10/11/20071 Business Continuity and Disaster Recovery Planning CMPE296T Fall 2007 Final Project Professor Richard Sinn Team Members Li Yang Smita Uniyal

10/11/20072 Agenda Introduction Examples of Threats Objective Of DRP Business Continuity Planning Business Impact Analysis Disaster Recovery Plan Testing and Simulation Globalization Conclusion

10/11/20073 Introduction What is business continuity and disaster recovery?  An organizational effort to respond to potential threats that may render critical resources useless  Disaster recovery and business continuity planning are processes that help organizations prepare for disruptive events.

10/11/20074 Examples of Threats Technological  Computer crashes, network failure, malware infections, data theft Human  Terrorism, theft, vandalism, political unrest Natural  Fires, floods, earthquakes, storms, disease

Objective of DRP Minimizes system downtime and recovery time. Minimizes the risk of permanent loss of core assets or the entire organization. Minimizes confusion during a disaster. Minimizes decision-making during a high-stress time when emotions will be running high. Provides a platform in which to simulate various disaster recovery scenarios. 10/11/20075

Business Continuity Planning Allocate available budget for essential organization functions. Plan a failover mechanism. Prepare a Disaster Recovery Plan Prepare a Business Resumption Plan Prepare a Business Recovery Plan Prepare a Contingency Plan 10/11/20076

7 Business Impact Analysis Procedure to gather information on crucial systems and processes Basic areas to cover  Contingency plan for absence of key personnel  Simulate emergency scenarios  Develop crisis communications with employees, customers, suppliers, outside world  For partnership with local police, firefighters, etc.  Continuously assess and improve performance

10/11/20078 Disaster Recovery Plan Addresses 3 key areas  Prevention: pre-disaster  Continuity: during a disaster  Recovery: post-disaster

10/11/20079 Disaster Recovery Plan Consists of  Clear concise procedures listed chronologically  Don’t assume people carrying out procedures are those who wrote them  Maintain up-to-date contact list  Specify time it takes to carry out procedures  Update DR plan on a regular basis

Testing and Simulation No amount of pre-planning can realistically prepare for the actual disaster itself Testing and simulation are useful methods to verify the effectiveness of DR plans

10/11/ Globalization A global workforce and supply chain forces corporations to monitor many sources of threats Example  Floods in India  SARS epidemic in China Solutions  Technology  Insurance

10/11/ Conclusion Disasters are always on the horizon; therefore every organization must have a plan to deal with it Globalization makes DR planning more critical Organizations must consider all aspects of business – especially personnel Good DR and BC planning does make a difference!

10/11/ [1] [2] Chin, P. (2005). Introduction to Disaster Recovery Planning. Retrieved November 23, 2007, from [3] tml tml [4] Mitchell, R. L. (2007). Four Disaster Survival Tips from Northrop Grumman. Retrieved November 25, 2007, from eBasic&articleId= &intsrc=cs_li_latest eBasic&articleId= &intsrc=cs_li_latest [5] Michael, G. (2006). Bombings, Floods, Plagues – Nothing slows India’s Outsourcing Boom. Retrieved November 26, 2007 from plague-%E2%80%93-nothing-slows-india%E2%80%99s-outsourcing- boom/ plague-%E2%80%93-nothing-slows-india%E2%80%99s-outsourcing- boom/ References