|
SearchSMB.com has
this to say about Disaster Recovery Planning.
Link to SearchSMB.com
Disaster
recovery is a very misleading name for one of the most important
issues in an IT operation. It's not about recovering from a
disaster. In fact, it's just the opposite. Your company must
continually plan and manage the disaster recovery process. This
involves up-to-date technology and well-informed IT staff members
(in-house or outsourced) to implement several phases of your
disaster recovery plan. Your business must be up and running at all
times. In the small and medium-sized arena, this is even more
crucial, as resources and budgets are usually more scarce, and a
disaster - whether a human error or a technological one - could
easily damage your credibility.
The Rapport I.T. Solutions' - How, What and Why of I.T. Business Continuity Planning
&
Disaster Recovery Planning.
(A plain English guide about being prepared for the events you
hope won’t occur)
Businesses are
increasingly dependent on computers, networks, internet access,
email and other I.T. technology. If these resources fail or are
removed (even for a short time), major impacts may be felt. These
impacts may include:
 |
An inability to carry on operations.
|
|
Data loss.
|
|
Loss of critical controls.
|
|
Damage to credibility.
|
|
Breach of regulatory provisions and of course
|
|
Financial loss. |
Business
Continuity Planning
and Disaster Recovery Planning
consists of much
more than having a data backup procedure.
Business
Continuity Planning
–
we define BCP as
the process of identifying risk scenarios and implementing actions
to proactively reduce the likelihood of the occurrence of the risk
scenario.
Disaster
Recovery Planning
– we define DRP as
the process of planning for the recovery from the removal or failure
of I.T. resources.
The purpose of
such planning is to ensure client/customer retention, by minimizing
the length of business interruptions and ensuring the maintenance of
quality operations through protecting key I.T. systems
and resources.
How We Approach I.T. Business Continuity Planning & Disaster
Recovery Planning.
We have a
structured methodology which provides a systematic approach as well
as important checkpoints in the process.
Our approach
consists of 6 stages
1.
Business Impact Analysis (including identification of threats and
vulnerabilities).
2.
Conduct a Backup Audit and a Disaster Recovery Audit.
3.
Analysis.
4.
Report and Presentation.
5.
Implementation of Approved Recommendations.
6.
Testing.
Stage 1 -
Business Impact Analysis Including Identification of Threats And
Vulnerabilities
The first
step in a business continuity process is to:
| Recognise
the potential risk scenarios and
|
| To
consider the potential impacts of each type of disaster or
event. |
This
is critical - how can you properly plan for a disaster if
you have little idea of the likely scenarios and/or impacts on your
business/organization?
Having determined
the risk scenarios and impacts, it is equally important to consider
the magnitude of the risks which could result in these impacts.
Again, this is a critical activity - it will determine which
scenarios are most likely to occur and which should attract the most
attention during the planning process.
Some of the common
risk scenarios include:
|
Electrical
power failure.
|
|
Communications
services breakdown – Internet access.
|
|
Serious
information security incidents via virus, malware or hacking.
|
|
Loss of
records or data.
|
|
Electrical
storm damage – I.T. equipment including network equipment and
wiring.
|
|
I.T. system
component failure.
|
|
Theft.
|
|
Fire.
|
|
Loss of access
to office and thus access to I.T. equipment.
|
|
Disclosure of
sensitive information.
|
|
Environmental
Disasters - Flood, Earthquake, Subsidence |
Stage 2 - Conduct A Backup Audit And An I.T. Disaster Recovery Audit
We have a
structured series of questions and checklists to obtain the
information required for us to make a considered assessment and
analysis of your risks and likely impacts.
Stage 3 -
Analysis
After collating
the information obtained from the Audit process and your identified
prioritising of risk issues, we will analyse this information and
prepare recommendations.
Stage 4 - Report
And Presentation
We will
supply you with a written report with our analysis, recommendations
and proposals for processes to minimise the risk scenarios
identified and/or prioritised. We can also prepare a DRP or assist
you to prepare your own DRP.
Stage 5 -
Implementation of Recommendation
If
weaknesses are identified that require additional equipment or
processes we will work with you to implement these items.
Stage 6 -
Testing
The true value
of BCP (Business Continuity Planning) and DRP (Disaster
Recovery Planning)
is
recognised in your ability to minimise risk situations and the
impact of risk situations when they occur. But rather than wait
until risk situations to occur, it is prudent to periodically test
the processes and equipment put in place. This will allow you to
confirm the success of the processes and refine the response. We
strongly recommend periodic testing of your implementation.
It May Be The Smaller Issues That Are Important Also
People often think
in terms of the building burning down as a disaster, and of course
this is a disaster, but for some businesses, being without Internet
access for a period of 12 or 24 hours may be classed as a disaster
and thus of sufficient importance as to warrant a plan or equipment
in place to avoid or mitigate the situation. Possibly there are
“small” issues in your business that have the potential to have a
large impact??
In some industries
a formal BCP and DRP are required by law – for all businesses it
makes good business sense.
Putting I.T.
Business Continuity Planning and Disaster Recovery Planning
in place is more than a five-minute exercise - but it may be the
difference between your business suffering a major financial setback
or a relatively minor inconvenience.
 
|
