Disaster Recovery Plan

2015

By: Ebenezer Awuah-Asomaning

(Head of ICT)

AGAVE RURAL BANK LTD DISASTER RECOVERY PLAN

Table of Contents1.0 Introduction..........................................................................................................................................4

1.1 Definition of a Disaster 4

1.2 Purpose 4

1.3 Scope 5

1.4 Version Information & Changes 5

2.0 Disaster Recovery Teams & Responsibilities..................................................................................6

2.1.0 Disaster Recovery Lead 6

2.1.1 Role and Responsibilities 6

2.1.2 Contact Information 6

2.2.0 Disaster Management Team 7

2.2.1 Role & Responsibilities 7


2.3.0 Facilities Team 7



2.4.0 Network Team 8


2.4.2 Team members 8

2.5.0 Server Team 9


2.5.2 Team members and Contact Information 9

2.6.0 Applications Team 10



2.7.0 Operations Team 11



2.8.0 Senior Management Team 12



2.9.0 Communication Team 13

i | P a g e


2.9.2 Term Members and Contact Information 13



2.11 Disaster Recovery Call Tree...........................................................................................................14

3.0 Recovery Facilities............................................................................................................................16

3.1 Data and Backups 17

4.0.0 Communicating During a Disaster...............................................................................................18

4.1.0 Communicating with the Authorities 18

4.1.1 Authorities Contacts 18

4.2.0 Communicating with Employees 19

4.2.1 Employee Contacts 19

4.3.0 Communicating with Clients 21

4.3.1 Crucial Clients 21

4.4.0 Communicating with the Media 21

4.4.1 Media Contacts 21

5.0 Dealing with a Disaster.....................................................................................................................22

5.1 Disaster Identification and Declaration 22

5.2 DRP Activation 23

5.3 Communicating the Disaster 23

5.4 Assessment of Current and Prevention of Further Damage 23

5.5 Standby Facility Activation 24

5.6 Restoring IT Functionality 24

5.7 Repair & Rebuilding of Primary Facility 25

6.0 Restoring IT Functionality................................................................................................................27

6.1 Current System Architecture 27

6.2 IT Systems 28

6.3 LIST OF ASSET UNDER THE ICT DEPARTMENT () 1

6.4 LISTS OF ASSETS UNDER THE ICT DEPARTMENT () 6

ii | P a g e

1.0 Introduction

This Disaster Recovery Plan (DRP) captures, in a single repository, all of the information that describes Agave Rural Bank’s ability to withstand a disaster as well as the processes that must be followed to achieve disaster recovery.

1.1 Definition of a Disaster

A disaster can be caused by man or nature and results in Agave Rural Bank’s IT department not being able to perform all or some of their regular roles and responsibilities for a period of time. Agave Rural Bank Limited defines disasters as the following:

One or more vital systems are non-functional Network break down Key personnel unable to access the network resources The building is not available for an extended period of time but all systems are functional

within it The building is available but all systems are non-functional The building and all systems are non functional

In summary a disaster is defined as a sudden, unplanned catastrophic event that renders Agave rural bank the inability to perform mission-critical and critical processes, including the ability to do normal banking activities with systems that support critical banking processes.

The following events can result in a disaster, requiring this Disaster Recovery Plan to be activated:

Fire Power Outage Flood Pandemic War Theft Terrorist Attack Hacking

1.2 Purpose

The purpose of this DRP document is in two folds: first to capture all of the information relevant to the bank’s ability to withstand a disaster, and second to document the steps that the bank will follow if a disaster occurs.

Note that in the event of a disaster the first priority of Agave Rural Bank Limited is to prevent the loss of life. Before any secondary measures are undertaken, Agave Rural Bank Limited will ensure that all employees, and any other individuals on the organization’s premises, are safe and secure.

4

After all individuals have been brought to safety, the next goal of Agave Rural Bank Limited will be to enact the steps outlined in this DRP to bring all of the organization’s groups and departments back to business-as-usual as quickly as possible. This includes:

Preventing the loss of the organization’s resources such as hardware, data and physical IT assets

Minimizing downtime related to IT Keeping the business running in the event of a disaster

This DRP document will also detail how it should be maintained and tested.

1.3 Scope

Agave Rural Bank Limited DRP takes all of the following areas into consideration:

Network Infrastructure Servers Infrastructure Telephony System Data Storage and Backup Systems Data Output Devices End-user Computers Organizational Software Systems Database Systems IT policy

This DRP does not take into consideration any non-IT, personnel, Human Resources and real estate related disasters. For any disasters that are not addressed in this document, please refer to the business continuity plan created by Agave Rural Bank Limited.

1.4 Version Information & Changes

Any changes, edits and updates made to the DRP will be recorded in here. It is the responsibility of the Disaster Recovery team to ensure that all existing copies of the DRP are up to date. Whenever there is an update to the DRP, Agave Rural Bank Limited requires that the version number be updated to indicate this.

