Disaster Recovery Planning Guide

Transcription

1 Disaster Recvery Planning Guide

2 Disaster Recvery Planning Guide A Business Cntinuity Plan (BCP) is a written strategy which ensures that persnnel and assets are prtected and able t functin in the event f a disaster. A BCP shuld cntain essential infrmatin abut systems and prcesses that a business must keep running when faced with adverse events. Develping a BCP invlves the fllwing six steps: 1. Develping the Plan Framewrk Prepare the framewrk r utline fr yur BCP by drawing n tw sets f infrmatin: Yur Business Impact Analysis, identifying lsses incurred by interruptins t critical business prcesses; and Yur rganizatin's available budget and resurces fr emergency respnse. 2. Organizing Recvery Teams Recvery teams are made up f emplyees tasked with respnding t emergencies. T ensure that a BCP will wrk as intended, prepare a list that includes: Recvery Team functins; The names f individuals assigned t the Recvery Team; Fr each individual, a descriptin f that persn's respnsibilities; and Prcedures fr ntifying each team member n when and hw t perfrm his r her emergency respnse functin. 3. Develping Relcatin Plans Smetimes emergencies are s disruptive t business peratins that they must be relcated. When drafting yur written relcatin plan, be sure t include the fllwing infrmatin: Fr each business department r area, a descriptin f critical functins that may require relcatin. Fr each business department r area, identify at least ne alternate facility, including the facility's maintenance requirements, like gas r electricity. Each facility yu identify shuld: Prvide sufficient physical space; Be lcated in an area that minimizes disruptin t yur cmpany's peratins; Be equipped with adequate emergency supplies; Be reasnably accessible t ldging and transprtatin; and Cntain adequate space, wrkstatins, and infrastructure. 2

3 Disaster Recvery Planning Guide 4. Writing Business Cntinuity Prcedures Yur written business cntinuity prcedures shuld include basic issues t address t successfully recver frm an emergency, such as: Hw t detect disruptins t particular business prcesses; What t d when an event that disrupts a business prcess is actually detected; Whm t ntify in the event f the disruptin, s that the BCP can be activated; and Hw t assess damage t resurces, t determine an apprpriate respnse t the disruptin. 5. Dcumenting Manual Wrkarunds Pwer utages disrupt business prcesses that depend n electricity. Manual wrkarunds t these autmated prcesses can ensure their cntinued peratin, but the wrkarunds will nly functin if a cmpany has prepared fr them. An imprtant part f this preparatin is dcumenting the necessary resurces fr the wrkarund. Example: A cmpany's custmer service staff uses a cmputerized, electrnic rder entry system t check available inventry, prcess payments, and rute rders while talking t custmers by phne. A pwer utage wuld shut dwn this business prcess unless the cmpany had prepared fr a manual wrkarund, equipping its custmer service staff with paper rder frms, fr instance. In this case, the cmpany shuld dcument the required manual resurces f paper rder frms, writing instruments, and staff t fill ut the frms. Manual wrkarunds require manual labr, s yu may need t reassign staff r bring in temprary assistance t cntinue the business prcess cncerned. 6. Develp an Infrmatin Technlgy Disaster Recvery Plan In develping a recvery plan, keep in mind hw imprtant infrmatin technlgy (IT) is t yur business peratins. Fr example, in the event f a weather-related emergency, hard drives and servers may need t be mved t maintain the cmpany cmputer netwrk. Other unfreseen events, such as a ransmware attack, may render yur cmpany helpless if the prper data backup systems are nt put in place befre the event ccurs. An IT recvery plan shuld specifically include descriptins f: Critical sftware applicatins and data and the hardware required t run them; PC migratin sftware that yu will use t mve applicatins, files, and settings t a replacement r backup cmputer; Strategies yu intend t use t recver cmputer systems that fail r becme damaged in an emergency; 3

4 Disaster Recvery Planning Guide IT recvery team persnnel and their rles and respnsibilities; and Hardware and sftware backup prcedures, including scheduled data backups and peridic checks that data has been backed up prperly. Fr backing up data, cnsider using secure nline "clud" strage r a redundant netwrk f servers at a secure, remte data center. 7. Assembly, Validatin & Apprval After cmpleting the develpment and writing phases, test the BCP t ensure that it cmplies with regulatins and can perate effectively in emergency cnditins. Perfrming testing and exercises n the plan may reveal gaps r weaknesses that can be remedied. 4

5 Disaster Recvery Planning Guide Prvided by: Health Care Administratrs Assciatin 5353 Wayzata Blvd., Suite 350 Minneaplis, MN Phne: (888) http: Nte: The infrmatin and materials herein are prvided fr general infrmatin purpses nly and have been taken frm surces believed t be reliable, but there is n guarantee as t its accuracy HR 360, Inc. Last Updated: August 31,