Network Disaster Recovery Plan

By Paul Kirvan, FBCI, CBCP, CISA

<Your Company>

Use this template as a framework for organizing your network disaster

recovery program and associated plans. For more information, read the
accompanying article on SearchDisasterRecovery.com about network
disaster recovery plans.

<Your Company>

Rel. 1, Ver. 0
Page 1
All Rights Reserved, 2011, TechTarget

Emergency notification contacts

Name

Address

HomePhone

Mobile/CellPhone

Emergency response activities

Action

1.
2.
3.
4.
5.
6.
7.
8.
9.

Who Performs

Identify and assess network outage

Review with IT management
Evacuate area if necessary
Initiate remedial actions to recover network assets
Decision to invoke network DR plan
Initiate DR plan activities
Contact appropriate vendors and carriers
Follow through on recovery procedures
Report to senior IT management

Lead network administrator

Lead network admin, director of net. ops
Building security
Lead network administrator or designee
Director of network operations, CIO
Lead network administrator or designee
Lead network administrator or designee
Network administration team
Lead network administrator or designee

<Your Company>

Rel. 1, Ver. 0
Page 2
All Rights Reserved, 2011, TechTarget

Revisions control page

Date

Summary of changes made

<Your Company>

Changes made by (Name)

Rel. 1, Ver. 0
Page 3
All Rights Reserved, 2011, TechTarget

Purpose
The purpose of this network disaster recovery (NDR) plan is to prepare <Your Company> in the
event of disruptions affecting corporate local area networks (LAN), wide area networks (WAN),
Internet access and wireless network services due to factors beyond our control (e.g., natural
disasters or man-made events). This plan will also guide restoration of network integrity and
normal operations to the widest extent possible in a minimum time frame. All <Your Company>
locations that are connected to the WAN are expected to implement preventive measures
whenever possible to minimize operational disruptions and to recover as rapidly as possible
when an incident occurs.
This plan identifies vulnerabilities and recommends necessary measures to prevent extended
network outages. It is a plan that encompasses all <Your Company> network operations in all
locations.
Scope
The scope of this plan is limited to <describe>. This is a disaster recovery (DR) plan, not a daily
problem resolution procedures document.
Plan Objectives

Servesasaguidefor<YourCompanys>ITvoice,data,Internetandwirelessnetwork
recoveryteams
Referencesandpointstothelocationofnetworkoperationaldataoutsidethisdocument
Providesproceduresandresourcesneededtoassistinnetworkrecovery
Identifiesvendorsandcustomersthatmustbenotifiedintheeventofanetworkoutage
Assistsinavoidingconfusionexperiencedduringanetworkdisruptionbydocumenting,
testingandreviewingrecoveryprocedures
Identifiesalternatesourcesfornetworkequipment,networkservices,powersuppliesand
otherresources
Documentsstorage,safeguardingandretrievalproceduresforvitalnetworkrecordsandother
relevantdata

Assumptions

Keynetworkpeople(leadadministrator,administrators,teamleaders,techniciansand
alternates)willbeavailablefollowingadisaster
Thisplanandcriticalnetworkdocumentsarestoredinasecureoffsitelocationandnotonly
survivedthedisasterbutareaccessibleimmediatelyfollowingadisaster
OtherITdepartmentsandsupportorganizationswillhavetheirownDRplans

<Your Company>

Rel. 1, Ver. 0
Page 4
All Rights Reserved, 2011, TechTarget

Disaster definition
Anylossofcarrierservices(suchaslocalaccess,wideareanetworkchannelsorInternetaccess),
voice/dataconnectivity(suchasrouters,switches,PBXsorVoIPsystems),ornaturalorman
madedisasterthatcausesaninterruptioninnetworkconnectivityrelatingtovoice,data,Internet
andwirelesstechnologiesprovidedby<YourCompanys>IToperations.Thisplanidentifies
vulnerabilitiesandrecommendsmeasurestopreventextendednetworkoutages.
Recovery teams

EmergencyManagementTeam(EMT)
DisasterRecoveryTeam(DRT)
ITTechnicalSupport(IT)forNetworking

See Appendix A for details on the roles and responsibilities of each team.
Team member responsibilities

Each team member will designate an alternate/backup.

All team members should keep an updated calling list of team members work, home and cell
phone numbers both at home and at work.
All team members should keep this plan for reference at home in case a network disaster
happens after normal work hours. All team members should familiarize themselves with the
contents of this plan.