Name of Person Making Change

Role of Person Making Change

Date of

Change

Version

Number

Notes

Ebenezer Awuah-Asomaning

Head of ICT 31/12

/20201.0 Initial version of DR Plan

5

John Apetepe Aheto

Supervising

Manager

6

2.0 Disaster Recovery Teams & ResponsibilitiesIn the event of a disaster, different groups will be required to assist the IT department in their effort to restore normal functionality to the employees of Agave Rural Bank Ltd.

The different groups and their responsibilities are as follows:

Disaster Recovery Lead(s) Disaster Management Team Facilities Team Network Team Server Team Applications Team Operations Team Management Team Communications Team Finance Team

The lists of roles and responsibilities in this section have been created by Systems Administrator and reflect the likely tasks that team members will have to perform. Disaster Recovery Team members will be responsible for performing all of the tasks below. In some disaster situations, Disaster Recovery Team members will be called upon to perform tasks not described in this section.

2.1.0 Disaster Recovery Lead

The Disaster Recovery Lead is responsible for making all decisions related to the Disaster Recovery efforts. This person’s primary role will be to guide the disaster recovery process and all other individuals involved in the disaster recovery process will report to this person in the event that a disaster occurs at Agave Rural Bank Ltd, regardless of their department and existing managers. All efforts will be made to ensure that this person be separate from the rest of the disaster management teams to keep his/her decisions unbiased; the Disaster Recovery Lead will not be a member of other Disaster Recovery groups in Agave Rural Bank.

2.1.1 Role and Responsibilities Make the determination that a disaster has occurred and trigger the DRP and related processes. Initiate the DR Call Tree. Be the single point of contact for and oversee all of the DR Teams. Organize and chair regular meetings of the DR Team leads throughout the disaster. Present to the Management Team on the state of the disaster and the decisions that need to be

made. Organize, supervise and manage all DRP test and author all DRP updates.

2.1.2 Contact Information

7

Name Role/TitleWork Phone

NumberHome Phone

NumberMobile Phone

Number

Ebenezer A-Asomaning

Primary Disaster Lead 0501317151

2.2.0 Disaster Management Team

The Disaster Management Team that will oversee the entire disaster recovery process. They will be the first team that will need to take action in the event of a disaster. This team will evaluate the disaster and will determine what steps need to be taken to get the organization back to business as usual.

2.2.1 Role & Responsibilities Set the DRP into motion after the Disaster Recovery Lead has declared a disaster Determine the magnitude and class of the disaster Determine what systems and processes have been affected by the disaster Communicate the disaster to the other disaster recovery teams Determine what first steps need to be taken by the disaster recovery teams Keep the disaster recovery teams on track with pre-determined expectations and goals Keep a record of money spent during the disaster recovery process Ensure that all decisions made abide by the DRP and policies set by Agave Rural Bank

ltd Get the secondary site ready to restore business operations Ensure that the secondary site is fully functional and secure Create a detailed report of all the steps undertaken in the disaster recovery process Notify the relevant parties once the disaster is over and normal business functionality has

been restored After Agave Rural Bank Limited is back to business as usual, this team will be required to

summarize any and all costs and will provide a report to the Disaster Recovery Lead summarizing their activities during the disaster



NumberHome Phone

NumberMobile Phone

Number

Ebenezer A-Asomaning

System Administrator 0501317151

John Ametepe Aheto

Supervising Manager 0501317150

Michael Agbetepey

Branch Manager 0501317670

8

2.3.0 Facilities Team

The Facilities Team will be responsible for all issues related to the physical facilities that house IT systems. They are the team that will be responsible for ensuring that the standby facilities are maintained appropriately and for assessing the damage too and overseeing the repairs to the primary location in the event of the primary location’s destruction or damage.

2.3.1 Role & Responsibilities Ensure that the standby facility is maintained in working order Ensure that transportation is provided for all employees working out of the standby facility Ensure that hotels or other sleeping are arranged for all employees working out of the

standby facility Ensure that sufficient food, drink, and other supplies are provided for all employees

working out of the standby facility Assess, or participate in the assessment of, any physical damage to the primary facility Ensure that measures are taken to prevent further damage to the primary facility Work with insurance company in the event of damage, destruction or losses to any

assets owned by Agave Rural Bank Ltd Ensure that appropriate resources are provisioned to rebuild or repair the main facilities

in the event that they are destroyed or damaged After Agave Rural Bank Limited is back to business as usual, this team will be required to




NumberHome Phone

NumberMobile Phone

Number

Malik Takyi ArkohPrincipal Project Officer

0501317145

Felix Akyani Deputy Manager 0243322109

2.4.0 Network Team

The Network Team will be responsible for assessing damage specific to any network infrastructure and for provisioning data and voice network connectivity including WAN, LAN, and any telephony connections internally within the bank as well as telephony and data connections with the outside world. They will be primarily responsible for providing baseline network functionality and may assist other IT DR Teams as required.

