IT Disaster

Recovery Planning:
National University
When disaster strikes, business suffers. A goal of business planning is to mitigate
disruption of product and services delivery to the greatest degree possible when
disruption due to disaster occurs. Business continuity is the overarching concern.

An IT disaster recovery plan is the lynchpin of an overall business continuity strategy.

And the purpose of business continuity is to maintain a minimum level of service while
restoring the organization to business as usual. If a business fails to put a disaster
recovery plan in place then, when disaster strikes, the company risks losing customers
to competitors, losing funding and having the need for its products or services
reevaluated and deemed unnecessary.

Micro Focus encourages every organization to proactively execute an IT Disaster

Recovery plan. To assist, we provide you with a template as a springboard for your
organization’s customized plan. Please contact a Micro Focus representative when you
are ready!

National University Organization IT Disaster Recovery Plan Revision History

REVISION DATE NAME DESCRIPTION
1 November 5, 2022 Christine Jean Ilagan Version 1
Table of Contents
XYZ Organization IT Disaster Recovery Plan Revision History........................................................................................................2

Information Technology Statement of Intent..................................................................................................................................... 5

Policy Statement............................................................................................................................................................................... 5

Objectives......................................................................................................................................................................................... 5

Key Personnel Contact Info.............................................................................................................................................................. 6

Notification Calling Tree.................................................................................................................................................................... 7

External Contacts............................................................................................................................................................................. 8

External Contacts Calling Tree....................................................................................................................................................... 10

1 Plan Overview............................................................................................................................................................................. 10

1.1 Plan Updating..................................................................................................................................................................... 10

1.2 Plan Documentation Storage.............................................................................................................................................. 11

1.3 Backup Strategy.................................................................................................................................................................. 11

1.4 Risk Management............................................................................................................................................................... 11

2 Emergency.................................................................................................................................................................................. 12

2.1 Alert, escalation and plan invocation.................................................................................................................................. 12

2.1.1 Plan Triggering Events..................................................................................................................................................... 12

2.2.2 Assembly Points.............................................................................................................................................................. 13

2.2.3 Activation of Emergency Response Team.......................................................................................................................13

2.3 Disaster Recovery Team.................................................................................................................................................... 13

2.4 Emergency Alert, Escalation and DRP Activation...............................................................................................................13

2.4.1 Emergency Alert.............................................................................................................................................................. 14

2.4.2 DR Procedures for Management..................................................................................................................................... 14

2.4.3 Contact with Employees.................................................................................................................................................. 14

2.4.4 Backup Staff..................................................................................................................................................................... 15

2.4.5 Recorded Messages / Updates........................................................................................................................................ 15

2.3.7 Alternate Recovery Facilities / Hot Site............................................................................................................................ 15

2.3.8 Personnel and Family Notification................................................................................................................................... 15

3 Media.......................................................................................................................................................................................... 15

3.1 Media Contact..................................................................................................................................................................... 15

3.2 Media Strategies................................................................................................................................................................. 15

 3.3 Media Team........................................................................................................................................................................ 15

3.4 Rules for Dealing with Media............................................................................................................................................... 16

4 Insurance..................................................................................................................................................................................... 16

5 Financial and Legal Issues......................................................................................................................................................... 16

5.1 Financial Assessment......................................................................................................................................................... 16

5.2 Financial Requirements....................................................................................................................................................... 16

5.3 Legal Actions....................................................................................................................................................................... 17

6 DRP Exercising...................................................................................................................................................................... 17

Appendix A – Technology Disaster Recovery Plan........................................................................................................................18

Templates Disaster Recovery Plan for <System One>..................................................................................................................18

Disaster Recovery Plan for <System Two>.................................................................................................................................... 20

Disaster Recovery Plan for Local Area Network (LAN)..................................................................................................................23

Disaster Recovery Plan for Wide Area Network (WAN)................................................................................................................. 24

Disaster Recovery Plan for Remote Connectivity...........................................................................................................................27

Disaster Recovery Plan for Voice Communications.......................................................................................................................29

Appendix B – Suggested Forms..................................................................................................................................................... 31

Damage Assessment Form............................................................................................................................................................ 31

Management of DR Activities Form................................................................................................................................................ 31

Disaster Recovery Event Recording Form..................................................................................................................................... 32

Disaster Recovery Activity Report Form......................................................................................................................................... 32

Mobilizing the Disaster Recovery Team Form................................................................................................................................ 33

Mobilizing the Business Recovery Team Form.............................................................................................................................. 33

Monitoring Business Recovery Task Progress Form......................................................................................................................34

Preparing the Business Recovery Report Form.............................................................................................................................35

Communications Form.................................................................................................................................................................... 35

Returning Recovered Business Operations to Business Unit Leadership......................................................................................36

Business Process/Function Recovery Completion Form................................................................................................................36

Information Technology Statement of Intent

This document delineates our policies and procedures for technology disaster recovery,
as well as our process-level plans for recovering critical technology platforms and the
telecommunications infrastructure. This document summarizes our recommended
procedures. In the event of an actual emergency situation, modifications to this
document may be made to ensure physical safety of our people, our systems, and our
data.

Our mission is to ensure information system uptime, data integrity and availability, and
business continuity.

Policy Statement
Corporate management has approved the following policy statement:

• The company shall develop a comprehensive IT disaster recovery plan.

• A formal risk assessment shall be undertaken to determine the requirements for
the disaster recovery plan.
• The disaster recovery plan should cover all essential and critical infrastructure
elements, systems and networks, in accordance with key business activities.
• The disaster recovery plan should be periodically tested in a simulated
environment to ensure that it can be implemented in emergency situations and
that the management and staff understand how it is to be executed.
• All staff must be made aware of the disaster recovery plan and their own
respective roles.
• The disaster recovery plan is to be kept up to date to take into account changing
circumstances.

Objectives
The principal objective of the disaster recovery program is to develop, test and
document a well-structured and easily understood plan which will help the company
recover as quickly and effectively as possible from an unforeseen disaster or
emergency which interrupts information systems and business operations. Additional
objectives include the following:

• The need to ensure that all employees fully understand their duties in
implementing such a plan
• The need to ensure that operational policies are adhered to within all planned
activities
• The need to ensure that proposed contingency arrangements are cost-effective
• The need to consider implications on other company sites
• Disaster recovery capabilities as applicable to key customers, vendors and others
Key Personnel Contact Info

Name, Title Contact Option Contact Number

Franceska Terrible Work CEO, Management Department

Alternate 9756473647

Mobile 9222154715

Home 5 Road 13 San Jose City

Email Address Terrible.franceska@md.com.ph

Alternate Email Franceska0810@gmail.com

Tyla Mae Lopez Work VP, Management Department

Alternate 9993647362

Mobile 9268764738

Home 87 Palayan St, San Jacinto

Email Address Lopez.tylamae@md.com.ph

Alternate Email Tylamae19@gmail.com

Mira Mulato Work VP Operations, Management Department

Alternate 9053637284

Mobile 9268700672

Home Jose Street, Malibay, Pasay City

Email Address Mulato.mira@md.com.ph

Alternate Email Mirasol00@gmail.com

Wilfred Aquino Work VP HR, Management Department

Alternate 9056473524

Mobile 9269681923

Home Brgy Bayanihan, Gapan City

Email Address Aquino.wilfred@md.com.ph

Alternate Email Wilfred@gmail.com

Cristine Joy Kamara Work Executive Secretary, Management

Department
Alternate 916553748

Mobile 9076374625

Home Puelay Caranglaan Dist, Dagupan City

Email Address Kamara.cristinejoy@md.com.ph

Alternate Email CristineJoy@gmail.com

Sophia Lim Work CFO, Finance Department

Alternate 9236462718

Mobile 9430835602

Home #13 Zamora Street, Tacloban City

Email Address Lim.sophia@fd.com.ph

 Alternate Email Sophia@gmail.com

Jethro Jan Jabanes Work SR. Accountant, Finance Department

Alternate 9775647646
Mobile 9222154715
Home # 45 Libretad, Mandaluyong City
Email Address Jabanes.jethrojan@fd.com.ph
Alternate Email Jethrojan88@gmail.com

