnel Contact Info

    Name, Title Contact Option Contact Number

    *or$

    #lternate

    +obile

    ome

    mail #ddress

    #lternate mail

    *or$

    #lternate

    +obile

    ome

    mail #ddress

    #lternate mail

    *or$#lternate

    +obile

    ome

    mail #ddress

    #lternate mail

    *or$

    #lternate

    +obile

    ome

    mail #ddress

    #lternate mail

    *or$

    #lternate

    +obile

    ome

    mail #ddress

    #lternate mail

    *or$

    #lternate

    +obile

    ome

    mail #ddress

    #lternate mail

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    7/34

    Notification Calling Tree

    /

    Person

    Identifying

    Incident

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    8/34

    External Contacts

    Name, Title Contact Option Contact Number

    Landlord / Property Manager

    #ccount 0umber 0one

    *or$+obile

    ome

    mail #ddress

    Power Company

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

    Telecom Carrier 1

    #ccount 0umber *or$

    +obile1a&

    ome

    mail #ddress

    Telecom Carrier 2

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

    Hardware Supplier 1

    #ccount 0umber *or$

    +obile

    mergency eporting

    mail #ddress

    Serer Supplier 1

    #ccount 0umber. *or$

    +obile

    1a&

    mail #ddress

    !or"#tation Supplier 1

    #ccount 0umber *or$

    +obileome

    mail #ddress

    O$$ice Supplie# 1

    #ccount 0umber !3)/53 *or$

    +obile

    ome

    mail #ddress

    5

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    9/34

    Name, Title Contact Option Contact Number

    %n#urance & Name

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

    Site Security &

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

    O$$'Site Storage 1

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

    O$$'Site Storage 2#ccount 0umber 6ser I(

    7assword

    ome

    mail #ddress

    H()C &

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

    Power *enerator &

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

    Ot+er &

    #ccount 0umber *or$

    +obile

    ome

    mail #ddress

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    10/34

    External Contacts Calling Tree

    8

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    11/34

    1 Plan Overview

    11 Plan !"#ating

    It is necessary for the (7 updating process to be properly structured and controlled.*henever changes are made to the plan they are to be fully tested and appropriate

    amendments should be made to the training materials. This will involve the use of

    formalized change control procedures under the control of the IT (irector.

    1$ Plan %oc&mentation Storage

    !opies of this 7lan, !(, and hard copies will be stored in secure locations to be defined

    by the company. ach member of senior management will be issued a !( and hard copyof this plan to be filed at home. ach member of the (isaster ecovery Team and the

    9usiness ecovery Team will be issued a !( and hard copy of this plan. # master

    protected copy will be stored on specific resources established for this purpose.

    1' (ac)&" Strategy

    :ey business processes and the agreed bac$up strategy for each are listed below. The

    strategy chosen is for a fully mirrored recovery site at the company;s offices in

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    12/34

    results of our deliberations are included in this section. ach potential environmental

    disaster or emergency situation has been e&amined. The focus here is on the level of

    business disruption which could arise from each type of disaster.

    7otential disasters have been assessed as follows"

    Potential %isaster Probability +ating Im"act +ating(rief %escri"tion Of PotentialConse0&ences +eme#ial

    ,ctions

    Flood ( ) #ll critical e*uipment is locatedon +st Floor

    Fire ( ) FM, suppression systeminstalled in main computercenters. Fire and smo&edetectors on all floors.

    Tornado /

    Electrical storms /

    #ct of terrorism /

    #ct of sa'otage /

    Electrical powerfailure

    ( ) !edundant 0PS array togetherwith auto stand'y generator

    that is tested wee&ly % remotelymonitored ,)12. 0PSs alsoremotely monitored.

