Disaster Control

Planning

Natural

Human-made 

System Failure
 Disaster Recovery Plan

- a comprehensive statement of all actions to be taken
before, during, and after any type of disaster
Steps in Disaster Recovery Plan

1. Identify Critical Applications
2. Creating a Disaster Recovery Team
3. Providing Second-Site Back up
- Empty Shell
- Recovery Operations Center
- Internally Provided Backup

Steps in Disaster Recovery Plan

1. Identify Critical Applications
2. Creating a Disaster Recovery Team
3. Providing Second-Site Back up
- Empty Shell
- Recovery Operations Center
- Internally Provided Backup
Backup and Off-site Storage Procedures


1. Operating System Backup
2. Application Backup
3. Backup Data Files
4. Backup Documentation
5. Backup Supplies and Source Docs
 
Outsourcing the IT Function
Key drivers to outsource

 Cost Reduction
 Access to skills that are unavailable locally
 Better us of internal resources
 Accelerated business processes
Core Competency Theory

- an organization should focus exclusively on its core
business competencies, while allowing outsourcing
vendors to efficiently manage the non-core areas such
as IT functions.
 IT Assets

Commodity IT Assets

Special IT Assets
 SAS 70

- A definite standard by which client organization’s
auditors can gain knowledge that controls at the third-
party vendor are adequate to prevent or detect material
errors that could impact the client’s financial
statements.