Top Banner

of 19

1358536415_Disaster Recovery Plan (Template)

Jun 01, 2018

Download

Documents

Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    1/19

    ______________ School DistrictInformation Technology (IT) Disaster Recovery

    Plan

    Revision History

    REVISION DTE N!E DES"RIPTIONDraft 1.0

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    2/19

    S

    Table of Contents

    Information Technology Statement of Intent.. 1

    Policy Statement. 1

    Objectives. 1

    Key Personnel Contact Information. 2

    Eternal Contacts. !1. Plan Overvie"... #

    1.1 Plan $%&ating. #1.2 Plan 'oc(mentation Storage #1.! Prevention... #1.# )ac*+(% Strategy #1., -is* anagement. ,

    2. Emergency -es%onse. ,2.1 /lert0 Escalation an& Plan Invocation. ,

    2.1.1 Plan Triggering Events ,2.1.2 /ssembly Points.. ,2.1.! Plan Invocation.... ,

    2.2 IT 'isaster -ecovery Team.. 2.! Emergency /lert0 Escalation an& IT 'isaster -ecovery Plan /ctivation.. 2.!.1 Emergency /lert. 2.!.2 'isaster -ecovery Proce&(res for anagement . 2.!.! Contact "ith Em%loyees 2.!.# )ac*(% Staff 2.!., Personnel an& amily 3otification

    !. e&ia. !.1 e&ia Contact !.2 e&ia Strategies +4!.! -(les for 'ealing "ith e&ia.. 4

    #. Ins(rance.. 4

    ,. inancial an& 5egal Iss(es. 4,.1 inancial /ssessment 4,.2 inancial -e6(irements 4,.! 5egal /ctions.. 4

    . IT 'isaster -ecovery Plan Eercising.. 4

    4. IT 'isaster -ecovery Kit 7 S(%%lies.. 8

    8. /nn(al -evie". 8

    /%%en&i / 9 Information Technology 'isaster -ecovery Plan Tem%lates... :IT 'isaster -ecovery Plan for System One.... :+1;IT 'isaster -ecovery Plan for System T"o 11IT 'isaster -ecovery Plan for

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    3/19

    S

    Information Technology Statement of Intent

    This &oc(ment &elineates the AAAAAAAAAAA School 'istrictBs =referre& to as the 'istrictD> %olicies an& %roce&(resfor an Information Technology 'isaster -ecovery Plan =referre& to as IT 'isaster -ecovery PlanD>0 as "ell as o(r%rocess+level %lans for recovering critical technology %latforms an& the telecomm(nications infrastr(ct(re. This&oc(ment s(mmari@es o(r recommen&e& %roce&(res. In the event of an act(al emergency sit(ation0mo&ifications to this &oc(ment may be ma&e to ens(re %hysical safety of %eo%le0 systems0 an& &ata.

    O(r mission is to ens(re information system o%eration0 &ata integrity an& availability0 an& b(siness contin(ity.

    Policy Statement

    anagement has a%%rove& the follo"ing %olicy statement

    The 'istrictBs com%rehensive IT 'isaster -ecovery Plan shall be revie"e& ann(ally.

    / ris* assessment shall be (n&erta*en %erio&ically to &etermine the re6(irements for the IT 'isaster

    -ecovery Plan.

    The IT 'isaster -ecovery Plan sho(l& cover all essential an& critical infrastr(ct(re elements0 systems an&

    net"or*s0 in accor&ance "ith *ey e&(cational activities.

    The IT 'isaster -ecovery Plan sho(l& be %erio&ically teste& in a sim(late& environment to ens(re that it can

    be im%lemente& in emergency sit(ations an& that the management an& staff (n&erstan& ho" it is to beeec(te&.

    Staff m(st be ma&e a"are of the IT 'isaster -ecovery Plan an& their o"n res%ective roles.

    The IT 'isaster -ecovery Plan is to be *e%t (% to &ate to ta*e into acco(nt changing circ(mstances.

    Objectives

    The %rinci%al objective of the IT 'isaster -ecovery Plan %rogram is to &evelo%0 test an& &oc(ment a "ell+str(ct(re& an& easily (n&erstoo& %lan "hich "ill hel% the 'istrict recover as 6(ic*ly an& effectively as %ossiblefrom an (nforeseen &isaster or emergency "hich interr(%ts information systems an& e&(cational o%erations.

    /&&itional objectives incl(&e the follo"ing

    The nee& to ens(re that em%loyees f(lly (n&erstan& their &(ties in im%lementing s(ch a %lan.

