SACRAO 2012 T2.08 Technical Disaster Recovery 2012 SACRAO

National Park Community College Hot Springs, AR 4,156 Students 231 Faculty and Staff 173 Adjunct Faculty Dr Allen B Moody Associate Dean for Academic Affairs

Rich Mountain Community College April 9, 2009

Rich Mountain Community College Classes at the Mena campus resumed at Rich Mountain Community College April 20, 2009 – 11 days later. 70% of classes could be held on campus. Rich Mountain is using two separate locations for the other thirty percent of classes. Chancellor Wayne Hatcher reported that the Arkansas Disaster Insurance was providing excellent coverage with up to eighty percent or more coverage of expenses for damage. ADHE has requesting additional funds through the Federal Stimulus program. AATYC member colleges have helped the campus with its immediate classroom/computers needs and related staff support. The biggest concern at the present time is for the faculty/staff and students that suffered due to the tornado. Eight (8) faculty/staff members lost their homes and belongings. We are not sure of the total number of students that suffered a loss. Rich Mountain is committed to providing counseling to those faculty/staff and students in need. Rich Mountain has set-up a task force of four (4) to five (5) individuals to coordinate the efforts to collect furniture and other necessary supplies for those that lost everything in the storm.

2009 Legislation The Arkansas Campus Security Enhancement Act Task Force Timeline Aug.19, 2009 First Meeting at ADHE Sep.1, 2009 Task Force to Receive Safety Plans From Each Institution For Review Sep.1, 2010 Provide Written Review & Guidelines The Task Force shall meet at least quarterly; The Task Force shall cease to exist by December 31, 2010

Methods to initiate campus-wide emergency notification (%)

Need a continuity of operations plan

Step One: Policy Without policy, having technology in place is pointless What policies are needed? – Campus emergency response plan – Information Technology emergency response plan – Departmental emergency response plan

Business Continuity Plan (BCP) Identification of Stakeholders IT infrastructure Data backup and recovery Available resources Continuity requirements Disaster prevention methods Analysis of an organization’s business processes including

Campus Emergency Response Plan Public document usually maintained by Campus Police/Public Safety/Security department Includes public versions of all departmental and administration wide disaster recovery plans Details the following, at a minimum: – Definition of “major” and “minor” emergencies and “disaster” – Roles of all of the major players – Emergency response command center – Who is authorized to respond to news media – How rebuilding after an emergency/disaster will be handled – Training and rehearsal Reviewed annually

Disaster Recovery is the process, policies and procedures related to preparing for recovery or continuation of Technology Infrastructure critical to an organization after a natural or human-induced disaster Disaster Recovery Planning

Physical securityData accessCritical servicesPasswords and user accountsBackups and data storageInternet and useIT security software

Prevention Local mirrors of systems and/or data and use of disk protection technology such as RAID Surge protectors — to minimize the effect of power surges on delicate electronic equipment Uninterruptible power supply (UPS) and/or backup generator in the event of a power failure Fire preventions — alarms, fire extinguishersAnti-virus software and other security measures Implementation of precautionary measures to prevent a disaster in the first place.

What is Data? Paper records Digital records All that stuff you have in your head but never put on paper How is it stored? – Filing cabinets, cardboard boxes, under the coffee cup – CD/DVD – Hard drive – Network storage – “The Cloud”

Data Protection Common strategies for data protection. Backups made to tape/disks/offsite disks Replication of data to an off-site location, which overcomes the need to restore the data (only the systems then need to be restored or synchronized). This generally makes use of storage area network (SAN) technology Replication of data to an off-site location, which overcomes the need to restore the data (only the systems then need to be restored or synchronized). This generally makes use of network attached storage (NAS) or storage area network (SAN) technology

NAS vs. SAN NAS = Network Attached Storage – External hard drive connected to a network – Small hard drive array connected to a network – Accessed via a network drive icon on the computer – NOT an enterprise level solution SAN = Storage Area Network – Large storage array – Used by servers – Users don’t even know it’s there – Very expensive, massive storage capacity

Cloud Storage High availability systems which keep both the data and system replicated off-site, enabling continuous access to systems and data Online backup systems are typically built around a client software program running a schedule, typically once a day, and usually at night. The program collects, compresses, encrypts, and transfers the data to the remote backup service provider's servers

“The Cloud”

Phase I – Analysis and Evaluation Include timeline, resources, and expected output Risk Assessment and Business Impact Analysis Onsite and Offsite Backup and Recovery Procedures Alternate site location selection Phase II – Plan Development and Testing Development of Disaster Recovery Plan Testing the plan Implementation of the DRP Phase III – Monitoring and Maintenance Maintenance of the Plan through updates and review Periodic inspection of DRP Documentation

Stakeholder analysis.Project scope and critical processes.Project definition statement.College Unit listings and contact informationDependencies.Timeline planning.Project goal statements.Stakeholder communications plan.

Immediate Reaction for the Office  Evacuation of the Facility  Secure critical data  Gather all work in process and all unprocessed work  Key personnel to assist in evacuation  List of disabled, pregnant, individuals or those who have medical problems  Gather at a Pre-Determined location  Department head counts  Notification of missing staff  Remain in location until called upon for disaster relief or released

Recovering from a Disaster A. People always come first Are you safe Is your family safe Are your co-workers safe B. Place Is your home safe/stable Do you have transportation Is your campus accessible Is your office accessible C. Infrastructure Is there power Do the phones work Is there Internet Did IT survive D. Systems Procure replacement hardware Install hardware/software Recover data from backup Test and return to service