Instructions for using the plan

Invoking the plan
Ifaninitialassessmentofthenetworkdisruptionindicatesapotentiallyprolongedoutage(e.g.,
longerthaneighthours),thisplanbecomeseffectivewhenapprovedbyseniorITmanagement.
Theplanwillremainineffectuntilnetworkoperationsareresumedatallaffectedlocations.
Disaster declaration
TheSeniorManagementTeam,withinputfromtheEmergencyManagementTeam,Disaster
RecoveryTeamandITTechnicalSupport,isresponsiblefordeclaringadisasterandactivating
networkrecoveryteamsasoutlinedinthisplan.
Inamajordisastersituationaffectingmultiplecompanylocations,thedecisiontodeclarea
disasterwillbedeterminedby<YourCompanys>seniormanagement.TheEmergency
ManagementTeamandDisasterRecoveryTeamwillrespondbasedonthedirectivesspecified
byseniormanagement.
<Your Company>

Rel. 1, Ver. 0
Page 5
All Rights Reserved, 2011, TechTarget

Notification
Regardlessofthenetworkdisruptioncircumstances,ortheidentityoftheperson(s)firstmade
awareofthedisaster,theEmergencyManagementTeam(EMT)andDisasterRecoveryTeam
(DRT)mustbeactivatedimmediatelyinthefollowingcases:

Twoormoresystemsand/orsitesaredownconcurrentlyforthree(3)ormorehours.
Fiveormoresystemsand/orsitesaredownconcurrentlyforthree(3)ormorehours.
Anyprobleminvolvingavoice/data/Internet/wirelessnetworkfacilitythatwouldcauseeither
oftheaboveconditionstobepresentorthereiscertainindicationthateitheroftheconditions
isabouttooccur.

External communications
CorporatePublicRelationspersonnelaredesignatedastheprincipalcontactswiththemedia
(radio,television,andprint),regulatoryagency,governmentagenciesandotherexternal
organizationsfollowingaformalnetworkdisasterdeclaration.
Emergency management standards
Backup policy
Fullandincrementalbackupsprotectandpreservecorporatenetworkinformationandshouldbe
performedonaregularbasisforsystemlogsandtechnicaldocumentsthatarenoteasily
replaced,haveahighreplacementcostorareconsideredcritical.Backupmediashouldbestored
inasecureandgeographicallyseparatelocationfromtheoriginalandisolatedfrom
environmentalhazards.Backupnetworkcomponents,cablingandconnectors,powersupplies,
sparepartsandrelevantdocumentationshouldbestoredinasecureareaonsiteaswellasat
othercorporatelocations.
Networkspecificdataanddocumentretentionpoliciesspecifywhatrecordsmustberetainedand
forhowlong.Allnetworkorganizationsareaccountableforcarryingoutinstructionsforrecords
managementintheirorganization.
ITTechnicalSupportfollowsthesestandardsfordatabackupandarchiving,particularlyfor
networks:
Tape retention policy
Backupmediaisstoredatlocationsthataresecure,isolatedfromenvironmentalhazards,and
geographicallyseparatefromthelocationhousingnetworkcomponents.
Tapes(ifused)
Tapes greater than three years old are destroyed every six months.
<Your Company>

Rel. 1, Ver. 0
Page 6
All Rights Reserved, 2011, TechTarget

Tapes fewer than x years old must be stored locally offsite.

The system supervisor is responsible for the transition cycle of tapes.

System databases
Acopyofthemostcurrentnetworkandsystemdatabasesmustbemadeatleasttwiceper
monthorbasedonfrequencyofchangesmade.
Thesebackupsmustbestoredoffsite.
Theleadnetworkadministratorisresponsibleforthisactivity.
Offsite storage procedures
Tapes, disks and other suitable media are stored in environmentally secure facilities.
Tape or disk rotation occurs on a regular schedule coordinated with the storage vendor.
Access to backup databases and other data is tested annually.
Emergency management procedures
Thefollowingproceduresaretobefollowedbynetworkadministrationandoperationspersonnel
andotherdesignated<YourCompany>employeesintheeventofanetworkdisruptionorrelated
outage.Whereuncertaintyexists,themorereactiveactionshouldbefollowedtoprovide
maximumprotectionandpersonnelsafety.
Theseproceduresarefurnishedto<YourCompanys>managementpersonneltotakehomefor
reference.Severalpageshavebeenincludedtosupplyemergencycontacts.
Intheeventofanysituationwhereaccesstoabuildinghousingnetworkinfrastructure
equipmentisdenied,personnelshouldreporttoalternatelocationsorcontactsecurityfor
accessifthelocationisnotdamagedorquarantined.Primaryandsecondarylocationsare
listedbelow.
Alternate Locations

Workplace: <Name>

Attempt to contact your immediate supervisor or management

via telephone. Home and cell phone numbers are included in
this document.