2.4.1 Role & Responsibilities

9

In the event of a disaster that does not require migration to standby facilities, the team will determine which network services are not functioning at the primary facility

If multiple network services are impacted, the team will prioritize the recovery of services in the manner and order that has the least business impact.

If network services are provided by third parties, the team will communicate and co-ordinate with these third parties to ensure recovery of connectivity.

In the event of a disaster that does require migration to standby facilities the team will ensure that all network services are brought online at the secondary facility

Once critical systems have been provided with connectivity, employees will be provided with connectivity in the following order:

o All members of the DR Teamso All Management Staffo All IT employeeso All remaining employees

Install and implement any tools, hardware, software and systems required in the standby facility

Install and implement any tools, hardware, software and systems required in the primary facility

After Agave Rural Bank Limited is back to business as usual, this team will be summarize any and all costs and will provide a report to the Disaster Recovery Lead summarizing their activities during the disaster

2.4.2 Team members


NumberHome Phone

NumberMobile Phone

Number


System Administrator 0501317151 0201901973

Sitor Sedzifa Senior Clerk 0501354452

2.5.0 Server Team

The Server Team will be responsible for providing the physical server infrastructure required for the enterprise to run its IT operations and applications in the event of and during a disaster. They will be primarily responsible for providing baseline server functionality and may assist other IT DR Teams as required.

2.5.1 Role & Responsibilities In the event of a disaster that does not require migration to standby facilities, the team

will determine which servers are not functioning at the primary facility If multiple servers are impacted, the team will prioritize the recovery of servers in the

manner and order that has the least business impact. Recovery will include the following tasks:

o Assess the damage to any serverso Restart and refresh servers if necessary

10

Ensure that secondary servers located in standby facilities are kept up-to-date with system patches

Ensure that secondary servers located in standby facilities are kept up-to-date with application patches

Ensure that secondary servers located in standby facilities are kept up-to-date with data copies

Ensure that the secondary servers located in the standby facility are backed up appropriately

Ensure that all of the servers in the standby facility abide by Agave Rural Bank’s server policy

Install and implement any tools, hardware, and systems required in the standby facility Install and implement any tools, hardware, and systems required in the primary facility After Agave Rural Bank Limited is back to business as usual, this team will be summarize

any and all costs and will provide a report to the Disaster Recovery Lead summarizing their activities during the disaster

2.5.2 Team members and Contact Information


NumberHome Phone

NumberMobile Phone

Number



Sitor Sedzifa Senior Clerk 0501354452

Bright Amedume Secretary 0244980715

11

2.6.0 Applications Team

The Applications Team will be responsible for ensuring that all enterprise applications operates as required to meet business objectives in the event of and during a disaster. They will be primarily responsible for ensuring and validating appropriate application performance and may assist other IT DR Teams as required.

2.6.1 Role & Responsibilities In the event of a disaster that does not require migration to standby facilities, the team

will determine which applications are not functioning at the primary facility If multiple applications are impacted, the team will prioritize the recovery of applications

in the manner and order that has the least business impact. Recovery will include the following tasks:

o Assess the impact to application processeso Restart applications as requiredo Patch, recode or rewrite applications as required

Ensure that secondary servers located in standby facilities are kept up-to-date with application patches

Ensure that secondary servers located in standby facilities are kept up-to-date with data copies

Install and implement any tools, software and patches required in the standby facility Install and implement any tools, software and patches required in the primary facility After Agave Rural Bank Limited is back to business as usual, this team will be summarize

any and all costs and will provide a report to the Disaster Recovery Lead summarizing their activities during the disaster



NumberHome Phone

NumberMobile Phone

Number



Sitor Sedzifa Senior Clerk

12

2.7.0 Operations Team

This team’s primary goal will be to provide employees with the tools they need to perform their roles as quickly and efficiently as possible. They will need to provision all Agave Rural Bank Limited employees in the standby facility with the tools that their specific role requires.