    3oss of communications networ&services

    ) ) Two diversely routed T+ trun&sinto 'uilding. $#4 redundancy5voice networ& resilience

    Pro'a'ility6 +78ery High5 /78ery 3ow Impact6 +7Total destruction5 /7Minor annoyance

    $ Emergency +es"onse

    $1 ,lert2 escalation an# "lan invocation

    2.1.1 Plan TriggeringEvents

    :ey trigger issues at head%uarters that would lead to activation of the (7 are" Total loss of all communications Total loss of power 1looding of the premises ?oss of the building

    2.1.2 AssemblyPoints

    *here the premises need to be evacuated, the (7 invocation plan identifies twoevacuation assembly points"

    7rimary @ 1ar end of main par$ing lotA #lternate @ 7ar$ing lot of company across the street

    2.1.3 Activationof EmergencyResponseTeam

    *hen an incident occurs the mergency esponse Team =T> must be activated. The

    T will then decide the e&tent to which the (7 must be invo$ed. #ll employees must

    82

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    13/34

    be issued a Buic$ eference card containing T contact details to be used in the event

    of a disaster. esponsibilities of the T are to"

    espond immediately to a potential disaster and call emergency servicesA #ssess the e&tent of the disaster and its impact on the business, data center, etc.A

    (ecide which elements of the ( 7lan should be activatedA stablish and manage disaster recovery team to maintain vital services and return tonormal operationA

    nsure employees are notified and allocate responsibilities and activities as re%uired.

    $$ %isaster +ecovery Team

    The team will be contacted and assembled by the T. The teamCs responsibilities

    include" stablish facilities for an emergency level of service within 2. business hoursA estore $ey services within 4. business hours of the incidentA

    ecover to business as usual within 5. to 24. hours after the incidentA !oordinate activities with disaster recovery team, first responders, etc. eport to the emergency response team.

    $' Emergency ,lert2 Escalation an# %+P ,ctivation

    This policy and procedure has been established to ensure that in the event of a disaster or

    crisis, personnel will have a clear understanding of who should be contacted. 7rocedures

    have been addressed to ensure that communications can be %uic$ly established whileactivating disaster recovery.

    The ( plan will rely principally on $ey members of management and staff who willprovide the technical and management s$ills necessary to achieve a smooth technology

    and business recovery. Duppliers of critical goods and services will continue to support

    recovery of business operations as the company returns to normal operating mode.

    2.3.1 EmergencyAlert

    The person discovering the incident calls a member of the mergency esponse Team in

    the order listed"

    mergency esponse Team

    E

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    14/34

    The mergency esponse Team =T> is responsible for activating the (7 for disasters

    identified in this plan, as well as in the event of any other occurrence that affects the

    company;s capability to perform normally.

    ne of the tas$s during the early stages of the emergency is to notify the (isaster

    ecovery Team =(T> that an emergency has occurred. The notification will re%uest(T members to assemble at the site of the problem and will involve sufficient

    information to have this re%uest effectively communicated. The 9usiness ecovery Team

    =9T> will consist of senior representatives from the main business departments. The9T ?eader will be a senior member of the companyCs management team, and will be

    responsible for ta$ing overall charge of the process and ensuring that the company

    returns to normal wor$ing operations as early as possible.

    2.3.2 DR Proceduresfor Management

    +embers of the management team will $eep a hard copy of the names and contact

    numbers of each employee in their departments. In addition, management team members

    will have a hard copy of the company;s disaster recovery and business continuity planson file in their homes in the event that the head%uarters building is inaccessible, unusable,

    or destroyed.

    2.3.3 Contact with Employees

    +anagers will serve as the focal points for their departments, while designated

    employees will call other employees to discuss the crisisFdisaster and the company;s

    immediate plans. mployees who cannot reach staff on their call list are advised to call

    the staff member;s emergency contact to relay information on the disaster.

    2.3.4 BackupStaff

    If a manager or staff member designated to contact other staff members is unavailable or

    incapacitated, the designated bac$up staff member will perform notification duties.

    2.3.5 RecordedMessages/ Updates

    1or the latest information on the disaster and the organization;s response, staff members

    can call a toll-free hotline listed in the (7 wallet card. Included in messages will be

    data on the nature of the disaster, assembly sites, and updates on wor$ resumption.

    2.3.7 AlternateRecoveryFacilities / Hot Site

    If necessary, the hot site at DunGard will be activated and notification will be given via

    recorded messages or through communications with managers. ot site staffing willconsist of members of the disaster recovery team only for the first 24 hours, with other

    staff members 'oining at the hot site as necessary.

