Topic of Session Disaster Recovery Planning

Who Am I Joe Noll Founder and President of RKL eSolutions LLC Partner at Reinsel Kuntz Lesher LLP Microsoft Certifications: MCDBA, MCSD, MCITP, MCM SQL Server 2008 Sage Certifications: Sage 500 ERP Sage X3 ERP

Agenda Topics Terminology Definitions Planning Checklist Summary Wrap Up

Terminology Business Continuity Plan (BCP) Disaster Recovery Plan (DRP) Recovery Point Objective (RPO) Recovery Time Objective (RTO) Recovery Cost Objective (RCO) Emergency Response Plan (ERP)

Planning for Protection Business Continuity...allows for on going real-time continuous operation while the interruption is corrected. Disaster Recovery...enables your business to continue operation by providing alternative access to business critical data.

BCP Definition B usiness Continuity Planning (BCP) is an overarching plan to maintain business operations in the event of a disaster that may pose a threat of interruption to the business. In particular, BCP allows for on going, real-time, continuous operation (protection of and access to your data) while the interruption is corrected.

DR Definition Disaster Recovery (DR) is the process of recovering from a catastrophe. The recovery is facilitated by a DR solution. The disaster recovery solution enables the business to continue operation by providing alternative access to business critical data while the disaster related damage is repaired. The disasters can be of two types: (a) a sudden disaster/outage that is partial or site wide (weather related disasters, fire, terrorism or any enterprise-threatening event that puts the organization at risk of not recovering) or a (b) rolling disaster e.g. a virus attack that is propagated throughout the enterprise and discovered long after it has corrupted the data.

Basic Planning Steps Obtain Top Management Support Establish a Planning Committee Perform a Risk Assessment Establish Priorities for Processing and Operations Determine Recovery Strategies Perform Data Collection Organize and Document a Written Plan Develop Testing Criteria and Procedures Test the Plan Approve the Plan

Basic Benefits of Planning Minimize potential economic loss Decrease potential exposures Reduce the probability of occurrence Reduce disruptions to operations Ensure organizational stability Provide an orderly recovery Minimize insurance premiums Reduce reliance on certain key individuals Protect the assets of the organization Ensure the safety of personnel and customers Minimize legal liability Minimize decision-making during a disastrous event

Prioritizing Once the critical needs have been documented, management can set priorities within departments for the overall recovery of the organization. Activities of each department could be given priorities in the following manner: Essential activities - A disruption in service exceeding one day would jeopardize seriously the operation of the organization. Recommended activities - a disruption of service exceeding one week would jeopardize seriously the operation of the organization. Nonessential activities - This information would be convenient to have but would not detract seriously from the operating capabilities if it were missing.

Record Retention Guidelines This is always a good time to review your record retention plan. A systematic approach to records management is an important part of a comprehensive disaster recovery plan. Additional benefits include: Reduced storage costs. Expedited customer service. Federal and state regulatory compliance.

References Additional document – “Basic Checklist & Questionnaire.docx” SunGard Cloud Computing PaaS and IaaS at Expediant Gartner Reports

Summary The probability of a disaster occurring in an organization is highly uncertain. A disaster plan, however, is similar to liability insurance: it provides a certain level of comfort in knowing that if a major catastrophe occurs, it will not result in financial disaster. Insurance alone is not adequate because it may not compensate for the incalculable loss of business during the interruption or the business that never returns.

Wrap-up Thank you for attending! Q&A