1. Disaster Recovery Management By: Chris Rozic COSC 481

2. Direction Differences between business continuity plan and a disaster recovery plan Differences between business continuity plan and a disaster recovery plan Two parts to properly manage a disaster recovery plan Two parts to properly manage a disaster recovery plan Pre-Planning tasks Pre-Planning tasks Four parts of preparation Four parts of preparation Actual process of Disaster Recovery Plan Actual process of Disaster Recovery Plan Six key parts to the creation of the plan Six key parts to the creation of the plan

3. Differences Business Continuity Plan Business Continuity Plan Proactive response Proactive response Nature of the business continuity Nature of the business continuity Services of primary concern Services of primary concern Disaster Recovery Plan Disaster Recovery Plan Reactive response Reactive response recovery steps needed recovery steps needed Services of primary concern Services of primary concern

4. Differences continued

5. Pre-Planning Tasks Examine the critical issues Examine the critical issues Critical business applications Critical business applications Performance indicators Performance indicators Allows for measurement of plans effectiveness Allows for measurement of plans effectiveness Identify possible scenarios and priorities Identify possible scenarios and priorities Analyze top disasters impact on the business Analyze top disasters impact on the business Approval Approval Submit proposal Submit proposal

6. Critical Issues Establish critical applications Establish critical applications 10 important Issues should be addressed and examined in: 10 important Issues should be addressed and examined in: Pre-stages of development Pre-stages of development During the development During the development Following the completion of development Following the completion of development

7. Performance indicators Combination of Combination of Project statuses Project statuses Test runs of the infrastructure Test runs of the infrastructure Examples of performance indicators Examples of performance indicators Periodic reports Periodic reports Representation Representation Periodic tests Periodic tests Review process Review process Analysis Analysis

8. Possible Scenarios Analysis of disasters should include: Analysis of disasters should include: Effects on communications Effects on communications Impact Impact Disruption Disruption Seven questions should be asked and well thought out Seven questions should be asked and well thought out

9. Approval Prepare a well directed and clear proposal Prepare a well directed and clear proposal Present to upper management Present to upper management Critical for obtaining the required resources Critical for obtaining the required resources Once approved then begin establishing plan Once approved then begin establishing plan

10. Actual process of Disaster Recovery Plan Six key parts to creation of plan Six key parts to creation of plan Working group Working group Perform risk assessments and audits Perform risk assessments and audits Establishing priorities Establishing priorities Developing a resiliency design and recover strategy Developing a resiliency design and recover strategy Up-to-date inventory and documentation Up-to-date inventory and documentation implementation implementation

11. Working Group Oversees the development and implementation of entire plan Oversees the development and implementation of entire plan Should include the key personal Should include the key personal Should be held responsible for Should be held responsible for Activities Activities Planning Planning Providing monthly reports Providing monthly reports

12. Risk Assessments and Audits Working group must thoroughly understand Working group must thoroughly understand Businesses technology Businesses technology Networks Networks Systems and services Systems and services Working Group should prepare risk analysis Working Group should prepare risk analysis

13. Establishing Priorities Three commonly used priority levels Three commonly used priority levels Mission critical Mission critical Require significant effort to restore Require significant effort to restore Important Important Require moderate effort to restore Require moderate effort to restore Minor Minor Addressed last Addressed last

14. Design and Recovery Strategy: Resiliency Design Resilience of the network three levels should be examined Resilience of the network three levels should be examined Reliable networks Reliable networks High-availability networks High-availability networks Nonstop network environments Nonstop network environments Evaluating the networks should be comprehensive Evaluating the networks should be comprehensive Network links Network links Hardware resiliency Hardware resiliency Network design Network design Network services resiliency Network services resiliency

15. Design and Recovery Strategy Continued: Recovery Plan Address all aspects of the business Address all aspects of the business Include the expected Include the expected Down time of services Down time of services Action plans Action plans Escalation procedure Escalation procedure Provide a determination of certain thresholds Provide a determination of certain thresholds Encompass a backup strategy Encompass a backup strategy

16. up-to-date inventory and documentation Up-to-date inventory lists include: Up-to-date inventory lists include: Locations Locations Devices Devices Vendors Vendors Used services Used services Contact names Contact names

17. up-to-date inventory and documentation Continued documentation should include documentation should include Complete inventory of priorities Complete inventory of priorities Reviews Reviews Gap and risk analysis Gap and risk analysis Implementation plan Implementation plan Disaster recovery plan Disaster recovery plan Appropriate training Appropriate training

18. Implementation Key decisions must be made regarding: Key decisions must be made regarding: How it should be implemented throughout the organization How it should be implemented throughout the organization Who the critical and key members should be and their associated roles Who the critical and key members should be and their associated roles Practice the actual disaster recovery process Practice the actual disaster recovery process