    2.3.8 Personneland Family Notification

    If the incident has resulted in a situation which would cause concern to an employee;s

    immediate family such as hospitalization of in'ured persons, it will be necessary to notify

    their immediate family members %uic$ly.

    84

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    15/34

    ' /e#ia

    '1 /e#ia Contact#ssigned staff will coordinate with the media, wor$ing according to guidelines that have

    been previously approved and issued for dealing with post-disaster communications.

    '$ /e#ia Strategies8. #voiding adverse publicity2. Ta$e advantage of opportunities for useful publicity

    3. ave answers to the following basic %uestions"

    *hat happenedH

    ow did it happenH

    *hat are you going to do about itH

    '' /e#ia Team

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    16/34

    4 3inancial an# 5egal Iss&es

    41 3inancial ,ssessment

    The emergency response team shall prepare an initial assessment of the impact of the

    incident on the financial affairs of the company. The assessment should include"

    ?oss of financial documents

    ?oss of revenue

    Theft of chec$ boo$s, credit cards, etc.

    ?oss of cash

    4$ 3inancial +e0&irements

    The immediate financial needs of the company must be addressed. These can include"

    !ash flow position

    Temporary borrowing capability

    6pcoming payments for ta&es, payroll ta&es, Docial Decurity, etc.

    #vailability of company credit cards to pay for supplies and services re%uired post-

    disaster

    4' 5egal ,ctions

    The company legal department and T will 'ointly review the aftermath of the incidentand decide whether there may be legal actions resulting from the eventA in particular, the

    possibility of claims by or against the company for regulatory violations, etc.

    6 %+P Exercising

    (isaster recovery plan e&ercises are an essential part of the plan development process. Ina (7 e&ercise no one passes or failsA everyone who participates learns from e&ercises @

    what needs to be improved, and how the improvements can be implemented. 7lan

    e&ercising ensures that emergency teams are familiar with their assignments and, more

    importantly, are confident in their capabilities.

    Duccessful ( plans launch into action smoothly and effectively when they are needed.This will only happen if everyone with a role to play in the plan has rehearsed the roleone or more times. The plan should also be validated by simulating the circumstances

    within which it has to wor$ and seeing what happens.

    8

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    17/34

    ,""en#ix , 7 Technology %isaster +ecovery Plan Tem"lates

    %isaster +ecovery Plan for 8System One9SST-M

    O(-.(%-!

    P.O0CT%

    ON S-.(-.

    ?ocation"

    Derver +odel"

    perating Dystem"

    !76s"

    +emory"

    Total (is$"

    Dystem andle"Dystem Derial J"

    (0D ntry"

    I7 #ddress"

    ther"

    HOT S%T- S-.(-. 7rovide details)PPL%C)T%ONS

    =6se bold for ot Dite>

    )SSOC%)T- S-.(-.S

    - CONT)CTS

    ardware Kendor 7rovide details

    Dystem wners 7rovide details

    (atabase wner 7rovide details

    #pplication wners 7rovide details

    Doftware Kendors 7rovide details

    ffsite Dtorage 7rovide details

    )C0P ST.)T-* 3O.

    SST-M ON-

    (aily 7rovide details

    +onthly 7rovide details

    Buarterly 7rovide details

    SST-M ON-

    %S)ST-. .-CO(-.

    P.OC-0.-

    Dcenario 8

    Total ?oss of (ata

    7rovide details

    Dcenario 2

    Total ?oss of *

    7rovide details

    8/

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    18/34

    ,%%EN%!/

    CONT)CTS

    3ile Systems 8#ate9

    3ile Sy#tem a# o$

    4date5

    +inimal file systems to

    be created and restored

    from bac$up"

    L?istM

    3ile#y#tem "byte# 0#ed )ail 6u#ed Mounted on

    L7rovide detailsM

    ther critical files to

    modify

    L7rovide detailsM

    0ecessary directories to

    create

    L7rovide detailsM

    !ritical files to restore L7rovide detailsM

    Decondary files to

    restore

    L7rovide detailsM

    ther files to restore L7rovide detailsM

    85

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    19/34

    %isaster +ecovery Plan for 8System Two9SST-M

    O(-.(%-!