Railey Genesse Navato Work SR Auditor, Finance Department

Alternate 9453637264
Mobile 9756748758
Home 34-35 Balaban St. Santa Mesa, Manila
Email Address Navato.raileygenesse@fd.com.ph
Alternate Email Raileygenesse10@gmail.com

Athena Marie Navarro Work Accountant, Finance Department

Alternate 9473652736
Mobile 9327139957
Home 1295 Gen Araneta Avenue, Quezon
City
Email Address Athena MarieNavarro@fd.com.ph
Alternate Email Athena Marie@gmail.com

Miley Sajulla Work Auditor, Finance Department

Alternate 97364756353
Mobile 9262545932
Home 8392 Mayapis Street, Makati City
Email Address MileySajulla@fd.com.ph
Alternate Email Miley@gmail.com

Shaun Callanta Work Eng. Manager, Engineering

Department
Alternate 9223546354
Mobile 9269686010
Home #141 Sadeno, Makati City
Email Address ShaunCallanta@ed.com.ph
Alternate Email Shaun@gmail.com

Robertson Raquipiso Work Eng. Supervisor, Engineering

Department
Alternate 9776352637
Mobile 9239267241
Home # 132 11th Street, Caloocan City
Email Address RobertsonRaquipiso@ed.com.ph
 Alternate Email Robertson@gmail.com

Joseph Maristela Work Sr. Eng, Engineering Department

Alternate 9273645373
Mobile 9223456549
Home # 42-A Bonifacio Street, Tuguegarao
City
Email Address JosephMaristela@ed.com.ph
Alternate Email Joseph@gmail.com

Jada Hosea Arenas Work Eng., Engineering Department

Alternate 9657463746
Mobile 9323947186
Home # 345 Puelay Street, Dagupan City
Email Address Jada HoseaArenas@ed.com.ph
Alternate Email Jada Hosea@gmail.com

Lulu Navidad Work Department Sec, Engineering

Department
Alternate 9474657463
Mobile 9975238832
Home Flores Village, Davao del Sur
Email Address LuluNavidad@ed.com.ph
Alternate Email Lulu@gmail.com

Digna Casuga Work Yard Manager, Fabrication

Department
Alternate
Mobile 9751424105
Home 7 Capt. Henry Javier Street, Pasig City
Email Address DignaCasuga@fabd.com.ph
Alternate Email Digna@gmail.com

Kristine Deloa Work Yard Supervisor, Fabrication

Department
Alternate 9756475647
Mobile 9096473627
Home 73 Mayombo District Dagupan City
Email Address KristineDeloa@fabd.com.ph
Alternate Email Kristine@gmail.com

Yammi Lor Work Document Controller Sr., Fabrication

Department
Alternate 9097646353
 Mobile 9504738472
Home 678 Puelay St. San Jacinto
Email Address YammiLor@fabd.com.ph
Alternate Email Yammi@gmail.com

Cael Kyrie Apaga Work Document Controller, Fabrication

Department
Alternate 9236475647
Mobile 9777786199
Home 95 JayLee St. Del Pilar, San Fernando
City
Email Address CaelKyrieApaga@fabd.com.ph
Alternate Email Cael Kyrie@gmail.com

Kristopher Gomez Work Welder, Fabrication Department

Alternate 9776354635
Mobile 9299520097
Home St. John Subdivision, La Union City
Email Address KristopherGomez@fabd.com.ph
Alternate Email Kristopher @gmail.com

Carl Jheyms Urbano Work Draftsmans, Fabrication Department

Alternate 9273645364
Mobile 9432436802
Home 4541 Arzadon Compound, Dagupan
City
Email Address CarlJheymsUrbano@fabd.com.ph
Alternate Email CarlJheyms@gmail.com

Bryan Mislang Work Worker, Fabrication Department

Alternate 9076453627
Mobile 9280552191
Home 1815 Loyola Street, Metro Manila
Email Address BryanMislang@fabd.com.ph
Alternate Email Bryan@gmail.com

Nicole Quinto Work Worker, Fabrication Department

Alternate 9327465738
Mobile 9325555906
Home Barranca Drive, Mandaluyong City
Email Address NicoleQuinto@fabd.com.ph
Alternate Email Nicole@gmail.com

Princess Jhanv Sison Work Worker, Fabrication Department

 Alternate 9276457483
Mobile 9325554595
Home 112 Shaw Boulevard, Pasig City
Email Address PrincessJhanvSison@fabd.com.ph
Alternate Email PrincessJhanv@gmail.com

Heleina Eevi Pascual Work Worker, Fabrication Department

Alternate 9664536475
Mobile 9280553736
Home 46 Santa Rosa St. Quezon City
Email Address HelenaEeviPascual@fabd.com.ph
Alternate Email HelenaEevi@gmail.com

Angelica Grace Padapat Work Worker, Fabrication Department

Alternate 9776352635
Mobile 9195554373
Home 124 McArthur Highway, San Nicolas,
Tarlac City
Email Address AngelicaGracePadapat@fabd.com.ph
Alternate Email AngelicaGrace@gmail.com

Athena Placio Work Worker, Fabrication Department

Alternate 9236485438
Mobile 9295552128
Home 5 1st Street, Mandaluyong City
Email Address AthenaPlacio@fabd.com.ph
Alternate Email Athena@gmail.com

Jheddisa Roaring Work Worker, Fabrication Department

Alternate 9656473623
Mobile 9999666543
Home 13 Bonifacio St., East Canumay City
Email Address JhedissaRoaring@fabd.com.ph
Alternate Email Jhedissa@gmail.com

Yvanne Palomata Work Worker, Fabrication Department

Alternate 9235465746
Mobile 9075557938
Home 93 Timog Avenue, Quezon City
Email Address YvannePalomata@fabd.com.ph
Alternate Email Yvanne@gmail.com

Belle Gaerlan Work Worker, Fabrication Department

Alternate 9076376473
 Mobile 9295552678
Home 392 P. Guevarra St,. Metro Manila
Email Address BelleGaerlan@fabd.com.ph
Alternate Email Belle@gmail.com

Francis Oliver Delosa Work Proc. Manager, Procurement

Department
Alternate 9273645363
Mobile 9452551254
Home 1406 Apacible Street, Paco, Manila
Email Address FrancisOliverDelosa@pd.com.ph
Alternate Email Francis Oliver@gmail.com

Carl Sebastian Villamil Work Proc. Supervisor, Procurement

Department
Alternate 9476473836
Mobile 9502541254
Home 41 Monte De Piadad, Quezon City
Email Address CarlSebastianVillamil@pd.com.ph
Alternate Email CarlSebastian@gmail.com

Gian Cyril Catera Work SR. Proc. Specialist, Procurement

Department
Alternate 9656554627
Mobile 9235465447
Home 243 Entiero St., Brgy Santo Cristo,
Angeles City
Email Address GianCyril Catera@pd.com.ph
Alternate Email Gian Cyril @gmail.com

Beatrice Beguas Work Procurement Spec., Procurement

Department
Alternate 9236474366
Mobile 9225452154
Home Blk. 2, Lot 8, People's Tech Complex,
Carmona
Email Address BeatriceBeguas@pd.com.ph
Alternate Email Beatrice@gmail.com