Workplace: <Name>

Attempt to contact your immediate supervisor or management

via telephone. Home and cell phone numbers are included in
this document .

Workplace:<Name>

<Your Company>

Rel. 1, Ver. 0
Page 7
All Rights Reserved, 2011, TechTarget

ttempt to contact your immediate supervisor or management

via telephone. Home and cell phone numbers are included in
this document.

In the event of a natural disaster

In the event of a major catastrophe affecting <Your Companys> network operations,
immediately notify the < Name or Title of Person>.
Procedure

STEP
1

ACTION

NotifyEMTandDRTofimpendingeventastimepermits.
Ifimpendingnaturaldisastercanbetracked,begin
launchingnetworkDRplanswithin48hoursasfollows:
Deployportablegeneratorswithfuelonstandby.
Deploynetworktechnicalandadminpersonnelon
standby.
Deploytractortrailerswithreplacementworkspace,
antennas,power,computers,networkconnectorsand
phones.
Facilitiesdepartmentonstandbyforreplacement
shelters.
Basicnecessitiesareacquiredbysupportpersonnel
whendeployed:
Cashforoneweek
Foodandwaterforoneweek
Gasolineandotherfuels
Supplies,includingchainsaws,batteries,rope,
flashlights,medicalsupplies,etc.
24 hours prior to event:
Createanimageofnetworkandsystemdatabasesand
otherrelevantfiles.
Backupcriticalnetworkandsystemelements.
Verifybackupgeneratorfuelstatusandoperation.
CreatebackupsofPBXs,routers,VoIPsystems,email,
routers,switches,fileservers,etc.
Fuelvehiclesandemergencytrailers.
Notifyseniormanagement.

<Your Company>

Rel. 1, Ver. 0
Page 8
All Rights Reserved, 2011, TechTarget

In the event of a fire

Iffireorsmokeispresentinthefacilitywherenetworkinfrastructureassetsarelocated,evaluate
thesituationanddeterminetheseverity,categorizethefireasamajororminorincidentandtake
theappropriateactionasdefinedinthissection.Call911orcontactyourlocalfirstresponders
assoonaspossibleifthesituationwarrantsit.

Personnelaretoattempttoextinguishminorfires(e.g.,singlehardwarecomponentorpaper
fires)usinghandheldfireextinguisherslocatedthroughoutthefacility.Anyotherfireor
smokesituationwillbehandledbyqualifiedbuildingpersonneluntilthelocalfire
departmentarrives.
Intheeventofamajorfire,call911andimmediatelyevacuatethearea.
Intheeventofanyemergencysituation,suchassystemandnetworksecurity,sitesecurity
andpersonalsafetyarethemajorconcerns.Ifpossible,theleadnetworkadministratorand/or
designeeshouldremainpresentatthefacilityuntilthefiredepartmenthasarrived.
Intheeventofamajorcatastropheaffectingthefacility,immediatelynotifysenior
management.

Procedure

STEP
1
2
3

ACTION
Dial 911 to contact the fire department.
Immediately notify all other personnel in the facility of the situation
and evacuate the area.
Alert emergency personnel on:
<Enter PHONE NUMBERS>
Provide them with your name, extension where you can be reached,
building and room number, and the nature of the emergency. Follow
all instructions given.

AlerttheEMTandDRT.
Note: Duringnonstaffedhours,securitypersonnelwillnotifythe
SeniorExecutiveresponsibleforthelocationdirectly.

NotifyBuildingSecurity.
Localsecuritypersonnelwillestablishsecurityatthelocationandnot
allowaccesstothesiteunlessnotifiedbytheSeniorExecutiveor
his/herdesignatedrepresentative.

Contactappropriatevendorstoaidinthedecisionregardingthe
recoveryandresumptionofnetworkservicesandprotectionof
equipmentastimeandeventspermit.