    P.O0CT%ON S-.(-.

    ?ocation"

    Derver +odel"perating Dystem"

    !76s"

    +emory"Total (is$"

    Dystem andle"

    Dystem Derial J"

    (0D ntry"

    I7 #ddress"

    ther"

    HOT S%T- S-.(-. 7rovide details

    )PPL%C)T%ONS

    =6se bold for ot Dite>

    )SSOC%)T- S-.(-.S

    - CONT)CTS

    ardware Kendor 7rovide details

    Dystem wners 7rovide details

    (atabase wner 7rovide details

    #pplication wners 7rovide details

    Doftware Kendors 7rovide details

    ffsite Dtorage 7rovide details

    )C0P ST.)T-* $or

    SST-M

    T!O

    (aily 7rovide details+onthly 7rovide details

    Buarterly 7rovide details

    SST-M T!O

    %S)ST-. .-CO(-.

    P.OC-0.-

    Dcenario 8

    Total ?oss of (ata

    7rovide details

    Dcenario 2

    Total ?oss of *

    7rovide details

    8

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    20/34

    ,%%EN%!/

    CONT)CTS

    3ile Systems 8#ate9

    1ile Dystem as of

    LdateM

    +inimal file systems to

    be created and restored

    from bac$up"

    L?istM

    3ile#y#tem "byte# 0#ed )ail 6u#ed Mounted on

    L7rovide detailsM

    ther critical files to

    modify

    L7rovide detailsM

    0ecessary directories to

    create

    L7rovide detailsM

    !ritical files to restore L7rovide detailsM

    Decondary files to

    restore

    L7rovide detailsM

    ther files to restore L7rovide detailsM

    2

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    21/34

    %isaster +ecovery Plan for 5ocal ,rea Networ) :5,N;

    SST-M

    O(-.(%-!

    S-.(-. ?ocation"Derver +odel"

    perating Dystem"

    !76s"

    +emory"

    Total (is$"

    Dystem andle"Dystem Derial J"

    (0D ntry"

    I7 #ddress"

    ther"

    HOT S%T- S-.(-. 7rovide details

    )PPL%C)T%ONS

    =6se bold for ot Dite>)SSOC%)T- S-.(-.S

    - CONT)CTS

    ardware Kendor 7rovide details

    Dystem wners 7rovide details

    (atabase wner 7rovide details

    #pplication wners 7rovide details

    Doftware Kendors 7rovide details

    ffsite Dtorage 7rovide details

    )C0P ST.)T-* $or

    SST-M

    T!O

    (aily 7rovide details

    +onthly 7rovide details

    Buarterly 7rovide details

    SST-M T!O

    %S)ST-. .-CO(-.

    P.OC-0.-

    Dcenario 8

    Total ?oss of (ata

    7rovide details

    Dcenario 2

    Total ?oss of *

    7rovide details

    28

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    22/34

    ,%%EN%!/

    CONT)CTS

    3ile Systems 8#ate9

    1ile Dystem as of

    LdateM

    +inimal file systems to

    be created and restored

    from bac$up"

    L?istM

    3ile#y#tem "byte# 0#ed )ail 6u#ed Mounted on

    L7rovide detailsM

    ther critical files to

    modify

    L7rovide detailsM

    0ecessary directories to

    create

    L7rovide detailsM

    !ritical files to restore L7rovide detailsM

    Decondary files to

    restore

    L7rovide detailsM

    ther files to restore L7rovide detailsM

    22

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    23/34

    %isaster +ecovery Plan for

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    24/34

    ,%%EN%!/

    CONT)CTS

    S&""ort Systems 8#ate9

    Dupport system L7rovide detailsM

    !ritical networ$ assets L7rovide detailsM

    !ritical interfaces L7rovide detailsM

    !ritical files to restore L7rovide detailsM

    !ritical networ$

    services to restore

    L7rovide detailsM

    ther services L7rovide detailsM

    24

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    25/34

    %isaster +ecovery Plan for +emote Connectivity

    SST-M

    O(-.(%-!

    -70%PM-NT ?ocation"(evice Type"

    +odel 0o."