    The nee& to ens(re that o%erational %olicies are a&here& to "ithin all %lanne& activities.

    The nee& to ens(re that %ro%ose& contingency arrangements are cost+effective.

    'isaster recovery ca%abilities are a%%licable to staff0 ven&ors an& others.

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    4/19

    S

    1

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    5/19

    S

    KEY PERSONNEL CONTCT IN!OR"TION

    N"E N# TITLE CONTCTOPTION

    CONTCT N$"%ER

    S&'erinten(ent of Schools

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    6/19

    S

    E.TERNL CONTCTS

    N"E N# CONTCT CONTCTOPTION

    CONTCT N$"%ER/S0

    Po)er Com'any

    Po"er O(tage

    3at(ral Gas

    Telecom Carrier 1

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    7/19

    S

    1, Plan Overvie)

    1,1 Plan $'(atingIt is necessary for the IT 'isaster -ecovery Plan (%&ating %rocess to be %ro%erly str(ct(re& an&controlle&.

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    8/19

    S

    4

    1,7 Ris* "anagementThere are many %otential &isr(%tive threats "hich can occ(r at any time an& affect the normal e&(cational%rocess.

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    9/19

    S

    2,2 IT #isaster Recovery TeamTeam members incl(&e

    The teams res%onsibilities incl(&e Establish facilities for an emergency level of service "ithin 1 b(siness &ayJ -estore *ey services "ithin 1 b(siness &ay of the inci&entJ -et(rn to b(siness as (s(al "ithin 1 b(siness &ay after the inci&ent =&e%en&ing (%on

    inci&ent>J

    Coor&inate activities "ith &isaster recovery team0 first res%on&ers0 etc.

    2,5 Emergency lert9 Escalation an( IT #isaster Recovery Plan ctivationThis %olicy an& %roce&(re has been establishe& to ens(re that in the event of a &isaster or crisis0%ersonnel "ill have a clear (n&erstan&ing of "ho sho(l& be contacte&. Proce&(res have been a&&resse&to ens(re that comm(nications can be 6(ic*ly establishe& "hile activating &isaster recovery.

    The IT 'isaster -ecovery Plan "ill rely %rinci%ally on *ey members of management an& staff "ho "ill%rovi&e the technical an& management s*ills necessary to achieve a smooth technology.

    2,5,1 Emergency lert

    The %erson &iscovering the inci&ent calls their imme&iate s(%ervisor. One of the tas*s &(ring the earlystages of the emergency is to notify the IT 'isaster -ecovery Team that an emergency has occ(rre&. The

    notification "ill re6(est IT 'isaster -ecovery Team members to assemble at the site of the %roblem an&"ill involve s(fficient information to have this re6(est effectively comm(nicate&.

    2,5,2 IT #isaster Recovery Proce(&res for "anagement

    embers of the management team "ill *ee% a har& co%y of the names an& contact n(mbers of eachem%loyee in their &e%artments. In a&&ition0 management team members "ill have a har& co%y of the'istrictBs IT 'isaster -ecovery Plan on file in their homes in the event that the b(il&ing is inaccessible0(n(sable0 or &estroye&.

    2,5,5 Contact )ith Em'loyeesanagers "ill serve as the focal %oints for their &e%artments0 "hile &esignate& em%loyees "ill call otherem%loyees to &isc(ss the crisisH&isaster an& the &istrictBs imme&iate %lans. Em%loyees "ho cannot reachstaff on their call list are a&vise& to call the staff memberBs emergency contact to relay information on the

    &isaster. Other comm(nication metho&s ra&io0 television0 email.

    2,5,6 %ac*&' StaffIf an a&ministrator0 s(%ervisor or staff member &esignate& to contact other staff members is (navailable0the &esignate& bac*(% staff member "ill %erform notification &(ties.

    2,5,7 Personnel an( !amily NotificationIf the inci&ent has res(lte& in a sit(ation "hich "o(l& ca(se concern to an em%loyeeBs imme&iate familys(ch as hos%itali@ation of inj(re& %ersons0 it "ill be necessary to notify their imme&iate family members6(ic*ly.

    5, "e(ia

    5,1 "e(ia ContactThe Presi&ent of the )oar& of E&(cation0 the S(%erinten&ent of Schools0 or &esignee0 "ill coor&inate "iththe me&ia0 "or*ing accor&ing to )oar& Policy L =see attache&>.