<Your Company>

Rel. 1, Ver. 0
Page 9
All Rights Reserved, 2011, TechTarget

Allpersonnelevacuatingthefacilitieswillmeetattheirassigned
outsidelocation(assemblypoint)andfollowinstructionsgivenbythe
designedauthority.Undernocircumstancesmayanypersonnel
leavewithouttheconsentofasupervisor.

In the event of a network services provider outage

In the event of a network service provider outage, the guidelines and procedures in this
section are to be followed.
Procedure

STEP

ACTION

Notifyseniormanagementofoutage.

Determinecauseofoutageandtimeframeforitsrecovery.
Ifoutagewillbegreaterthanonehour,routeallcallsvia
alternateservices.

Ifitisamajoroutageandallcarriersaredownand
downtimewillbegreaterthan12hours,deploysatellite
phones,ifavailable.

In the event of a flood or water damage

In the event of a flood or broken water pipe near any network infrastructure location, the
guidelines and procedures in this section are to be followed.
STEP

ACTION

Procedure
1

Assessthesituationanddetermineifoutsideassistanceis
needed;ifthisisthecase,dial911immediately.

Immediately notify all other personnel of the situation and

to be prepared to cease voice and data operations.

Notifyallotherpersonnelinthefacilityofthesituation
andtobepreparedtoceaseoperationsaccordingly.

<Your Company>

Rel. 1, Ver. 0
Page 10
All Rights Reserved, 2011, TechTarget

Waterdetectedbelowraisedfloormayhavedifferent
causes:
Ifwaterisslowlydrippingfromanairconditioning
unitandnotendangeringequipment,contactrepair
personnelimmediately.

Ifwaterisofamajorquantityandfloodingbeneaththe
floor(watermainbreak),immediatelyimplement
powerdownprocedures.Whilepowerdown
proceduresareinprogress,evacuatetheareaand
followmanagementsinstructions.

Plan review and maintenance

Thisnetworkdisasterrecoveryplanmustbereviewedsemiannuallyandexercisedonatleastan
annualbasis.Thetestmaybeintheformofawalkthrough,mockdisaster,orcomponent
testing.Additionally,consideringthedynamicenvironmentwithin<YourCompany>,itis
importanttoreviewthelistingofpersonnelandphonenumberscontainedwithinthenetworkDR
planregularly.
ThehardcopyversionofthenetworkDRplanwillbestoredinacommonlocationwhereitcan
beviewedbysitepersonnelandtheEMTandDRT.Electronicversionswillbeavailablevia
<YourCompany>networkresourcesasprovidedbyITTechnicalSupport.Eachrecoveryteam
willhaveitsowndirectorywithchangemanagementlimitedtotherecoveryplancoordinator.
Alert/verification/declaration phase (x-x hours)
Plan checklists
Networkresponseandrecoverychecklistsandplanflowdiagramsarepresentedinthefollowing
twosections.ThechecklistsandflowdiagramsmaybeusedbyTechnicalSupportmembersas
"quickreferences"whenimplementingthenetworkDRplanorfortrainingpurposes.

Insertchecklistsand
otherrelevantprocedure
documentshere.

<Your Company>

Rel. 1, Ver. 0
Page 11
All Rights Reserved, 2011, TechTarget

Plan checklists
Initials

Tasktobecompleted

<Your Company>

Rel. 1, Ver. 0
Page 12
All Rights Reserved, 2011, TechTarget

Network diagrams

Insertnetworkdiagramsand
otherrelevantprocedure
documentshere.

Recovery flow diagrams

Insertnetworkrecoveryflow
diagramsandotherrelevant
proceduredocumentshere.

Notification of incident affecting the site

On-duty personnel responsibilities
If in-hours:
Uponobservationornotificationofapotentiallyseriousnetworkdisruptionatacompany
location,ensurethatpersonnelonsitehaveenactedstandardemergencyandevacuation
proceduresifappropriateandnotifytheEMTandDRT.
If out of hours:
ITTechnicalSupportpersonnelshouldcontacttheEMTandDRT.
Provide status to EMT and DRT
1.
ContactEMTand/orDRTandprovidethefollowinginformationwhenanyofthe
followingconditionsexist:(SeeAppendixBforcontactlist)

Networkperformancehassufficientlydegradedtowherenormaloperationsarenotpossible
forthreeormorehours.

