You are on page 1of 17

disaster

Disaster
Recovery Plan
Prepared by

Park City, UT 84060
email - info@e-janco.com
Web site – http://www.e-janco.com and http://www.it-toolkits.com
Version 3.0

recovery
© 2005 Copyright Janco Associates, Inc. ALL RIGHTS RESERVED

. Edit replace “company logo” with your enterprise’s logo 7. As you modify the plan continue to save the DRP with a name that has an updated version number. Save As “your file name” 5. © 2001 . 6. 4. A REWARD of up to 1/3 of those fines will be paid to anyone reporting such a violation upon the successful prosecution of such violators. Anyone who makes an unlicensed copy of or uses the template or any derivative of it is in violation of United States and International copyright laws and subject to fines that are treble damages as determined by the courts. Print the first two pages of this template 3. – ALL RIGHTS RESERVED Easy use steps: 1.v001” 8. Inc. Edit replace “COMPANY” with your enterprise’s name.2005 Copyright Janco Associates. The purchaser of this template has acquired the rights to use it for a SINGLE Disaster Recovery Plan unless the user has purchased a multi-use license.License Conditions: This product is NOT FOR RESALE or REDISTRIBUTION in any physical or electronic format. Save As “your filename. Inc. The words are: Derived from the Disaster Recovery Plan Template of Janco Associates. Delete the first two pages. Read this License Conditions 2. The purchaser agrees that derivative of this template will contain the following words within the first five pages of that document.

If the licensed user is a consultant or consulting entity. Prepared by: 11 Eagle Landing Court Park City. Inc within the new document. UT 84060 informaton@e-janco. The single user license is for one enterprise for one facility.com or by phone at 435-940-9300.2005 copyright Janco Associates. Inc. Inc. All of this original material remains the property of Janco Associates.0 . provides the licensed user of the Disaster Recovery Plan document the right to use this document for INTERNAL USE ONLY for the enterprise of this user only. All questions about this via email at information@e-janco.com Version 3. Inc. a separate license must be purchased for each client facility and or customer location. Any document that is created using this template must have © 2001-2005 copyright Janco Associates. – ALL RIGHTS RESERVED NOT FOR RESALE Janco Associates.DISASTER RECOVERY PLAN FOR Company logo here © 2001 . and the user is granted a limited use license. If this template is used for more than one facility than either an enterprise version or multiple copies of the template should be purchased. using this document for a third party (client or customer of the licensed user).

....... PC Policies and Procedures HandiGuide.... 26 Off Site Storage .........................................................26 Back-up Files ...........0 Plan Introduction ...........................10 Responsibility.......................... 25 Off Site Storage ................................................ Metric for the Internet and IT Management HandiGuide.............................com Version 3............................................ Inc........... Janulaitis and published by Janco Associates............. 25 COMPANY Data Center ..15 Scope............ 8 DRP Scope.........................24 3..............................5 1..................................................................................................................................................................................................................................1 COMPANY Data Center Systems ...................2 2......3 1...................................................................6 2............................... 25 Storage Rotation............................................................................. V.......3 2.......22 2. 26 COMPANY Data Center ................... These copyrighted materials remain the property of the copyright owners and the licensed user of this document is only granted a limited use license of this material.....11 Key Plan Assumptions.....................................16 Objectives ....................................1 1..................................12 Disaster Definition ...................................................................... 7 Mission and Objectives . and the IT Position Description HandiGuide which are copyrighted by M..........4 3..........................................................2 1...................................0 1...................................................................Company logo here Disaster Recovery Plan Table of Contents1 1.................... For more information see www............ 26 Department ................................................25 Back-up Files ....................0 Backup Strategy ........1 2........... 27 1 Major sections of this document were extracted from Client Server Management HandiGuide....................17 Critical Time Frame ............................2 Departmental File Servers ... 25 3........6 Summary.....................18 Application System Impact Statements.......14 Business Impact Analysis .......................................................................... 26 Storage Rotation.........................................................................4 1....0 CONFIDENTIAL Page 2 . 9 Authorization ......................19 Essential 19 Delayed 19 Suspended 19 2........e-janco....................21 2........................5 Information Reporting ...........