    Technical Dpecifications"

    0etwor$ Interfaces"

    7ower e%uirementsA

    Dystem Derial J"(0D ntry"

    I7 #ddress"

    ther"

    HOT S%T- -70%PM-NT 7rovide details

    SP-C%)L )PPL%C)T%ONS

    )SSOC%)T- -(%C-S

    - CONT)CTS

    ardware Kendor 7rovide details

    Dystem wners 7rovide details

    (atabase wner 7rovide details

    #pplication wners 7rovide details

    Doftware Kendors 7rovide details

    ffsite Dtorage 7rovide details

    0etwor$ Dervices 7rovide details

    )C0P ST.)T-* $or

    SST-M

    T!O

    (aily 7rovide details

    +onthly 7rovide details

    Buarterly 7rovide details

    SST-M T!O

    %S)ST-. .-CO(-.

    P.OC-0.-

    Dcenario 8

    Total ?oss of 0etwor$

    7rovide details

    Dcenario 2

    Total ?oss of *

    7rovide details

    2)

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    26/34

    ,%%EN%!/

    CONT)CTS

    S&""ort Systems 8#ate9

    Dupport system L7rovide detailsM

    !ritical networ$ assets L7rovide detailsM

    !ritical interfaces L7rovide detailsM

    !ritical files to restore L7rovide detailsM

    !ritical networ$

    services to restore

    L7rovide detailsM

    ther services L7rovide detailsM

    2

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    27/34

    %isaster +ecovery Plan for =oice Comm&nications

    SST-M

    O(-.(%-!

    -70%PM-NT ?ocation"

    (evice Type"+odel 0o."

    Technical Dpecifications"

    0etwor$ Interfaces"

    7ower e%uirementsA

    Dystem Derial J"

    (0D ntry"I7 #ddress"

    ther"

    HOT S%T- -70%PM-NT 7rovide details

    SP-C%)L )PPL%C)T%ONS

    )SSOC%)T- -(%C-S

    - CONT)CTSardware Kendor 7rovide details

    Dystem wners 7rovide details

    (atabase wner 7rovide details

    #pplication wners 7rovide details

    Doftware Kendors 7rovide details

    ffsite Dtorage 7rovide details

    0etwor$ Dervices 7rovide details

    )C0P ST.)T-* $or

    SST-M

    T!O

    (aily 7rovide details

    +onthly 7rovide details

    Buarterly 7rovide details

    SST-M T!O

    %S)ST-. .-CO(-.

    P.OC-0.-

    Dcenario 8

    Total ?oss of Dwitch

    7rovide details

    Dcenario 2

    Total ?oss of 0etwor$

    7rovide details

    2/

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    28/34

    ,%%EN%!/

    CONT)CTS

    S&""ort Systems 8#ate9

    Dupport system L7rovide detailsM

    !ritical networ$ assets L7rovide detailsM

    !ritical interfaces L7rovide detailsM

    !ritical files to restore L7rovide detailsM

    !ritical networ$

    services to restore

    L7rovide detailsM

    ther services L7rovide detailsM

    25

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    29/34

    ,""en#ix ( 7 S&ggeste# 3orms

    %amage ,ssessment 3orm

    Key (&sinessProcess ,ffecte#

    %escri"tion Of Problem Extent Of %amage

    >>>>>>>>>>>>>

    /anagement of %+ ,ctivities 3orm

    (uring the disaster recovery process all activities will be determined using a standardstructureA

    *here practical, this plan will need to be updated on a regular basis throughout thedisaster recovery periodA

    #ll actions that occur during this phase will need to be recorded.

    ,ctivity Name?

    +eference N&mber?

    (rief %escri"tion?

    Commencement%ate@Time

    Com"letion%ate@Time

    +eso&rces Involve# In Charge

    999999999999999999

    2

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    30/34

    %isaster +ecovery Event +ecor#ing 3orm

    #ll $ey events that occur during the disaster recovery phase must be recorded. #n event log shall be maintained by the disaster recovery team leader.

    This event log should be started at the commencement of the emergency and a copyof the log passed on to the business recovery team once the initial dangers have been

    controlled. The following event log should be completed by the disaster recovery team leader to

    record all $ey events during disaster recovery, until such time as responsibility ishanded over to the business recovery team.