<Your Company>

Rel. 1, Ver. 0
Page 13
All Rights Reserved, 2011, TechTarget

Anyproblematanynetworkinfrastructureasset,systemorlocationthatwouldcausethe
aboveconditiontobepresentorthereiscertainindicationthattheaboveconditionisabout
tooccur.

The EMT will provide the following information:

Locationofincident.
Typeofincident(e.g.,fire,hurricane,flood).
Summarizethedamage(e.g.,minimal,heavy,totaldestruction).
Meetinglocationthatisasafedistancefromthedisasterscene.
An estimated timeframe of when a damage assessment group can enter the facility (if
possible).
The EMT will contact the respective team leader and report that a disaster involving network
operations has occurred.
The EMT and/or DRT will contact the respective <Your Company> team leader and report
that a disaster affecting network operations has occurred.

Decide course of action

Basedontheinformationobtained,theEMTand/orDRTdecidehowtorespondtotheevent:
MobilizeITTechnicalSupport,repair/rebuildexistingnetworkoperationswithnetwork
technicalandadminstafforrelocatetoanewfacility.
Inform team members of decision
Ifadisasterisnotdeclared,thelocationresponseteamwillcontinuetoaddressandmanagethe
situationthroughitsresolutionandprovideperiodicstatusupdatestotheEMT/DRT.
Ifadisasterisdeclared,theEMTand/orDRTwillnotifyITTechnicalSupportimmediatelyfor
deploymentofnetworkDRplans.
Declareadisasterifthesituationisnotlikelytoberesolvedwithinpredefinedtimeframes.
Thepersonwhoisauthorizedtodeclareanetworkdisastermustalsohaveatleastone(1)
backupwhoisalsoauthorizedtodeclareadisasterintheeventtheprimarypersonis
unavailable.
Contact networking and equipment vendors (see Appendix I)

<Your Company>

Rel. 1, Ver. 0
Page 14
All Rights Reserved, 2011, TechTarget

Disaster declared: mobilize incident response/technical support teams/report to

command center
Onceanetworkdeskdisasterisdeclared,theDisasterRecoveryTeam(DRT)ismobilized.This
teamwillinitiateandcoordinatetheappropriaterecoveryactions.Networktechnicaland
administrativeemployeesshouldassembleatadesignatedlocationassoonaspossible.See
AppendixEforemergencylocations.
Conduct detailed damage assessment (This should be performed prior to
declaring a disaster)
1.

Under the direction of local authorities, IT Technical Support and/or EMT/DRT,

assess the damage to the network and related assets. Include vendors/providers of
installed network services and equipment to ensure that their expert opinion
regarding the condition of the network is determined ASAP.
A.

Participate in a briefing on assessment requirements, reviewing:

(1)
Assessment procedures
(2)
Gather requirements
(3)
Safety and security issues

NOTE: Access to the facility following a fire or potential chemical

contamination will likely be denied for 24 hours or longer.
B.

Document assessment results using Assessment and Evaluation Forms

contained in Appendix G:
Building access permitting:
Conductanonsiteinspectionofaffectedareastoassessdamageto
essentialnetworkrecords(files,manuals,contracts,
documentation,etc.)andelectronicdata.
Obtain information regarding damage to the network, e.g.,
environmental conditions, physical structure integrity, furniture,
and fixtures) from the DRT.

2.

Develop a Restoration Priority List, identifying facilities, vital records and

equipment needed for resumption of network operations that could be restored
and retrieved quickly.

3.

Recommendations for required resources.

<Your Company>

Rel. 1, Ver. 0
Page 15
All Rights Reserved, 2011, TechTarget

Contact DRT: Decide whether to continue to business recovery phase

TheEMTandDRTgatherinformationregardingtheevent;contactsseniormanagementand
providesthemwithdetailedinformationonstatus.
Basedontheinformationobtained,seniormanagementdecideswhethertocontinuetothe
businessrecoveryphaseofthisnetworkDRplan.Ifthesituationdoesnotwarrantthisaction,
continuetoaddressthesituationattheaffectedsite(s).