..... 34 Storage Rotation......................... 28 Storage Rotation............................. 31 Desktop Workstations (In Office)........................................................... 34 COMPANY Data Center ...... 30 Storage Rotation................................................................................ 37 PDA’s ..........................................................................................5 3.............28 Back-up Files .......................................................3 3............... 36 COMPANY Data Center ........................ 30 Outsourced Sites ............................................... 32 Storage Rotation............................................... 34 Desktop Workstation location ............................. 32 Desktop Workstation location ...................30 Back-up Files ... 36 Laptop location ........................................................................................ 38 Laptop location ............................................. 28 Wireless Network File Server Area........................32 Back-up Files .................................................7 3................6 3................................................................................ 38 Storage Rotation.......... 38 Off Site Storage .................. 33 Off Site Storage .................... 36 Off Site Storage ....................................... 36 Storage Rotation. 38 COMPANY Data Center .......36 Back-up Files ....................38 Back-up Files ...........................................................................................................................0 Disaster Recovery Plan Wireless Network File Servers............................................................................4 3.......................................................................................................................................................................................................................................................................... 35 Laptops ...........................34 Back-up Files ......... 28 COMPANY Data Center .............. 29 Data at Outsourced Sites (including ISP’s) .................................... 32 COMPANY Data Center ................ 28 Off Site Storage ........ 30 COMPANY Data Center ................................................................................................................................................ 33 Desktop Workstations (Off site including at home users) ...............................Company logo here 3. 39 CONFIDENTIAL Page 3 .......................................................................................................... 30 Off Site Storage ........................................... 34 Off Site Storage ..8 Version 3..........

....3...................................63 Pre-Disaster ...........43 Plan 1 43 Plan 2 45 Plan 3 46 5......55 Damage Assessment and Salvage Team Responsibilities 55 Pre-Disaster .................................................................................................... 54 Post-Disaster......................3..... 55 5.........58 Pre-Disaster ............................ 62 Post-Disaster.......................0 Disaster Recovery Organization ........................Company logo here 4.........51 Recovery Team Responsibilities ...................................................................................52 5...................2 5................3........................................................................... 57 5........................................................... 53 Recovery Manager Responsibilities .... 58 5.............................1 5.3 Version 3..................... 57 Post-Disaster..............................6 Systems..........7 Communications...............0 5.........................................................................................................3..42 4..................57 Pre-Disaster ..............41 4......................2 Escalation Plans ...............................................0 Disaster Recovery Plan Recovery Strategy ..............................................3.......................... 61 5................ 53 Pre-Disaster ......................................... 60 5........................................................................................62 Pre-Disaster ....................................49 Disaster Recovery Team ...............................................3 Decision Points..................61 Pre-Disaster .3 Physical Security .................. 58 Post-Disaster.............1 Recovery Management.................................................... 63 Post-Disaster........................... 60 Post-Disaster.......... 63 CONFIDENTIAL Page 4 .........8 Operations.............................................................3...1 Approach..5 Hardware Installation ...............................40 4.......................................................................3.3.........47 Recovery Team Organization Chart ...................................................................................................... 54 Pre-Disaster ............................................................. 55 Post-Disaster...........................................60 Pre-Disaster.................................... Applications and Network Software .... 61 Post-Disaster..................................................4 Administration..................... 54 5.................................................................................................52 Senior Recovery Manager Responsibilities ..... 62 5............................ 53 Post-Disaster.....................................2 Damage Assessment and Salvage Team..........................................