Lesly Casaclang Work Secretary, Procurement Department

Alternate 9078675647
Mobile 9778695834
Home 6 Sta. Aguenda St. Ibayo, Quezon City
Email Address LeslyCasaclang@pd.com.ph
Alternate Email Lesly@gmail.com
Pia Cerezo Work Executive Sec, Back Office
Department
Alternate 9753635363
Mobile 9456315397
Home 112 7th Avenue, Caloocan City
Email Address PiaCerezo@bod.com.ph
Alternate Email Pia@gmail.com

Justin Dator Work SR. Admin, Back Office Department

Alternate 9653536253
Mobile 9431657979
Home 91-F A. Luna Street, San Juan, Manila
Email Address Justin Dator@bod.com.ph
Alternate Email Justin @gmail.com

Alexis Gabrielle Camagay Work Admin Supervisor, Back Office

Department
Alternate 9756354637
Mobile 9452121485
Home 13 P. Gullas Street, Cebu City
Email Address AlexisGabrielleCamagay@bod.com.ph
Alternate Email Alexis Gabrielle@gmail.com

Tiffany Lim Work Admin 1, Back Office Department

Alternate 9756435235
Mobile 9454823886
Home 1 Hologram St,. LISP Cabuyao,
Laguna
Email Address TiffanyLim@bod.com.ph
Alternate Email tiffany@gmail.com

Jasmine Cruz Work Admin 2, Back Office Department

Alternate 9507463742
Mobile 9456440060
Home 33 Dr. V. Locsin Street, Dumaguete,
Negros Occidental
Email Address JasmineCruz@bod.com.ph
Alternate Email Jasmine@gmail.com

Jerald John Lim Work CIO, IT Department

Alternate 9503638294
Mobile 9456781750
Home 675 Lacson Street, Binmaley
Email Address JeraldJohnLim@itd.com.ph
 Alternate Email JeraldJohn@gmail.com

Alex Fernandez Work CTO, IT Department

Alternate 9776374655
Mobile 9452127277
Home 305 Marcos Highway, Masinag,
Antipolo City
Email Address AlexFernandez@itd.com.ph
Alternate Email Alex@gmail.com

Carmeli Soriano Work COO, IT Department

Alternate 9236485748
Mobile 9453944721
Home 2433 Chico St. Paranaque City
Email Address CarmeliSoriano@itd.com.ph
Alternate Email Carmeli@gmail.com

Franziah Maye Mamaril Work Sr. Security Spec, IT Department

Alternate 9776374637
Mobile 9602454815
Home 163 C. Bangoy Sr. Street, Davao City
Email Address FranziahMayeMamaril@itd.com.ph
Alternate Email Franziah Maye@gmail.com

Sky Chua Work Sr. System Admin, IT Department

Alternate 9174635465
Mobile 9165452254
Home 4228 Tay San, Poblacion, Batangas
Email Address SkyChua@itd.com.ph
Alternate Email Sky@gmail.com

Jean Domantay Work Sr. Network Operations, IT

Department
Alternate 9067463647
Mobile 9175486532
Home 536 Remedios, Metro Manila
Email Address JeanDomantay@itd.com.ph
Alternate Email Jean@gmail.com

Elisha Urbano Work Service Desk Supervisor, IT

Department
Alternate 9475653645
Mobile 9225456784
Home 1109 A Bonifacio Avenue Quezon City
 Email Address ElishaUrbano@itd.com.ph
Alternate Email Elisha@gmail.com

Paulo Miguel Deloso Work Service Desk IT Asset, IT Department

Alternate 9236748574
Mobile 9500021554
Home 88 Gorordo Avenue Cebu City
Email Address Paulo Miguel Deloso@itd.com.ph
Alternate Email Paulo Miguel @gmail.com

Christian Calonge Work IT Tech, IT Department

Alternate 9756473647
Mobile 9452541254
Home 541 Florentina Cayco St. Sampaloc
Email Address ChristianCalonge@itd.com.ph
Alternate Email Christian@gmail.com

Notification Calling Tree

CTO, IT Department

COO, IT
Department

CIO, IT
Department

Sr. Security Spec,

Person IT Department

Identifying
Incident Police Hotline
Office
Fire Department
Office

St. Lukes Memorial Hospital

External Contacts

Name, Title Contact Option Contact Number

Landlord / Property
Manager
Diego Lopez
Account Number None
Work Head Principal, National University
Mobile 975645364
Home 72 Hidalgo Street, Pasig City
Email Address DiegoLopez@gmail.com

Power Company
Randy Ramos
Account Number Work Electrical Supervisor, Meralco
C8736284
Mobile 9234657487
Home # 58 Bonifacio Street, Caloocan
City
Email Address RandyRamos@gmail.com

Telecom Carrier 1
Miguel Ferrer
Account Number Work Admin Supervisor, SMART
C6363726 Telecommunications
Mobile 9478635673
Fax 617-241-6005
Home 13 P. Guadiz Street, Makati City
Email Address MiguelFerrer@gmail.com

Telecom Carrier 2
Taya Calimlim
Account Number Work Admin 1, SMART
C6352415 Telecommunications
Mobile 9667645364
Home 13 Babasit St. Cabuyao, Laguna
Email Address TayaCalimlim@gmail.com

Hardware Supplier 1
Denver De Guzman
Account Number Work Supervisor, Kote Hardware and
C7776251 Agricultural Machineries
Mobile 9778654562
Emergency 97564736477
 Reporting
Email Address DenverDeGuzman@gmail.com

Server Supplier 1
Maneth Gomez
Account Number Work Server Technician, Lenovo
C6353627 Enterprise
Mobile 9122387486
Fax 617-8274-2736
Email Address gomezmaneth@gmail.com

Workstation Supplier 1
Sandro Agustin
Account Number Work Technician, Lenovo Enterprise
C5635266
Mobile 9263456678
Home Brgy Bayanihan, Dagupan City
Email Address Sandroagustinhr@gmail.com

Name, Title Contact Option Contact Number

Office Supplies 1
Charlie Del Prado
Account Number Work Branch Manager, National Book
C3095783 Store
Mobile 9474635465
Home 465 Mamalingling, San Juan, Manila
Email Address Charlie123@gmail.com
Insurance – Sun Life
Jan Joshua Fernandez
Account Number Work Branch Accountant, Sun Life
C9382637 Insurance
Mobile 9222154715
Home # 498 Libretad, Mandaluyong City
Email Address fernandezjoshua@gmail.com

Site Security –
Nicoli Rivera
Account Number Work Senior Security Guard, GPS Security
C6352431 Agency
Mobile 9476475647
Home 12 Sta. Rosa Street, Malate, Manila
Email Address nicolirivera@gmail.com
 Off-Site Storage 1
James Ivan Mingarine
Account Number Work System Admin, Sitel Philippines
C4536475
Mobile 9280552191
Home 1815 Loyola Street, Metro Manila
Email Address BryanMislang@fd.com.ph

Off-Site Storage 2 Head System Server, Sitel

Yvanne Palomata Philippines
Account Number User ID Palomatayvanne00
C2234235
Password @fdeptyvanne00
Home 93 Timog Avenue, Quezon City
Email Address YvannePalomata@fd.com.ph

HVAC –
Gary Gonzalez
Account Number Work Technician, JT Max Power
C32213457 Equipment Corp.
Mobile 9299520097
Home St. John Subdivision, La Union City
Email Address KristopherGomez@fd.com.ph

Power Generator –
Rudolfo Bernabe
Account Number Work Head Technician, JT Max Power
C6543213 Equipment Corp.
Mobile 9225452154
Home Blk. 2, Lot 8, People's Tech
Complex, Carmona
Email Address BeatriceBeguas@pd.com.ph

Other –
Joe Mark Del Prado
Account Number Work Maintenance, CMDI Maintenance
C0937463 Company
Mobile 9999666543
Home 13 Bonifacio St., East Canumay City
Email Address JheddisaRoaring@fd.com.ph

External Contacts Calling Tree

 Sr. System
Admin

CTO Service Desk

Supervisor

Sr. Security
IT COO Spec.
Department

IT
Technician
Property
Manager
St. Lukes
Memorials
Hospital

Police Hotline
Human Office
Maintenance
Resources Agency

BFP Power
Generator

GPS Security
Agency

1 Plan Overview

1.1 Plan Updating

It is necessary for the DRP updating process to be properly structured and controlled.
Whenever changes are made to the plan they are to be fully tested and appropriate
amendments should be made to the training materials. This will involve the use of
formalized change control procedures under the control of the IT Director.

