2. Scope of This Plan
Enables the department to restore company’s core
information systems in the event of a disaster.
Identifies areas of substantial risk and exposure to
disaster.
3. Practices & Procedures
The fundamental business practice followed by the IT
department is essential to the recovery of department
operations. These key activities include:
Data backup & restoration
Server & systems administration
System shutdown and startup
Identification of critical Systems
4. Data Backup & Restoration
Full backups are performed each weekend with incremental
backups occurring each weeknight. Backup tapes for each
week are collected and stored in the Server Room in a fire-
proof safe. Each week the collection is taken offsite. Long
term archives are removed from the rotation scheme with
monthly backups retained for one year and annual backups
retained for three years. Key servers across all platforms
are included in the backup schedule. Archival copies of
operating system and application software, detail network
documentation and a copy of this plan are also stored
offsite.
5. Server & System Administration
Current practice for managing servers and desktop systems
across company include:
Ensuring high availability of servers
User support and desktop system support
Server maintenance is scheduled outside of normal
business hours
6. System Shutdown & Startup
Instructions for shutdown and startup of critical
servers will be located in the Server Room and
attached to this plan. These procedures cover the
equipment in the Server Room as well as network
components for the WAN/LAN. A copy of these
procedures is also stored offsite.
7. Critical Systems
ERP System
Windows Server Domain Controllers
Storage and Application Servers
DHCP/WINS/DNS Servers and Print Services
Network Communication components
(i.e. firewalls, routers, wireless access point, etc)
Voice Communications (PBX)
8. Recovery Operations
Re-establishing operations after a disaster requires the following:
A process to follow as a guide for recovery
Identification of the most critical services provided by the department
Priorities for re-establishing those services
System documentation/configuration information
Preservation of system and data backup tapes
Additional preparatory actions include:
Contact equipment replacement provider to initiate declaration of disaster
and delivery of hardware
Notify hardware maintenance providers of disaster condition and
disposition of affected equipments
Notify software providers of disaster condition and imminent need of new
software keys, as appropriate, upon identification of serial numbers of
replacement equipment
Retrieve most recent backup tapes and transport them the host-site
location
9. Recovery Process
Initial Reaction phase
The discoverer of a disaster will notify the related parties. Each party
will notify others as appropriate.
Initial organization and preparation for the recovery:
Notify and assemble the recovery staff
Review recovery plan
Organize for damage assessment
Establish communications systems for the staff
Assign duties and responsibilities to the staff
Perform a preliminary damage assessment:
Conduct a site survey of the affected area
Inventory any salvageable or usable equipment
Review the overall damage
Communicate status to executive staff
10. Recovery Process
Recovery phase
Salvage operations:
Recover all salvageable hardware
Service or refurbish equipment as necessary
Re-establish services in their order of priority
Reconstitution Phase
Restore IT System processing capabilities to normal operations.
Depending upon the amount of damage that has occurred, the
recovery process can be done locally or if the situation warrants it,
the restoration can be done at other non-affected facility.