Network recovery phase (xx hours - full recovery)

Thissectiondocumentsthestepsnecessarytoactivatenetworkrecoveryplanstosupportfull
restorationofsystemsandnetworkfunctionalityateither1)theoriginalcompanylocationor2)
analternate/recoverysitethatwouldbeusedforanextendedperiodoftime.Coordinate
resourcestoreestablishnetworkoperationsattheprimarysiteandreconstructnetwork
operationsatatemporary/permanentsystemlocation,andtodeactivaterecoveryteamsupon
returntonormalnetworkoperationsineitherscenario.
<Your Company> System and facility operation requirements
Thesystemandfacilityconfigurationsforeachlocationareimportanttoreestablishnormal
networkoperations.AlistforeachlocationwillbeincludedinAppendixF.
Notify IT technical support staff and coordinate return to primary facility/location
SeeAppendixAforITTechnicalSupportstaffassociatedwithrecoveryofnetworkoperationsat
theoriginalsite.
Secure funding for return to work
Makearrangementsinadvancewithnetworkservicecarriersandequipmentvendorstorecover
networkoperationsattheprimarysite.

<Your Company>

Rel. 1, Ver. 0
Page 16
All Rights Reserved, 2011, TechTarget

Notify IT technical support staff/coordinate relocation to new facility/location

SeeAppendixAforITTechnicalSupportstaffassociatedwithconfiguringnetworkservicesat
analternatelocation(replacementfororiginalsite).
Secure funding for relocation
Makearrangementsinadvancewithnetworkservicecarriersandequipmentvendors.Make
arrangementsinadvancewithlocalbanks,creditcardcompanies,hotels,officesuppliers,food
suppliersandothersforemergencysupport.
Notify EMT and corporate business units of network recovery
UsingthecalllistinAppendixB,notifytheappropriatecompanypersonnel.Informthemofany
changestoprocessesorprocedures,contactinformation,hoursofoperation,etc.(maybeused
formediainformation).
Operations recovered
Assumingallrelevantnetworkoperationshavebeenrecoveredeithertotheoriginallocationor
toanalternatesitewithemployeesinplacetosupportnetworkoperations,thecompanycan
declarethatitsnetworkisfunctioningnormally.

<Your Company>

Rel. 1, Ver. 0
Page 17
All Rights Reserved, 2011, TechTarget

Appendixes
Appendix A: <Your Company> recovery teams
Emergency Management Team
Note: See Appendix B for contact list. Suggested members include senior
management, Human Resources, Corporate Public Relations, Legal Department, IT
Technical Support, Risk Management and Operations.

Charter:

Responsibleforoverallcoordinationofthenetworkdisasterrecoveryeffort,evaluationand
determiningdisasterdeclarationandcommunicationswithseniormanagement.

Support activities:
The Emergency Management Team:
Evaluateswhichrecoveryactionsshouldbeinvokedandcoordinatewiththecorresponding
networkrecoveryteams.
Analyzesnetworkdamageassessmentfindings.
SetsrestorationprioritybasedondamageassessmentreportsincollaborationwithIT
TechnicalSupport.
Providesseniormanagementwithongoingstatusinformation.
Actsasacommunicationchanneltocorporateteamsandmajorcustomers.
Workwithvendors,carriersandITTechnicalSupporttodeveloparebuild/repairschedule
Disaster Recovery Team (DRT)
Note: See Appendix B for contact list.

Charter:
Responsibleforoverallcoordinationofthenetworkdisasterrecoveryeffort,establishmentofthe
emergencycommandarea(ifneeded)andcommunicationswithseniormanagement,the
EmergencyManagementTeam,andITTechnicalSupportteams.

Support activities:
CoordinatewithEMT,seniormanagementandITTechnicalSupport
AssistwithdeterminationofnetworkrecoveryneedswithITTechnicalSupport.
Establishcommandcenterandassemblyareas.
Notifyallcompanydepartmentheadsandadvisethemtoactivatetheirplan(s)ifapplicable,
baseduponthedisastersituation.
Ifnonetworkdisasterisdeclared,takeappropriateactiontoreturntonormalnetwork
operationsusingregularnetworkoperationsstaff.
<Your Company>

Rel. 1, Ver. 0
Page 18
All Rights Reserved, 2011, TechTarget

Determineifcarriers,vendorsandotherteamsareneededtoassistwithdetaileddamage
assessment.
Preparepostdisasterdebriefingreport.
Coordinate the development of revised network recovery plans and ensure they are updated
semi-annually.

IT technical support

Charter
IT Technical Support will facilitate network recovery and restoration activities.

Support activities

Uponnotificationofdisasterdeclaration,reviewandprovidesupportasfollows:
1. Facilitatenetworkrecoveryandrestorationactivities,providingguidanceon
replacementequipment,systemsandnetworkservices,asrequired.
2. Coordinate testing of network operations to ensure the network is functioning
normally.