1.2 Plan Documentation Storage

Copies of this Plan, CD, and hard copies will be stored in secure locations to be defined
by the company. Each member of senior management will be issued a CD and hard
copy of this plan to be filed at home. Each member of the Disaster Recovery Team and
the Business Recovery Team will be issued a CD and hard copy of this plan. A
master protected copy will be stored on specific resources established for this purpose.

1.3 Backup Strategy

Key business processes and the agreed backup strategy for each are listed below.
The strategy chosen is for a fully mirrored recovery site at the company’s offices in
.
 This strategy entails the maintenance of a fully mirrored duplicate site which will
enable instantaneous switching between the live site (headquarters) and the backup
site.

KEY BUSINESS PROCESS BACKUP STRATEGY

IT Operations Fully mirrored recovery site
Tech Support - Hardware Fully mirrored recovery site
Tech Support - Software Fully mirrored recovery site
Facilities Management Fully mirrored recovery site
Email Fully mirrored recovery site
Purchasing Fully mirrored recovery site
Disaster Recovery Fully mirrored recovery site
Finance Fully mirrored recovery site
Contracts Admin Fully mirrored recovery site
Maintenance Sales Fully mirrored recovery site
Human Resources Off-site data storage facility
Testing Fully Mirrored Recovery site - Fully mirrored recovery site
Workshop Fully Mirrored Recovery site - Fully mirrored recovery site
Web Site Fully mirrored recovery site
1.4 Risk Management

There are many potential disruptive threats which can occur at any time and affect the
normal business process. We have considered a wide range of potential threats and the
results of our deliberations are included in this section. Each potential environmental
disaster or emergency situation has been examined. The focus here is on the level of
business disruption which could arise from each type of disaster.

Potential disasters have been assessed as follows:

Probability Brief Description Of
Potential Disaster Rating Impact Potential
Rating Consequences
& Remedial
Actions
Flood 3 4 All critical equipment is
located on 1st Floor
Fire 3 4 FM200 suppression system
installed in main computer
centers. Fire and smoke
detectors on all floors.

Tornado 5
Electrical storms 5
Act of terrorism 5
Act of sabotage 5
Electrical 3 4 Redundant UPS array
power together with auto standby
Failure generator that is tested
weekly & remotely monitored
24/7. UPSs also remotely
monitored.
Loss of 4 4 Two diversely routed T1
communications trunks into building. WAN
network services redundancy, voice network
resilience

Probability: 1=Very High, 5=Very Low Impact: 1=Total destruction, 5=Minor annoyance

2 Emergency

2.1.1 Alert, escalation and plan invocation

2.1.2 Plan Triggering Events
2.2 Key trigger issues at headquarters that would lead to activation of the DRP are:
• Total loss of all communications
• Total loss of power
• Flooding of the premises
• Loss of the building
2.2.2 Assembly Points
Where the premises need to be evacuated, the DRP invocation plan identifies two
evacuation assembly points:
• Primary – Far end of main parking lot;
• Alternate – Parking lot of company across the street

2.2.3 Activation of Emergency Response Team

When an incident occurs the Emergency Response Team (ERT) must be activated.
The ERT will then decide the extent to which the DRP must be invoked. All
employees must be issued a Quick Reference card containing ERT contact details
to be used in the event of a disaster. Responsibilities of the ERT are to:

• Respond immediately to a potential disaster and call emergency services;

• Assess the extent of the disaster and its impact on the business, data center,
etc.;
• Decide which elements of the DR Plan should be activated;
• Establish and manage disaster recovery team to maintain vital services and
return to normal operation;
• Ensure employees are notified and allocate responsibilities and activities as
required

2.3 Disaster Recovery Team

The team will be contacted and assembled by the ERT. The team's responsibilities
include:
• Establish facilities for an emergency level of service within 2.0 business hours;
• Restore key services within 4.0 business hours of the incident;
• Recover to business as usual within 8.0 to 24.0 hours after the incident;
• Coordinate activities with disaster recovery team, first responders, etc.
• Report to the emergency response team

2.4 Emergency Alert, Escalation and DRP Activation

This policy and procedure has been established to ensure that in the event of a disaster
or crisis, personnel will have a clear understanding of who should be contacted.
Procedures have been addressed to ensure that communications can be quickly
established while activating disaster recovery.

The DR plan will rely principally on key members of management and staff who will
provide the technical and management skills necessary to achieve a smooth
technology and business recovery. Suppliers of critical goods and services will
continue to support recovery of business operations as the company returns to normal
operating mode.

2.4.1 Emergency Alert

The person discovering the incident calls a member of the Emergency Response Team
in the order listed:

Emergency Response Team

• Lulu Navidad - Department Secretary, Engineering Department
• Elisha Urbano - Service Desk Supervisor, IT Department
If not available try:
• Cristine Joy Kamara - Executive Secretary, Management Department
• Lesly Casaclang - Secretary, Procurement Department

The Emergency Response Team (ERT) is responsible for activating the DRP for
disasters identified in this plan, as well as in the event of any other occurrence
that affects the company’s capability to perform normally.

One of the tasks during the early stages of the emergency is to notify the Disaster
Recovery Team (DRT) that an emergency has occurred. The notification will request
DRT members to assemble at the site of the problem and will involve sufficient
information to have this request effectively communicated. The Business Recovery
Team (BRT) will consist of senior representatives from the main business departments.
The BRT Leader will be a senior member of the company's management team, and will
be responsible for taking overall charge of the process and ensuring that the company
returns to normal working operations as early as possible.

2.4.2 DR Procedures for Management

Members of the management team will keep a hard copy of the names and contact
numbers of each employee in their departments. In addition, management team
members will have a hard copy of the company’s disaster recovery and business
continuity plans on file in their homes in the event that the headquarters building is
inaccessible, unusable, or destroyed.

2.4.3 Contact with Employees

Managers will serve as the focal points for their departments, while designated
employees will call other employees to discuss the crisis/disaster and the company’s
immediate plans. Employees who cannot reach staff on their call list are advised to call
the staff member’s emergency contact to relay information on the disaster.
 2.4.4 Backup Staff
If a manager or staff member designated to contact other staff members is unavailable
or incapacitated, the designated backup staff member will perform notification duties.

2.4.5 Recorded Messages / Updates

For the latest information on the disaster and the organization’s response, staff
members can call a toll-free hotline listed in the DRP wallet card. Included in messages
will be data on the nature of the disaster, assembly sites, and updates on work
resumption.

2.3.7 Alternate Recovery Facilities / Hot Site

If necessary, the hot site at SunGard will be activated and notification will be given via
recorded messages or through communications with managers. Hot site staffing will
consist of members of the disaster recovery team only for the first 24 hours, with other
staff members joining at the hot site as necessary.

2.3.8 Personnel and Family Notification

If the incident has resulted in a situation which would cause concern to an employee’s
immediate family such as hospitalization of injured persons, it will be necessary to
notify their immediate family members quickly.

3 Media

3.1 Media Contact

Assigned staff will coordinate with the media, working according to guidelines that have
been previously approved and issued for dealing with post-disaster communications.