................108 8................66 Recovery Management ........................................117 Contacts ......................3 Disaster Recovery Team Call List ........................71 Physical Security ..................64 General ..........................0 Plan Administration ......................81 Communications.............0 Appendix ..77 Hardware Installation ...............................................................................................................6 Hardware/Software Inventory ...............93 7................................................101 8......90 7............5 6.....................1 Disaster Recovery Manager .2 6.....7 6........................................................ Applications & Network Software .......94 7.........................5 Off-Site Inventory ...................................................106 8...10 JOB Description...............117 Version 3..............................116 Position Purpose ..2 Distribution of the Disaster Recovery Plan ..113 8....................................4 Vendor Phone/Address List ...98 8.............84 Operations.................1 6..................................................Company logo here 6.....116 Principal Accountabilities ......................................9 Disaster Recovery Plan Disaster Recovery Emergency Procedures ......110 8...............................................................................................................86 7...........................................................................0 CONFIDENTIAL Page 5 .............................6 Evaluation of the Disaster Recovery Plan Tests ..6 6.........................117 Position Requirements ..................104 8.......................................................................109 8............................................................92 7..........75 Administration.........3 Maintenance of the Business Impact Analysis ..................8 6...................................................................................114 8........68 Damage Assessment and Salvage...........................................116 Authority ............103 8.......................8 Preventative Measures.....1 Plan Distribution...............0 6...........3 6....................................116 Essential Position Functions .................7 People Interviewed..................5 Testing of the Disaster Recovery Plan .4 6..................................9 Sample Application Systems Impact Statement .................4 Training of the Disaster Recovery Team ...............79 Systems........................................7 Maintenance of the Disaster Recovery Plan.......................................................................................................................................116 Problems and Challenges............2 COMPANY Sales Offices ...97 7.................................................................................88 7......................89 7..............115 Disaster Recovery Manager ......112 8........................

......................................................................... 131 Documentation .......................................................... 141 Version 3......................................................................... 139 Initial Implementation. 125 Historical Information............................................................................................... 126 Operating Environment........................................................... 137 Business Impact Analysis.............................0 CONFIDENTIAL Page 6 .................................................................................... 134 8..............11 Application Inventory and Business Impact Analysis Questionnaire ................................................... 136 Project Scheduling.................... 129 Database / File Names .......................................................................................................................................... 123 Processing Information....... 132 Security...............................................Company logo here Disaster Recovery Plan 8... 122 User Environment................................................................................................................................................................................135 Project Initiation ..................................................... 133 Equipment Requirements by Department ............................118 Facility / Business Function / Application . 132 Application Support and Maintenance......................................................... 140 Post Implementation. 121 System of Intenal Controls .................................................................................................. 127 Criticality of Application .................................................................. 133 Backups................................................................................................................................................................ 132 Resource Usage...................................................................................................................................................................................................................................................... 120 Sarbanes-Oxley Compliance................................................................................ 138 Backup and Recovery Strategy ......................................................12 Work Plan...........

The Disaster Recovery Plan preparation process includes several major steps as follows: ‰ Identify Systems and Applications currently in use ‰ Analyze Business Impact of computer impact and determination of critical recovery time frames ‰ Determine Recovery Strategy ‰ Document Recovery Team Organization ‰ Document Recovery Team Responsibilities ‰ Develop and Document Emergency Procedures ‰ Document Training & Maintenance Procedures These steps were conducted and this document represents the completed effort in the preparation of the COMPANY Disaster Recovery Plan.e-janco. Internet.com Version 3. Inc.0 CONFIDENTIAL Page 7 . The intent of a Disaster Recovery Plan is to provide a written and tested plan directing the computer system recovery process in the event of an interruption in continuous service resulting from an unplanned and unexpected disaster. and the potential loss of revenue and operational control that may occur in the event of a disaster.0 Disaster Recovery Plan Plan Introduction COMPANY recognizing their operational dependency on computer systems.2003 Copyright Janco Associates.Company logo here 1. including the Local Area Network (LAN). © 2001 . authorized the preparation. Database Servers. Derived from the Disaster Recovery Plan Template of Janco Associates. implementation and maintenance of a comprehensive disaster recover plan. Intranet and e-Mail. – ALL RIGHTS RESERVED www.

