IT Disaster Recovery template by SearchDisasterRecovery.docx

IT Disaster Recovery template by SearchDisasterRecovery.docx

《IT Disaster Recovery template by SearchDisasterRecovery.docx》由会员分享，可在线阅读，更多相关《IT Disaster Recovery template by SearchDisasterRecovery.docx（40页珍藏版）》请在冰豆网上搜索。

ITDisasterRecoverytemplatebySearchDisasterRecovery

ITDisasterRecoveryPlan

Template

ByPaulKirvan,CISA,CISSP,FBCI,CBCP

RevisionHistory

revision

date

name

description

Original1.0

TableofContents

InformationTechnologyStatementofIntent5

PolicyStatement5

Objectives5

KeyPersonnelContactInfo6

NotificationCallingTree7

ExternalContacts8

ExternalContactsCallingTree10

1PlanOverview11

1.1PlanUpdating11

1.2PlanDocumentationStorage11

1.3BackupStrategy11

1.4RiskManagement11

2EmergencyResponse12

2.1Alert,escalationandplaninvocation12

2.1.1PlanTriggeringEvents12

2.1.2AssemblyPoints12

2.1.3ActivationofEmergencyResponseTeam12

2.2DisasterRecoveryTeam13

2.3EmergencyAlert,EscalationandDRPActivation13

2.3.1EmergencyAlert13

2.3.2DRProceduresforManagement14

2.3.3ContactwithEmployees14

2.3.4BackupStaff14

2.3.5RecordedMessages/Updates14

2.3.7AlternateRecoveryFacilities/HotSite14

2.3.8PersonnelandFamilyNotification14

3Media15

3.1MediaContact15

3.2MediaStrategies15

3.3MediaTeam15

3.4RulesforDealingwithMedia15

4Insurance15

5FinancialandLegalIssues16

5.1FinancialAssessment16

5.2FinancialRequirements16

5.3LegalActions16

6DRPExercising16

AppendixA–TechnologyDisasterRecoveryPlanTemplates17

DisasterRecoveryPlanfor17

DisasterRecoveryPlanfor19

DisasterRecoveryPlanforLocalAreaNetwork（LAN）21

DisasterRecoveryPlanforWideAreaNetwork（WAN）23

DisasterRecoveryPlanforRemoteConnectivity25

DisasterRecoveryPlanforVoiceCommunications27

AppendixB–SuggestedForms29

DamageAssessmentForm29

ManagementofDRActivitiesForm29

DisasterRecoveryEventRecordingForm29

DisasterRecoveryActivityReportForm30

MobilizingtheDisasterRecoveryTeamForm31

MobilizingtheBusinessRecoveryTeamForm31

MonitoringBusinessRecoveryTaskProgressForm32

PreparingtheBusinessRecoveryReportForm32

CommunicationsForm33

ReturningRecoveredBusinessOperationstoBusinessUnitLeadership33

BusinessProcess/FunctionRecoveryCompletionForm33

InformationTechnologyStatementofIntent

Thisdocumentdelineatesourpoliciesandproceduresfortechnologydisasterrecovery,aswellasourprocess-levelplansforrecoveringcriticaltechnologyplatformsandthetelecommunicationsinfrastructure.Thisdocumentsummarizesourrecommendedprocedures.Intheeventofanactualemergencysituation,modificationstothisdocumentmaybemadetoensurephysicalsafetyofourpeople,oursystems,andourdata.

Ourmissionistoensureinformationsystemuptime,dataintegrityandavailability,andbusinesscontinuity.

PolicyStatement

Corporatemanagementhasapprovedthefollowingpolicystatement:

∙ThecompanyshalldevelopacomprehensiveITdisasterrecoveryplan.

∙Aformalriskassessmentshallbeundertakentodeterminetherequirementsforthedisasterrecoveryplan.

∙Thedisasterrecoveryplanshouldcoverallessentialandcriticalinfrastructureelements,systemsandnetworks,inaccordancewithkeybusinessactivities.

∙Thedisasterrecoveryplanshouldbeperiodicallytestedinasimulatedenvironmenttoensurethatitcanbeimplementedinemergencysituationsandthatthemanagementandstaffunderstandhowitistobeexecuted.

∙Allstaffmustbemadeawareofthedisasterrecoveryplanandtheirownrespectiveroles.

∙Thedisasterrecoveryplanistobekeptuptodatetotakeintoaccountchangingcircumstances.

Objectives

Theprincipalobjectiveofthedisasterrecoveryprogramistodevelop,testanddocumentawell-structuredandeasilyunderstoodplanwhichwillhelpthecompanyrecoverasquicklyandeffectivelyaspossiblefromanunforeseendisasteroremergencywhichinterruptsinformationsystemsandbusinessoperations.Additionalobjectivesincludethefollowing:

•Theneedtoensurethatallemployeesfullyunderstandtheirdutiesinimplementingsuchaplan