3.2 Media Strategies

1. Avoiding adverse publicity
2. Take advantage of opportunities for useful publicity
3. Have answers to the following basic questions:
• What happened?
• How did it happen?
• What are you going to do about it?

3.3 Media Team

• Carmeli Soriano – COO, IT Department
• Mira Mulato – VP Operations, Management Department
 3.4 Rules for Dealing with Media
Only the media team is permitted direct contact with the media; anyone else
contacted should refer callers or in-person media representatives to the media
team.

4 Insurance

As part of the company’s disaster recovery and business continuity strategies a number
of insurance policies have been put in place. These include errors and omissions,
directors & officers liability, general liability, and business interruption insurance.

If insurance-related assistance is required following an emergency out of normal

business hours, please contact:

Person
Next
Policy Name Coverage Coverage Amount Of Responsible
Renewal
Type Period Coverage For
Date
Coverage
Accident Insurance Life 2 years P30,000 – Teachers, August 2028
Insurance P80,000 Workers
Death Insurance Life 2 years P80,000- Teachers, June 2028
Insurance P100,000 Workers,
Maintenance
People with Life 1 year P30,000- Teacher, January 2028
Disability Insurance P50,000 Students
Equipment Auto 2 years P45,000 – Workers and November 2028
Necessity Insurance P60,000 Maintenance

5 Financial and Legal Issues

5.1 Financial Assessment

The emergency response team shall prepare an initial assessment of the impact
of the incident on the financial affairs of the company. The assessment should
include:
• Loss of financial documents
• Loss of revenue
• Theft of check books, credit cards, etc.
• Loss of cash

5.2 Financial Requirements

The immediate financial needs of the company must be addressed. These can include:
• Cash flow position
 • Temporary borrowing capability
• Upcoming payments for taxes, payroll taxes, Social Security, etc.
• Availability of company credit cards to pay for supplies and services required
post- disaster

5.3 Legal Actions

The company legal department and ERT will jointly review the aftermath of the incident
and decide whether there may be legal actions resulting from the event; in particular,
the possibility of claims by or against the company for regulatory violations, etc.
6 DRP Exercising

Disaster recovery plan exercises are an essential part of the plan development process.
In a DRP exercise no one passes or fails; everyone who participates learns from
exercises – what needs to be improved, and how the improvements can be
implemented. Plan exercising ensures that emergency teams are familiar with their
assignments and, more importantly, are confident in their capabilities.

Successful DR plans launch into action smoothly and effectively when they are needed.
This will only happen if everyone with a role to play in the plan has rehearsed the role
one or more times. The plan should also be validated by simulating the circumstances
within which it has to work and seeing what happens
Appendix A – Technology Disaster Recovery Plan

Templates Disaster Recovery Plan for <System One>

SYSTEM

OVERVIEW
PRODUCTION SERVER Location: Head Office
Server Model: Client-Server
Operating System: Windows 2019
CPUs: 2
Memory: SDD
Total Disk: 5 disk
System Handle: Senior IT Specialist
System Serial #: F364736GU6
DNS Entry: 74.354.546.224
IP Address: 192.168.1.1
Other:
HOT SITE SERVER The Villager Server Inc.
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS Disks, Flashdrive, and Cloud storage.

KEY CONTACTS
Hardware Vendor Lenovo
System Owners Senior System Admin, Ms. Sky Chua
Database Owner Senior Network Operations, Mrs. Jean Domantay
Application Owners IT Technician, Mr. Christian C. Calonge
Software Vendors Microsoft Office, Visual Studio, and Google
Offsite Storage Teknomobel, Pasig City

BACKUP STRATEGY
FOR SYSTEM ONE
Daily 6 hours
Monthly Twice a month
Quarterly 2 months every quarterly
SYSTEM ONE
DISASTER
RECOVERY
PROCEDURE
Scenario 1 - Teacher’s data in the personal computers.
- Portal log ins (for students and employees)
 - Notify IT department and management department to
Total Loss of Data undergo a testing on how much they can retrieve.
Scenario 2 - 12 monitors, 12 System Units and 12 Keyboards
- Need to notify asap the IT department and
procurement department if there are pc’s that can be
Total Loss of HW used.
(hardware)
ADDENDUM

File Systems
CONTACTS

File System as of File system Kbytes Used Avail %used

Mounted on
Minimal file
systems to Modules, Portal
be created System , Grades,
and restored Schedules and
from backup: Log-ins for
students and
teachers
Other critical files Application
to modify forms, Enrollment
Forms
Necessary
directories
to create

Critical files to Portal Log-ins

restore (students and
teachers)
Secondary files to Schedules,
restore modules and list
of the students
Other files to Personal files of
restore the students

Disaster Recovery Plan for <System Two>

SYSTEM

OVERVIEW
PRODUCTION SERVER Location: Teacher’s Main Office
Server Model: Client-Server
Operating System: Windows 2016
 CPUs: 6
Memory: HDD
Total Disk: 5 disks
System Handle: IT Technician
System Serial #: RT76473YT3
DNS Entry: 74.334.213.000
IP Address: 192.168.1.3
Other:
HOT SITE SERVER The Villager Server Inc.
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS

KEY CONTACTS
Hardware Vendor Lenovo
System Owners Senior System Admin, Ms. Sky Chua
Database Owner Senior Network Operations, Mrs. Jean Domantay
Application Owners
Software Vendors Microsoft Office, Visual Studio, and Google
Offsite Storage Teknomobel, Pasig City

BACKUP STRATEGY for

SYSTEM TWO
Daily 4 hours
Monthly Thrice a month
Quarterly 3 months every quarterly

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
- Need to notify the head office to check if they
Scenario 1 have some back ups if not, coordinate to the
IT department to check and run the storages
Total Loss of Data to try backing up the needed files.
- Notify the management department to the
Scenario 2 amount and percentage of damage in the
hardware and coordination to the IT
Total Loss of HW technician and head office.

File Systems
ADDENDUM

CONTACTS

File System as of File system Kbytes Used Avail 60%used

Mounted on
Minimal file
systems to List of students
be created and teachers.
and restored
from backup:

Other critical files Grades,

to modify attendances,
schedules and
profile log ins per
department
Necessary
directories
to create

Critical files to Personal records

restore of students
Secondary files to None
restore
Other files to None
restore
Disaster Recovery Plan for Local Area Network (LAN)

SYSTEM

OVERVIEW
SERVER Location: IT Department Office
Server Model: Client-Server
Operating System: Windows 2019
CPUs: 5
Memory: SDD
Total Disk: 4 disks
System Handle: Service Desk IT Asset
System Serial #: R53625R635
DNS Entry: 74.334.213.000
IP Address: 192.168.1.0
Other:
HOT SITE SERVER The Villager Server Inc.
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS Google Drive

KEY CONTACTS
Hardware Vendor Lenovo
System Owners Senior System Admin, Ms. Sky Chua
Database Owner Senior Network Operations, Mrs. Jean Domantay
Application Owners Lenovo
Software Vendors Microsoft Office, Visual Studio, and Google
Offsite Storage Teknomobel, Pasig City

BACKUP STRATEGY for

SYSTEM TWO
Daily 3 hours
Monthly 2 times a month
Quarterly 4 times quarterly

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
ADDENDUM

CONTACTS

- Need to check the total loss of data to LAN

Scenario 1 network and immediately report to the IT
Department and need to notify also the head
Total Loss of Data office.
- Must check properly on what hardware is
Scenario 2 missing or damage and notify asap the IT
Technician and coordinate with the head to
Total Loss of HW see how much they need to repair.

File Systems

File System as of File system Kbytes Used Avail %used

Mounted on
Minimal file
systems to - Records
be created from the
and restored personal
from backup: computers
of students
and
teachers.
Other critical files Online
to modify worksheets,
modules, and
application forms
Necessary
directories to
create
Critical files to Logins per
restore departments and
list of students in
the network
Secondary files to None
restore
 Other files to Search histories
restore on
the
computers and
browsers.