Appendix B: Recovery team contact lists

Emergency Management Team
Name

Address

Home

<Your Company>

Mobile

Rel. 1, Ver. 0
Page 19
All Rights Reserved, 2011, TechTarget

Disaster Recovery Team

Name

Address

Home

Mobile

Address

Home

Mobile

IT Technical Support
Name

Appendix C: Emergency numbers

First responders, network carriers, public utility companies and others
Name

ContactName

Phone

Appendix D: Contact list

Name

Address

Home

<Your Company>

Mobile

Rel. 1, Ver. 0
Page 20
All Rights Reserved, 2011, TechTarget

Appendix E: Emergency command center locations

Emergency command center - <Location Name>
Primary:
Address
Room XXXX
City, State
Contact: coordinator of rooms/space - (xxx) xxx-xxxx
Alternate:
Address
Room XXX
City, State
Contact: coordinator of rooms/space - (xxx) xxx-xxxx

Emergency command center - <Location Name>

Primary:
Address
Room XXXX
City, State
Contact: coordinator of rooms/space - (xxx) xxx-xxxx
Alternate:
Address
Room XXX
City, State
Contact: coordinator of rooms/space - (xxx) xxx-xxxx

<Your Company>

Rel. 1, Ver. 0
Page 21
All Rights Reserved, 2011, TechTarget

Appendix F: Forms
Incident/disaster form
UponnotificationofanetworkdisruptiontheondutypersonnelinNetworkOperationswill
maketheinitialentriesintothisform.ItwillthenbeforwardedtotheECCandwillbe
continuallyupdated.Thisdocumentwillbetherunningloguntilthehelpdeskincident/disaster
hasendedandnormalbusinesshasresumed.
TIMEANDDATE
________________________________________________________________________
TYPEOFEVENT
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
LOCATION
________________________________________________________________________
________________________________________________________________________

BUILDINGACCESSISSUES
________________________________________________________________________
________________________________________________________________________

<Your Company>

Rel. 1, Ver. 0
Page 22
All Rights Reserved, 2011, TechTarget

PROJECTEDIMPACTTOOPERATIONS
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
RUNNINGLOG(ongoingevents)
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________
________________________________________________________________________

<Your Company>

Rel. 1, Ver. 0
Page 23
All Rights Reserved, 2011, TechTarget

Critical equipment status form

CRITICALEQUIPMENTSTATUS
ASSESSMENTANDEVALUATIONFORM
RecoveryTeam:

__________________________________________

Equipment

[STATUS]
Condition
Salvage

1.___________________
2.___________________
3.___________________
4.___________________
5.___________________
6.___________________
7.___________________
8.___________________
9.___________________
10.__________________
11.__________________
12.__________________
13.__________________
14.__________________
15.__________________

_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________

Comments

Legend
Condition:

OKUndamaged
DBUDamaged,butusable
DSDamaged,requiressalvagebeforeuse
DDestroyed,requiresreconstruction

<Your Company>

Rel. 1, Ver. 0
Page 24
All Rights Reserved, 2011, TechTarget

Critical network channel status form

CRITICALNETWORKCARRIERCHANNELSTATUS
ASSESSMENTANDEVALUATIONFORM
RecoveryTeam:

__________________________________________

CarrierService(ckt#)

[STATUS]
Condition

1.___________________
2.___________________
3.___________________
4.___________________
5.___________________
6.___________________
7.___________________
8.___________________
9.___________________
10.__________________
11.__________________
12.__________________
13.__________________
14.__________________
15.__________________

_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________
_____________________

Comments
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________
_________________________

Legend
Condition:

OKUndamaged
DBUDamaged,butusable
DRDamaged,requiresrepairbeforereuse
DDestroyed,requiresreplacement

<Your Company>

Rel. 1, Ver. 0
Page 25
All Rights Reserved, 2011, TechTarget

Appendix G: Building evacuation information

Provideevacuationprocedures

Appendix H: Inventory of primary network services and equipment

Providelistofequipmentand
networkservices

Appendix I: Inventory of backup network services and equipment

Providelistofequipment

Appendix J: Approved vendor list

Server and computer equipment suppliers
CompanyName

Contact

Work

Mobile

Work

Mobile

Communications and network services suppliers

CompanyName

Contact

<Your Company>

Rel. 1, Ver. 0
Page 26
All Rights Reserved, 2011, TechTarget