5 Disaster Recovery Plan Key Plan Assumptions The following assumptions have been established as the basis for the development of the Disaster Recovery Plan: Version 3. telephone switching centers. This includes items stored in any on-site security location. supporting infrastructures (power grids. ‰ The plan is base upon a sufficient number of center staff not being incapacitated to implement and affect recovery. ‰ Off-site inventory and equipment acquired through vendors is considered to be the only resource with which to recover computer processing. and key personnel on the DRP team due to injury and or death. ‰ The “worst-case” destruction assumes the loss of the total facility. the level of detail of the plan is written to a staff experienced in the Company’s computer services. and cell and wireless transmission sites within a ten (10) mile radius of the facility). ‰ An alternate site (backup computer facility) in which to establish recovery of computer processing is necessary. Time frame requirements to recover computer processing are significantly less than estimated times to repair/reconstruct a data center on an emergency basis. Therefore.0 ‰ The plan is designed to recover from the "worst case" destruction of the COMPANY operating environment. microwave towers. In that case the plan should be documented to the extent that an employee (or contractor if so authorized) can assume the key management role in the execution of the DRP.Company logo here 1. CONFIDENTIAL Page 12 . which is perhaps a more likely situation. ‰ Although the plan is designed for worst case. Items at the original site are not expected to be salvageable and used for recovery. Development. testing and implementation of new technologies and applications are suspended so that all resources are available to recover existing critical production processing. The worst case includes any non-data processing function that may be in close proximity to the data center or workstations. inherent in the plan strategy is the ability to recover up to the most minor interruption.

the following COMPANY operating departments were interviewed (See Appendix . and cell and wireless transmission sites within a ten (10) mile radius of the facility To determine the maximum time frame allowable. such as word-processing.Company logo here 2.0 CONFIDENTIAL Page 16 .1 Disaster Recovery Plan Scope The scope of the Business Impact Analysis is the COMPANY operating departments supported by data center facilities located at ____________ ______________________________. This network encompasses the following information technology services: ‰ General business applications. spreadsheet and database applications ‰ e-Mail ‰ File servers supporting all business operations ‰ Gateway to the host applications and other sites ‰ WEB / e-commerce processing ‰ Wireless Networks ‰ Non-COMPANY infrastructure including power grids.People Interviewed): ‰ Information Technology ‰ Sales ‰ Marketing ‰ Credit ‰ Finance ‰ Human Resources ‰ Manufacturing ‰ Distribution ‰ Customer Service ‰ Accounting ‰ Investor Relations Version 3. microwave towers. telephone switching centers.

0 Disaster Recovery Organization The effectiveness and operability of the Disaster Recovery Plan is dependent on the knowledge and expertise of the personnel who develop and execute the plan.0 ‰ Expeditious and efficient recovery of computer processing. A recovery from a disaster is best conducted by teams of personnel that are formed to perform specific functions (e. and ‰ Streamline reporting of recovery progress from recovery teams upward to senior management and end-users. operations). The worst case.g. The organization of the staff to recover the system is designed for the worst case situation. The number and types of teams are dictated by the size and type of computer processing capabilities and facility the plan is being developed to recover. requiring a move to the alternative site. hardware acquisition. The Disaster Recovery Team Organization.. is set up to accomplish: Version 3. CONFIDENTIAL Page 47 . hardware installation. senior management and COMPANY as a whole. therefore. It is essential to determine which talents are required and to assign personnel who meet those requirements.Company logo here Disaster Recovery Plan 5. ‰ Major impact/expenditure decisions at the management level. ‰ Intermediate and minor impact/expenditure decisions within the Information Technology personnel during the recovery process. must be executed by a coordinated team to minimize the operational impacts to end-users.

3. Specifically.0 CONFIDENTIAL Page 52 . The team is activated at the call of the Senior Recovery Manager when a disaster occurs. ensuring restoration occurs within planned Critical Time Frames and assists in resolving problems requiring management action. The Recovery Management Team consists of the Senior Recovery Manager and the Recovery Manager.Disaster Recovery Plan Company logo here 5.1 Recovery Management The Recovery Management is responsible for managing the recovery effort as a whole. the Recovery Management Team is charged with: Version 3.3 Recovery Team Responsibilities 5. All other recovery teams report directly to the Recovery Management Team.