Disaster Recovery Plan for Wide Area Network

(WAN)

SYSTEM

OVERVIEW
EQUIPMENT Location: Main Ground Office
Device Type: Wireless-G Broadband Router
Model No.: WRT54GX4
Technical Specifications: A Standard 802.11 b/g wireless
connection , 54 mbps via standard 802.11
Network Interfaces: TCP/
IP
Power Requirements; 12 V
Dc Device - Input Current:
1.0 
System Serial #:
P6453T53E3
DNS Entry: 735.635.264.00
IP Address: 192.168.1.2
Other:
HOT SITE EQUIPMENT Router-Switch Hot Site Inc.
SPECIAL
APPLICATIONS
ASSOCIATED DEVICES Telephone, LAN routers, Ethernet Cables (CAT-6)

KEY CONTACTS
Hardware Vendor PLDT Telecom
System Owners Head System Admin, PLDT
Database Owner Senior Network Operations, PLDT
Application Owners PLDT Telecom
Software Vendors Google, Portal Sites
Offsite Storage Teknomobel, Pasig City
Network Services PLDT Telecom, Smart Telecom
ADDENDUM

CONTACTS

BACKUP STRATEGY for

SYSTEM TWO
Daily 8 hours
Monthly 4 times a month
Quarterly 6 times per quarterly

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
- Will notify the PLDT Telecom to test and
Scenario 1 check the network and coordinate it to the IT
department to come up some back up plan.
Total Loss of Network And notify the head office also.
- Need to notify the network service provider to
Scenario 2 fix and repair the hardware and ask for back
up in the IT technician and coordinate to the
Total Loss of HW head office also.

Support Systems

Support system

Critical network Routers, wires and fuses.

assets
Critical interfaces Internet connection per department and offices
Critical files to Log ins, email and passwords of the students and teachers
restore
Critical network History of every browser per computer that the students and
services to restore teachers might need it.
Other services
Disaster Recovery Plan for Remote Connectivity (NO
NEED TO DO)

SYSTEM

OVERVIEW
EQUIPMENT Location:
Device Type:
Model No.:
Technical Specifications:
Network Interfaces:
Power Requirements;
System Serial #:
DNS Entry:
IP Address:
Other:
HOT SITE EQUIPMENT
SPECIAL
APPLICATIONS
ASSOCIATED DEVICES

KEY CONTACTS
Hardware Vendor
System Owners
Database Owner
Application Owners
Software Vendors
Offsite Storage
Network Services

BACKUP STRATEGY for

SYSTEM TWO
Daily
Monthly
Quarterly

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
ADDENDUM

CONTACTS

Scenario 1

Total Loss of Network

Scenario 2

Total Loss of HW

Support Systems

Support system

Critical network
assets
Critical interfaces
Critical files to
restore
Critical network
services to restore
Other services
Disaster Recovery Plan for Voice Communications

SYSTEM

OVERVIEW
EQUIPMENT Location: Mass Communication General Office / IT
Department
Device Type: A4Tech Microphones, Dialers
Model No.: PK-925H
Technical Specifications: High-fidelity microphone: For
more natural, detailed audio. Sensitivity: -44 dB
Network Interfaces:
Power Requirements;6
watts
System Serial #:
T637263AQ
DNS Entry: 724.635.365.00
IP Address: 198.162.1.2
Other:
HOT SITE EQUIPMENT
SPECIAL Built-in application for Microphone
APPLICATIONS
ASSOCIATED DEVICES Web-Cam supported of Digital HD Omni-Directional
Mic

KEY CONTACTS
Hardware Vendor A4tech
System Owners System Admin, A4tech
Database Owner Network Operations , A4tech
Application Owners A4tech Corp.
Software Vendors Microsoft Office, Visual Studio, and Google
Offsite Storage Lenotech Corp.
Network Services

BACKUP STRATEGY for

SYSTEM TWO
Daily 5 hours
Monthly 3 times a month
Quarterly 4 months per quarterly

SYSTEM TWO
DISASTER
ADDENDUM

CONTACTS

RECOVERY
PROCEDURE
- Will notify asap the maintenance team and IT
Scenario 1 department to check the cause of the problem
and will coordinate it with the head office.
Total Loss of Switch
- Will notify asap the IT department most
Scenario 2 especially the Senior Network Operations to
test and run the network If it is totally loss and
Total Loss of Network coordinate it to the head office to notify
professors with the problem.

Support Systems

Support system

Critical network Equipment like the microphones, dialers and the call logs.
assets
Critical interfaces Electricity and Cables for the dialers and computers
Critical files to Records of calls outside of the vicinity of the school,
restore Contacts for the maintenances and sources outside
Critical network Internet Connection to the IT department, teacher’s office
services to restore and to the head office.
Other services
Appendix B – Suggested Forms

Damage Assessment Form

Key Business Description Of
Process Problem
Affected
IT Operations System, files and directories
corruption.
Facilities Management Damages in the buildings,
minimal damage for the internal
equipment’s.
Tech Support - Hardware Damages of some hardware like
System Units, computers and
disks.
Tech Support - Software Deleted and corrupted important
files to all pc’s.
Disaster Recovery Lack of materials due to the
financial status.
Human Resources Need more additional manpower
Extent Of Damage
Minimal numbers of Servers,
computers and facility
Damage Chairs, Tables, White
Boards, some glass windows, and
the facility materials itself
Partially damages to all
computers, missing parts and tools
for the system units.
Partially loss of critical files for the
students and teachers.
Unable to proceed on the disaster
recovery plans.

Management of DR Activities Form

• During the disaster recovery process all activities will be determined using a
standard structure;
• Where practical, this plan will need to be updated on a regular basis throughout
the disaster recovery period;
• All actions that occur during this phase will need to be recorded

Activity Name: System and Server Recovery

Reference Number: R7263TRYJ7364
Brief Description: To know the process on how to recover and backup
personal files, software, applications and some critical files in your server.

Commencement Completion Resources In Charge

Date/Time Date/Time Involved
April 25 / 9 am April 27 / 5pm PC’s, flashdrives, Hard IT department, and the
disks, venue, materials teachers and students.
on the venue and foods
Activity Name: Management and Human Resources Seminar
Reference Number: Y536253TF63
Brief Description: To create a good team, learn the safety measure and
have very good result and recovery when the disaster comes in.

Commencement Completion Resources In Charge

Date/Time Date/Time Involved
August 10 / 10am August 13 / 6pm Office Materials, venue, Management
materials in the venue Department and HR.
(chairs, tables etc),
Projectors and laptop
and foods.

Activity Name: Fire and Earthquake Drills

Reference Number: J635726RT6453
Brief Description: To have ideas and to add some skills when it comes to
these disaster and to learn the correct procedures.

Commencement Completion Resources In Charge

Date/Time Date/Time Involved
May 5 / 8 am May 6 / 4pm Fire resources and BFP, Nurse, PNP , and
materials, first aid kits, on the activity proper all
protective helmets, the teachers and
venue, foods and chairs students.
and another medical
equipment needed.
 Activity Name: Evacuation Trainings and Seminars
Reference Number: T7364RP7364Z3
Brief Description: To ensure the safety and to be ready when the disaster is
on the spot.

Commencement Completion Resources In Charge

Date/Time Date/Time Involved
March 13 / 8 am March 15 / 4pm Supplies, Venue, Foods, BFP, Nurse, PNP , and
Materials needed in the on the activity proper all
venue, Chairs, tables the teachers and
and Evacuation students.
Materials, like tents, first
aid kits etc,

Disaster Recovery Event Recording Form

• All key events that occur during the disaster recovery phase must be recorded.
• An event log shall be maintained by the disaster recovery team leader.
• This event log should be started at the commencement of the emergency and a
copy of the log passed on to the business recovery team once the initial
dangers have been controlled.
• The following event log should be completed by the disaster recovery team
leader to record all key events during disaster recovery, until such time as
responsibility is handed over to the business recovery team.