    5,2 "e(ia Strategiesa. /voi&ing a&verse %(blicityb. Ta*e a&vantage of o%%ort(nities for (sef(l %(blicity

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    10/19

    S

    c. Fave ans"ers to the follo"ing basic 6(estions liste& in Section !.1 above is %ermitte& &irect contact "ith the me&iaJ anyone elsecontacte& sho(l& refer callers or in+%erson me&ia re%resentatives to the in&ivi&(al=s> liste&.

    6, Ins&rance/s %art of the &istrictBs &isaster recovery strategy0 a n(mber of ins(rance %olicies have been %(t in %lace.These incl(&e errors an& omissions0 School 'istrict E&(cators 5egal 5iability0 general liability0 an&b(siness interr(%tion ins(rance.

    /mo(nt of Coverage Person -es%onsible 3etCoverage Ty%e Coverage Perio& or Coverage -ene"al 'ate

    7, !inancial an( Legal Iss&es

    7,1 !inancial ssessmentThe IT 'isaster -ecovery Team shall %re%are an initial assessment of the im%act of the inci&ent on the

    financial affairs of the com%any. The assessment sho(l& incl(&e 5oss of financial &oc(ments 5oss of cash

    7,2 !inancial Re8&irementsThe imme&iate financial nee&s of the 'istrict m(st be a&&resse&. These can incl(&e

    Cash flo" %osition Tem%orary borro"ing ca%ability $%coming %ayments for %ayroll taes0 Social Sec(rity0 etc. /vailability of 'istrict cre&it car&s to %ay for s(%%lies an& services re6(ire& %ost+&isaster

    7,5 Legal ctionsThe 'istrictBs attorney an& IT 'isaster -ecovery Team "ill jointly revie" the aftermath of the inci&ent an&

    &eci&e "hether there may be legal actions res(lting from the event.

    :, IT #isaster Recovery Plan E;ercisingIT 'isaster -ecovery Plan eercises are an essential %art of the %lan &evelo%ment %rocess. In an IT'isaster -ecovery Plan eercise0 no one %asses or failsJ everyone "ho %artici%ates learns from eercises

    9 "hat nee&s to be im%rove&0 an& ho" the im%rovements can be im%lemente&. Plan eercising ens(resthat the emergency team is familiar "ith the assignment an&0 more im%ortantly0 is confi&ent in theirca%abilities.

    S(ccessf(l IT 'isaster -ecovery Plans la(nch into action smoothly an& effectively "hen they are nee&e&.This "ill only ha%%en if everyone "ith a role to %lay in the %lan has rehearse& the role one or more times.The %lan sho(l& also be vali&ate& by sim(lating the circ(mstances "ithin "hich it has to "or* an& seeing"hat ha%%ens.

    $%on com%letion of the eercises0 amen&ments to this &oc(ment may be &etermine& necessary.-evisions to this &oc(ment "ill be note& on the cover sheet of the IT 'isaster -ecovery Plan.

    4

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    11/19

    S

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    12/19

    S

    8

    ''en(i; IT #isaster Recovery Plan Tem'lates

    IT #isaster Recovery Plan for >System One?

    SYSTE" Primary SiteO4ER4IE@

    SYSTE" SPECI!ICTIONS

    "ORE IN!O ?isio 'iagram /ttache&

    SECON#RY SITE

    :

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    13/19

    S

    %CK$P STRTE-Y !OR SYSTE"ONE

    'aily

    onthly

    SYSTE" ONEIT #ISSTER RECO4ERYPROCE#$RE

    Scenario 1

    Total 5oss of 'ata

    Scenario 2

    Total 5oss of Far&"are

    ##EN#$"

    CONTCTS

  • 8/9/2019 1358536415_Disaster Recovery Plan (Template)

    14/19

    S

    1;

    IT #isaster Recovery Plan for >System T)o?

    SYSTE"

    O4ER4IE@

    PRO#$CTION SER4ER 5ocationServer o&el

    O%erating SystemCP$semoryTotal 'is*System Fan&leSystem Serial L'3S EntryIP /&&ressOther

    3OT SITE SER4ER Provi&e &etails

    PPLICTIONS=$se bol& for Fot Site>

    SSOCITE# SER4ERS

    %CK$P STRTE-Y for SYSTE"T@O

    'aily Provi&e &etails

    onthly Provi&e &etails

    N(arterly Provi&e &etails

    SYSTE" T@OIT #ISSTER RECO4ERYPROCE#$RE

    Scenario 1

    Total 5oss of 'ata

    Provi&e &etails

    Scenario 2

    Total 5oss of F