Disaster Recovery Plan Company logo here 5. Pre-Disaster ‰ Understands the role and responsibilities within the Disaster Recovery Plan ‰ Work closely with recovery management team to reduce possibility for disaster in data center (See Preventative Measures in Appendix) ‰ Trains employees in emergency preparedness ‰ Participates in Disaster Recovery Plan tests as required ‰ Maintains current system and LAN configuration in off-site storage Post-Disaster Version 3. when available CONFIDENTIAL Page 60 . communications and operations team members on space configuration of alternative site ‰ Coordinates transportation of salvageable equipment to alternative site ‰ Notifies administration team of equipment required ‰ Ensures the installation of ___ temporary terminals connected to alternative site mainframe ‰ Prepares plans for hardware installation at the alternative site ‰ Installs hardware at the alternative site ‰ Plans and coordinates the transportation and installation of hardware at the permanent site. physical planning. and installation of data processing equipment to meet the required processing capacity of COMPANY in the event of a disaster. This includes responsibility for ordering and installing hardware for both the alternative site and the permanent site.5 Hardware Installation The Hardware Team is responsible for site preparation.3.0 ‰ Verifies with the alternative site pending occupancy requirements ‰ Inspects the alternative site for physical space requirements ‰ Interfaces with software.

Company logo here ENTERPRISE Business and IT Impact Questionnaire The purpose of this questionnaire is to determine the criticality of the applications used at ENTERPRISE.e. do you hold the plans. The information provided will be used to develop a Application Inventory that can be used in the Disaster Recovery Plan that minimizes the impact of the loss of this application in the event of a disaster.0 CONFIDENTIAL Page 120 . are there extensive modifications to this application (briefly describe modifications): What programming language was used to create the application? How old is this application (maturity): Who is the owner of this application (i. (PLEASE USE ADDITIONAL BLANK PAPER OR ATTACHMENTS WHEREVER NECESSARY) Facility / Business Function / Application Name: Provide a brief description/purpose – mission: What are the main functions? Was this developed in-house or purchased from a vendor? If purchased from a vendor. source code etc. Joe Smith of Accounting): Version 3.: If the application is a purchased package.

12 Work Plan Below are a set of tasks that can be used to create a work plan to implement the Disaster Recovery Planning process as defined in this template21. a deliverable for a status meeting could be defined as approved minutes of the meeting and the deliverable for a function assessment could be a completed Application Inventory and Business Impact Questionnaire for the function (see page 118).0 CONFIDENTIAL Page 135 .Company logo here 8. Version 3. For example. end date and deliverable defined. 21 There is an Excel spreadsheet that comes with this document that can be use for the actual planning and reporting process. Each of the tasks should have an individual or steering committee member assigned to the task along with start date.

Company logo here Project Initiation 1.Reporting Relationships 5.0 Deliverable .Team Orientation Agenda and Schedule 9. Assign responsibility for day-to-day project management ƒ Deliverable . Review and Modify Plan Assumptions (see page 12) ƒ Deliverable . Define scope of effort (see DRP Scope page 9) ƒ Deliverable .Plan Assumptions 6. Identify COMPANY executive management sponsor ƒ Deliverable .Staff Assignments 7.Disaster Recovery Plan . Allocate staffing resources for DRP creation (see Recovery Team Members page 49). Schedule project team orientation ƒ Deliverable .Steering Committee minutes and meeting schedule 3.Announcement Letter and Distribution List CONFIDENTIAL Page 136 .Staff Assignments 8. Create DRP Steering Committee and schedule update meetings through plan completion (if possible through plan implementation) ƒ Deliverable .Scope 4.Organizational responsibility assigned 2. Create and distribute project announcement for COMPANY (See Authorization page 10) ƒ Version 3.Disaster Recovery Plan . Define status reporting mechanism ƒ Deliverable . Note: members and alternates should be assigned ƒ Deliverable .