Description of Disaster: Accidentally Deletion of Files, Damages of

Facilities and Materials (Due to natural disaster)
Commencement Date: July 19, 2023
Date/Time DR Team Mobilized: July 20, 2023 / 7:30 am
 Activities Undertaken Date and Outcome Follow-On
by Time Action
DR Team Required
Restoration of Facility and Manage July 21 / 8am Some facilities is being Finance and other
the damage parts and materials of repaired and replaced materials needed
all facilities some parts.
Checking of all buildings (if July 24 / 10am There are some Need to fix asap to
damage) buildings that has a prevent more damages
minimal damage.
Fire Prevention July 20 / 7am Some electrical wires Need extra wires and
are already fix and safe extra electrical materials
to use. for maintenance
Checking and restoring of some July 23 / 12nn Some personal Finance, other computer
Personal Computers of Teachers computers have some materials and additional
and head minimal damages and storages
some are not working
anymore.
Backing up and restoration of July 22 / 9am Personal papers files Cloud storages for hard
Paper files in all Offices and modules of the copy files and additional
students are not subject office supplies
for restoration.

Disaster Recovery Team's Work Completed: Sept 29, 2023

Event Log Passed to Business Recovery Team: October 2, 2023

Disaster Recovery Activity Report Form

• On completion of the initial disaster recovery response the DRT leader should
prepare a report on the activities undertaken.
• The report should contain information on the emergency, who was notified and
when, action taken by members of the DRT together with outcomes arising from
those actions.
• The report will also contain an assessment of the impact to normal business
operations.
• The report should be given to business recovery team leader, with a copy to
senior management, as appropriate.
• A disaster recovery report will be prepared by the DRT leader on completion of
the initial disaster recovery response.
• In addition to the business recovery team leader, the report will be distributed to
senior management

The report will include:

• A description of the emergency or incident
• Those people notified of the emergency (including dates)
• Action taken by members of the DRT
• Outcomes arising from actions taken
• An assessment of the impact to normal business operations
 • Assessment of the effectiveness of the BCP and lessons learned
• Lessons learned

Mobilizing the Disaster Recovery Team Form

• Following an emergency requiring recovery of technology infrastructure assets,
the disaster recovery team should be notified of the situation and placed on
standby.
• The format shown below can be used for recording the activation of the DR
team once the work of the damage assessment and emergency response
teams has been completed

Description of Emergency: Repairing and Maintaining Facilities in School

Grounds
Date Occurred: July 15
Date Work of Disaster Recovery Team Completed: Sept 25

Name of Contact Contacted Start Date

Team Details On (Time / By Response Required
Member Date) Whom
Kim Rancudo 9665364564 Around 7am / Secretary All July 17
July 16 Facilities
Jasmine Lopez 9223647122 Around 10am/ Dept. July 20
July 19 Secretary Teacher
s Office
Alexander 9090924352 Around 1pm/ July Worker 1 / 2 Main July 26
Tolentino 25 Office
Chris Ramos 9503349000 Around 4pm/ Admin 2 IT Server Sept 3
Sept 1 and
Office
Relevant Comments (e.g., Specific Instructions Issued) - must notify each
team member
ahead of the time
and date that is
given make sure
to give accurate
information.

Mobilizing the Business Recovery Team Form

• Following an emergency requiring activation of the disaster recovery
team, the business recovery team should be notified of the situation and
placed on standby.
 • The format shown below will be used for recording the activation of the
business recovery team once the work of the disaster recovery team has
been completed.

Description of Emergency: Backing Up Critical Files

Date Occurred: July 19
Date Work of Business Recovery Team Completed: Sept 29

Name Contact Contacted Start Date

of Details On (Time / By Respons Required
Team Date) Whom e
Member
Ricardo 9756473263 Around 12nn / Executive All July 20
Martinez July 19 Secretary Facilities
Maricar Lopez 9234645366 Around 8 am / Admin 1 July 23
July 23 Teacher
s Office
Sandara Dela 9996352635 Around 10am / Admin 2 Main July 29
Cruz July 27 Office
Danny Cruz 9099253645 Around 3 pm / Service Desk IT Server Sept 6
Sept 5 Supervisor and
Office
Relevant Comments (e.g., Specific Instructions
Issued) – must notify each team member ahead of the
time and date that is given make sure to give accurate
information.

Monitoring Business Recovery Task Progress Form

• The progress of technology and business recovery tasks must be closely
monitored during this period of time
• Since difficulties experienced by one group could significantly affect other
dependent tasks it is important to ensure that each task is adequately resourced
and that the efforts required to restore normal business operations have not
been underestimated

Note: A priority sequence must be identified although, where possible, activities will
be carried out simultaneously.

Recovery Tasks Person(s) Completion Date Milestones Other

(Order of Responsible Estimated Actual Identified Relevant
Priority) Information
1. Tech Support - IT Technicians June 1- Sept Sept 1 Sept 5
1
Software
2. Facility Engineer Supervisor August 8 – Sept 31 Oct 2
Sept 31
Materials
 3. Tech Support - Service Desk IT Asset June 5 – Sept Sept 5 Sept 7
5
Hardware
4. Electrical Yard Manager August 10 – Sept 28 Oct 1
Sept 28
Supplies
5. Office Supplies Admin 1 & 2 August 12 – Sept 7 Sept 9
Sept 5
6. Maintenance Procurement Manager June 1 – until Present Until the end
the repair is of contract
done

Preparing the Business Recovery Report Form

• On completion of business recovery activities the BRT leader should prepare a

report on the activities undertaken and completed
• The report should contain information on the disruptive event, who was notified
and when, action taken by members of the BRT together with outcomes arising
from those actions
• The report will also contain an assessment of the impact to normal business
operations
• The report should be distributed to senior management, as appropriate

The contents of the report shall include:

• A description of the incident
• People notified of the emergency (including dates)
• Action taken by the business recovery team
• Outcomes arising from actions taken
• An assessment of the impact to normal business operations
• Problems identified
• Suggestions for enhancing the disaster recovery and/or business continuity plan
• Lessons learned

Communications Form
• It is very important during the disaster recovery and business recovery activities
that all affected persons and organizations are kept properly informed
• The information given to all parties must be accurate and timely
• In particular, any estimate of the timing to return to normal working operations
should be announced with care
• It is also very important that only authorized personnel deal with media queries

Groups of Persons Selected To Coordinate

Persons or Communications
Organizations to Affected Persons / Organizations
 Affected by Name Position Contact Details
Disruption
Customers Tiffany Lim Admin 1, Back Office 9454823886
Department
Management & Cristine Joy Kamara Exec. Secretary, 9076374625
Management
Staff Department
Suppliers Lesly Casaclang Secretary, Procurement 9778695834
Department
Media Alex Fernandez CTO, IT Department 9452127277

Stakeholders Alexis Gabrielle Camagay Admin Supervisor, Back 9452121485

Office Department
Others Shaun Callanta Eng. Manager, 9269686010
Engineering Department

Returning Recovered Business Operations to Business Unit Leadership

• Once normal business operations have been restored it will be necessary to return
the responsibility for specific operations to the appropriate business unit leader
• This process should be formalized in order to ensure that all parties understand
the change in overall responsibility, and the transition to businessas-usual
• It is likely that during the recovery process, overall responsibility may have been
assigned to the business recovery process lead
• It is assumed that business unit management will be fully involved throughout the
recovery, but in order for the recovery process to be fully effective, overall
responsibility during the recovery period should probably be with a business
recovery process team

Business Process/Function Recovery Completion Form

The following transition form should be completed and signed by the business
recovery team leader and the responsible business unit leader, for each process
recovered.