•Theneedtoensurethatoperationalpoliciesareadheredtowithinallplannedactivities

•Theneedtoensurethatproposedcontingencyarrangementsarecost-effective

•Theneedtoconsiderimplicationsonothercompanysites

•Disasterrecoverycapabilitiesasapplicabletokeycustomers,vendorsandothers

KeyPersonnelContactInfo

Name,Title

ContactOption

ContactNumber

Work

Alternate

Mobile

Home

EmailAddress

AlternateEmail

Work

Alternate

Mobile

Home

EmailAddress

AlternateEmail

Work

Alternate

Mobile

Home

EmailAddress

AlternateEmail

Work

Alternate

Mobile

Home

EmailAddress

AlternateEmail

Work

Alternate

Mobile

Home

EmailAddress

AlternateEmail

Work

Alternate

Mobile

Home

EmailAddress

AlternateEmail

NotificationCallingTree

PersonIdentifyingIncident

ExternalContacts

Name,Title

ContactOption

ContactNumber

Landlord/PropertyManager

AccountNumberNone

Work

Mobile

Home

EmailAddress

PowerCompany

AccountNumber

Work

Mobile

Home

EmailAddress

TelecomCarrier1

AccountNumber

Work

Mobile

Fax

Home

EmailAddress

TelecomCarrier2

AccountNumber

Work

Mobile

Home

EmailAddress

HardwareSupplier1

AccountNumber

Work

Mobile

EmergencyReporting

EmailAddress

ServerSupplier1

AccountNumber.

Work

Mobile

Fax

EmailAddress

WorkstationSupplier1

AccountNumber

Work

Mobile

Home

EmailAddress

OfficeSupplies1

AccountNumberC3095783

Work

Mobile

Home

EmailAddress

Insurance–Name

AccountNumber

Work

Mobile

Home

EmailAddress

SiteSecurity–

AccountNumber

Work

Mobile

Home

EmailAddress

Off-SiteStorage1

AccountNumber

Work

Mobile

Home

EmailAddress

Off-SiteStorage2

AccountNumber

UserID

Password

Home

EmailAddress

HVAC–

AccountNumber

Work

Mobile

Home

EmailAddress

PowerGenerator–

AccountNumber

Work

Mobile

Home

EmailAddress

Other–

AccountNumber

Work

Mobile

Home

EmailAddress

ExternalContactsCallingTree

1PlanOverview

1.1PlanUpdating

ItisnecessaryfortheDRPupdatingprocesstobeproperlystructuredandcontrolled.Wheneverchangesaremadetotheplantheyaretobefullytestedandappropriateamendmentsshouldbemadetothetrainingmaterials.ThiswillinvolvetheuseofformalizedchangecontrolproceduresunderthecontroloftheITDirector.

1.2PlanDocumentationStorage

CopiesofthisPlan,CD,andhardcopieswillbestoredinsecurelocationstobedefinedbythecompany.EachmemberofseniormanagementwillbeissuedaCDandhardcopyofthisplantobefiledathome.EachmemberoftheDisasterRecoveryTeamandtheBusinessRecoveryTeamwillbeissuedaCDandhardcopyofthisplan.Amasterprotectedcopywillbestoredonspecificresourcesestablishedforthispurpose.

1.3BackupStrategy

Keybusinessprocessesandtheagreedbackupstrategyforeacharelistedbelow.Thestrategychosenisforafullymirroredrecoverysiteatthecompany’sofficesin_____.Thisstrategyentailsthemaintenanceofafullymirroredduplicatesitewhichwillenableinstantaneousswitchingbetweenthelivesite（headquarters）andthebackupsite.

KEYBUSINESSPROCESS

BACKUPSTRATEGY

ITOperations

Fullymirroredrecoverysite

TechSupport-Hardware

Fullymirroredrecoverysite

TechSupport-Software

Fullymirroredrecoverysite

FacilitiesManagement

Fullymirroredrecoverysite

Email

Fullymirroredrecoverysite

Purchasing

Fullymirroredrecoverysite

DisasterRecovery

Fullymirroredrecoverysite

Finance

Fullymirroredrecoverysite

ContractsAdmin

Fullymirroredrecoverysite

Warehouse&Inventory

Fullymirroredrecoverysite

ProductSales

Fullymirroredrecoverysite

MaintenanceSales

Fullymirroredrecoverysite

HumanResources

Off-sitedatastoragefacility

TestingFullyMirroredRecoverysite-

Fullymirroredrecoverysite

WorkshopFullyMirroredRecoverysite-

Fullymirroredrecoverysite

CallCenter

Fullymirroredrecoverysite

WebSite

Fullymirroredrecoverysite

1.4RiskManagement

Therearemanypotentialdisruptivethreatswhichcanoccuratanytimeandaffectthenormalbusinessprocess.Wehaveconsideredawiderangeofpotentialthreatsandtheresultsofourdeliberationsareincludedinthissection.Eachpotentialenvironmentaldisasteroremergencysituationhasbeenexamined.Thefocushereisonthelevelofbusinessdisruptionwhichcouldarisefromeachtypeofdisaster.

Potentialdisastershavebeenassessedasfollows:

PotentialDisaster

ProbabilityRating

ImpactRating

BriefDescriptionOfPotentialConsequences&RemedialActions

Flood

3

4

Allcriticalequipmentislocatedon1stFloor

Fire

3

4

FM200suppressionsysteminstalledinmaincomputercenters.Fireandsmokedetectorsonallfloors.

Tornado

5

Electricalstorms

5

Actofterrorism

5

Actofsabotage

5

Electricalpower

failure

3

4

RedundantUPSarraytogetherwithautostandbygeneratorthatistestedweekly&remotelymonitored24/7.UPSsalsoremo