    %escri"tion of %isaster?

    Commencement %ate?

    %ate@Time %+ Team /obiliAe#?

    ,ctivities !n#erta)en by %+Team

    %ate an#Time

    O&tcome3ollowBOn ,ction

    +e0&ire#

    %isaster +ecovery Teams

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    31/34

    The report will include" # description of the emergency or incident Those people notified of the emergency =including dates> #ction ta$en by members of the (T

    utcomes arising from actions ta$en #n assessment of the impact to normal business operations #ssessment of the effectiveness of the 9!7 and lessons learned ?essons learned

    >>>>>>>>>>

    /obiliAing the %isaster +ecovery Team 3orm

    1ollowing an emergency re%uiring recovery of technology infrastructure assets, thedisaster recovery team should be notified of the situation and placed on standby.

    The format shown below can be used for recording the activation of the ( team

    once the wor$ of the damage assessment and emergency response teams has beencompleted.

    %escri"tion of Emergency?

    ate Occurred6

    ate $or& of isaster !ecovery Team "ompleted6

    Name of Team/ember

    Contact%etails

    Contacte# On:Time @ %ate;

    (y >>>>>>>>>

    /obiliAing the (&siness +ecovery Team 3orm

    1ollowing an emergency re%uiring activation of the disaster recovery team, the

    business recovery team should be notified of the situation and placed on standby.

    The format shown below will be used for recording the activation of the business

    recovery team once the wor$ of the disaster recovery team has been completed.

    %escri"tion of Emergency?

    ate Occurred6

    ate $or& of >usiness !ecovery Team "ompleted6

    Name of Team/ember

    Contact%etails

    Contacte# On:Time @ %ate;

    (y

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    32/34

    !elevant "omments >>>>>>>>>>>

    /onitoring (&siness +ecovery Tas) Progress 3orm

    The progress of technology and business recovery tas$s must be closely monitoredduring this period of time.

    Dince difficulties e&perienced by one group could significantly affect other dependenttas$s it is important to ensure that each tas$ is ade%uately resourced and that the

    efforts re%uired to restore normal business operations have not been underestimated.

    Note: A priority sequence must be identified although, where possible, activities will be carried out

    simultaneously.

    !ecovery Tas&s

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    33/34

    #n assessment of the impact to normal business operations

    7roblems identified

    Duggestions for enhancing the disaster recovery andFor business continuity plan

    ?essons learned

    Comm&nications 3orm

    It is very important during the disaster recovery and business recovery activities that

    all affected persons and organizations are $ept properly informed.

    The information given to all parties must be accurate and timely.

    In particular, any estimate of the timing to return to normal wor$ing operations

    should be announced with care.

    It is also very important that only authorized personnel deal with media %ueries.

    ?roups of Persons orOrgani@ations #ffected

    'y isruption

    Persons Selected To "oordinate "ommunicationsto #ffected Persons 1 Organi@ations

    4ame Position "ontact etails

    "ustomers

    Management % Staff

    Suppliers

    Media

    Sta&eholders

    Others

    >>>>>>>>>>>>

    +et&rning +ecovere# (&siness O"erations to (&siness !nit5ea#ershi"

    nce normal business operations have been restored it will be necessary to return the

    responsibility for specific operations to the appropriate business unit leader.

    This process should be formalized in order to ensure that all parties understand the

    change in overall responsibility, and the transition to business-as-usual.

    It is li$ely that during the recovery process, overall responsibility may have been

    assigned to the business recovery process lead.

    It is assumed that business unit management will be fully involved throughout the

    recovery, but in order for the recovery process to be fully effective, overall

    responsibility during the recovery period should probably be with a business recovery

    process team.

    >>>>>>>>>>>>

    33

  • 8/14/2019 SearchDisasterRecovery_IT_DisasterRecoveryTemplate.doc

    34/34

    (&siness Process@3&nction +ecovery Com"letion 3orm

    The following transition form should be completed and signed by the business recoveryteam leader and the responsible business unit leader, for each process recovered.

    # separate form should be used for each recovered business process.

    Name Of (&siness Process

    Com"letion %ate of