A separate form should be used for each recovered business process.

Name Of Business Process : National University Recovery Process

Completion Date of Work Provided by Business October 5, 2023
Recovery Team
Date of Transition Back to Business Unit October 8, 2023
Management
(If different than completion date)

I confirm that the work of the business recovery team has been completed in
accordance with the disaster recovery plan for the above process, and that
 normal business operations have been effectively restored.

Business Recovery Team Leader Name: Sophia Sta. Maria

Signature:

Date: October 7, 2023

(Any relevant comments by the BRT leader in connection with the return of
this business process should be made here.)

I confirm that above business process is now acceptable for normal working

conditions. Name: Elizabeth Martinez

Title: Head Principal, National University

Signature:

Date: October 7, 2023

This document is intended to be a starting point for a potential disaster recovery plan and is a not, in any way, a complete disaster
recovery plan. Micro Focus does not take responsibility for any disaster recovery plans that are based off of this document, nor any
failure due to implementation or execution of this template.

1. Purpose
 1.1 This IT Disaster Recovery Plan (IT-DRP) has been created to give the key
information, processes and accurate responses to some major incidents and
problems of IT services
1.2 It points to clarify the Recovery Time Objectives (RTO) and Recovery Point
Objectives (RPO) and to provide a clear way both during and after the incident to
guarantee that there is minimal downtime, data loss or impact to National University.
1.3 In order to be helpful. This IT-DRP should:
I. All employees and teachers of National University must understand any role
or the responsibility that they have during a specified incident.
II. Need to review and always update it on a regular basis- it must at least
monthly.
III. Disclose all essential services, infrastructure, organisational devices,
organisational shared data, organisational personal data, emails and
communications inside of the National University.
IV. Acknowledge all third party capabilities and functionality including external DR
policies
V. Need to be supported by a formal risk assessment.
VI. Handle the cost effectively to a defined budgetary control
VII. Need to check and test it periodically to ensure success and fast development
during an on-going incident.
1.4 In inclusion to this document being computerized store and accessible to all
employee and teachers, hard copies must also have in their possession which are
available in strategic locations.

2. Scope

2.1 The IT-DRP provides an IT risk and mitigation reference in addition to technical and
operational information. Any process and actions that can be used will described are
only relevant during a specified major incident which is resolved in conjunction with
National University’s Business Continuity Plan.
2.2 This document is considered as a high-level approach and does not clearly itemised
all of the steps that is required during response or recovery for any individual system.
2.3 This IT-DRP should consider all the technologies used within the National University
including new and developing one.
2.3.1Physical Infrastructure
I. Internet Connectivity
ii. Network – all technologies (LAN, Wi-Fi, RF, Bluetooth, IoT, Proprietary, etc)
iii. Servers and Storage
iv. Client devices and peripherals (Computer, USB devices, etc)
v. Organisational and Support Devices (Dedicated systems, Printing, etc)
vi. Telephony and Communications
vii. Building Management and Digital Signage
viii. Security Systems (Door Access, CCTV, etc)
2.3.2 Software Systems – Cloud provisioning
i. Infrastructure-as-a-Service (IaaS)
 ii. Platform-as-a-Service (PaaS)
iii. Software-as-a-Service (SaaS)
iv. Data Storage
v. Databases
2.3.3 Software Systems – Operational Line-of-Business applications
i. Students Records, Information Systems & Management
ii. Virtual Learning Environment / Learning Management System
iii. Organisational Applications
1. Site Wide Applications
2. CRM
3. Finance
4. HR
2.3.4 Software Systems – Educational Resources & Software
i. Applications utilised during course delivery

3. Definition of Services & Systems

3.1 From an IT point of view, National University aims to operates 100% cloud-based
organisation. This means that (if possible) some applications, data & facilities are
influence wholly through offsite mechanisms.
3.2 This approach enables an extremely light-weight and adaptable infrastructure with
no requirement for on-site servers or data centres, so reducing maintenance and
upgrade requirements in addition to lessen the organizational attack surface and
number of risk area touch points. The implementation and operation of a zero-trust
network further mitigates against certain types of risks.
3.3 Even though, national university currently does not set off servers or a data centre
because there might be a point in the future where this becomes essential and for
this reason risks, mitigations and procedures should be introduced and expanded
upon when its suitable.
3.4 Telecommunications within National University are also offered through cloud
services using the IP connectivity.
3.5 Use of IT within National University is widely applicable to (2) two primary categories
i. Operational Services
ii. Organisational and Administrative functionality delivered by the employees
and teachers of National University.
iii. Educational Services
Learning and participatory working are being received by students, whether
they are enrolled on a fulltime course, degree apprenticeship, CPD or other
National University organizations.
3.6 By operating as a 100% cloud-based organization or university National University
have a strength of being able to continue working and providing these primary IT
services through many physical disaster scenarios including total loss of buildings.
The capability to use the services from any internet connection provide a huge benefit
in terms of both business continuity and educational delivery.
3.7 With this model, the attention for IT-DRP is therefore shifted to the appropriate
protection of cloud services and internet services.
4. Definition of Risks

Infrastructure Description Risk Mitigation Measure

Internet Connectivity Various fibre Service provider Secondary service
connections to neglect provision
buildings Destruction to fibreResilient diverse
cabling connectivity
Secondary service
provision
Local hardware Multiple device
neglect (routers, utilisation
switches etc.) Overcapacity /
Redundancy
Natural Disaster / Alternate
Loss of building location/Inherent
cohesion. ability
Electrical failure Uninterruptable
Over/under voltage Power Supply
and surges Emergency
Environmental Generator
changes
Malicious attack Intrusion detection
(Denial of Service, Conditional Access
Hacking etc Appropriate
permissions
Vandalism / Physical protective
Sabotage / measures
Terrorism Door Access
Security
Data Centre & Virtual Machine Service provider Backup &
Servers Estate PaaS failure VM failure Replication
provision or corruption Secondary service
provision
High availability
Wi-Fi & LAN Estate IaaS provision Hardware failure Multiple device
Interference utilisation
Overloading Overcapacity /
Electrical failure Redundancy
Secondary service
provision
Resilient diverse
connectivity
Email & Various SaaS Service provider Backup &
communication providers failure Replication
Primary Data Communication Litigation Hold
Storage Operational failure Corruption Policy Retention
Applications of data Loss of Policy
Faculty Applications data Secondary service
Data Exposure / provision
Compromise Conditional Access
Commercial API integration
exploitation
Sabotage / Internal
attack Erroneous
or neglectful
activity
Inability to
operate /
application failure
Organisational Laptops Tablets Hardware failure Overcapacity /
Devices Desktops Phones Data exposure / Redundancy
Personal Devices Wearable Password Local drive
technology BYOD compromise encryption
Home PC Loss / Theft Conditional Access
Inability to operate Password policy
External devices Remote Wipe
(USB stick) Virus / capability
Malware / Attack Device restriction
policy
Advanced threat
protection
Active monitoring
Appropriate use
policy
Support Devices MultiFunction Hardware failure Overcapacity /
Printers Scanners Redundancy
Desktop Printers
Building BMS, HVAC Hardware failure Manual operation /
Management Environmental Communications override
Digital Signage monitoring failure Resilient diverse
connectivity
Faculty Devices 3D Printing Hardware failure Resilient diverse
CNC Vandalism / connectivity
Dedicated sabotage Multiple device
resources utilisation
IOT Physical protective
measures
Security Door Access Hardware failure Manual operation /
CCTV Vandalism / override
sabotage Physical protective
measures