2.7.1 Role & Responsibilities Maintain lists of all essential supplies that will be required in the event of a disaster Ensure that these supplies are provisioned appropriately in the event of a disaster Ensure sufficient spare computers and laptops are on hand so that work is not

significantly disrupted in a disaster Ensure that spare computers and laptops have the required software and patches Ensure sufficient computer and laptop related supplies such as cables, wireless cards,

laptop locks, mice, printers and docking stations are on hand so that work is not significantly disrupted in a disaster

Ensure that all employees that require access to a computer/laptop and other related supplies are provisioned in an appropriate timeframe

If insufficient computers/laptops or related supplies are not available the team will prioritize distribution in the manner and order that has the least business impact

This team will be required to maintain a log of where all of the supplies and equipment were used

After Agave Rural Bank Limited is back to business as usual, this team will be required to summarize any and all costs and will provide a report to the Disaster Recovery Lead summarizing their activities during the disaster


Name Role/TitleWork

Phone Number

Home Phone Number

Mobile Phone Number

John Ametepe Aheto

Supervising Manager 0501317150

Michael Agbetepey

Branch Manager

Felix Akyani Operations Manager 0243322109

13

2.8.0 Senior Management Team

The Senior Management Team will make any business decisions that are out of scope for the Disaster Recovery Lead. Decisions such as constructing a new data center, relocating the primary site etc. should be make by the Senior Management Team. The Disaster Recovery Lead will ultimately report to this team.

2.8.1 Role & Responsibilities Ensure that the Disaster Recovery Team Lead is help accountable for his/her role Assist the Disaster Recovery Team Lead in his/her role as required Make decisions that will impact the company. This can include decisions concerning:

o Rebuilding of the primary facilitieso Rebuilding of data centerso Significant hardware and software investments and upgradeso Other financial and business decisions



NumberHome Phone

NumberMobile Phone

Number

John Ametepe Aheto

Supervision Manager

0501317150

Daniel Modzaka Auditor Manager 0501317142

Michael Agbetepey Branch Manager 0501317670

Felix AkayniOperations Manager

0243322109

Ebenezer Awuah-Asomaing

Systems Administrator

0501317151

14

2.9.0 Communication Team

This will be the team responsible for all communication during a disaster. Specifically, they will communicate with Agave Rural Bank’s employees, clients, vendors and suppliers, banks, and even the media if required.

2.9.1 Role & Responsibilities Communicate the occurrence of a disaster and the impact of that disaster to all the

bank‘s employees Communicate the occurrence of a disaster and the impact of that disaster to authorities,

as required Communicate the occurrence of a disaster and the impact of that disaster to all the

bank‘s partners Communicate the occurrence of a disaster and the impact of that disaster to all the

bank‘s clients Communicate the occurrence of a disaster and the impact of that disaster to all bank‘s

vendors Communicate the occurrence of a disaster and the impact of that disaster to media

contacts, as required After Agave Rural Bank Limited is back to business as usual, this team will be required to


2.9.2 Term Members and Contact Information


NumberHome Phone

NumberMobile Phone

Number

Felix AkayniAssistant Manager Operations

0243322109

Malik Takyi ArkohPrincipal Project Officer

0501317145

Christian Kpetigo Project Officer 0501317146


Systems Administrator

0501317151

2.10.0 Finance TeamThis team will be responsible for ensuring that all of the bank’s finances are dealt with in an appropriate and timely manner in the event of a disaster. The finance team will ensure that

15

there is money available for necessary expenses that may result from a disaster as well as expenses from normal day-to-day business functions.

2.10.1 Role & Responsibilities Ensure there is sufficient cash on-hand or accessible to deal with small-scale expenses

caused by the disaster. These can include paying for accommodations and food for DR team members, incremental bills, etc.

Ensure there is sufficient credit available or accessible to deal with large-scale expenses caused by the disaster. These can include paying for new equipment, repairs for primary facilities, etc.

Review and approve Disaster Teams’ finances and spending Ensure that payroll occurs and that employees are paid as normal, where possible Communicate with creditor to arrange suspension of extensions to scheduled payments,

as required Communicate with banking partners to obtain any materials such as checks, bank books

etc. that may need to be replaced as a result of the disaster



NumberHome Phone

NumberMobile Phone

Number

John Ametepe Aheto

Supervision Manager 0501317150

Faith FenuDeputy Manager Accounts

0501317148

Gideon AgbozoDeputy Manager Accounts

0501317144

16

3.0 Recovery FacilitiesCurrently, Agave rural bank limited keeps it backup files and drives with the IT Manager.

3.1 Data and Backups

This section explains where Agave Rural Bank Limited data resides as well as the backup frequency. The ICT department would use this information to locate and restore data in the event of a disaster.

17

Data in Order of Criticality

Rank Data Data TypeBack-up

FrequencyBackup Location(s)

1 T24 Setup (RCBPROD)

Confidential Every Day at 8:30 pm

External Hard drives and Sogakope Agency Server

2 T24 IMAGES Confidential Every Day at 8:30 pm

External Hard drives , Sogakope Agency Server and Head Office Servers

3 Apache Tomcat Setup

Confidential External Hard drives Sogakope Agency Server and head Office Severs

4 Customer Balances

Confidential Every morning External Hard drives, Sogakope Agency Server and Head Office Servers

5 Apex Statement Confidential Every Morning External Hard drives, Sogakope Agency Server and Head Office Server

6 GL and P&L Confidential Weekly External Hard drives, Sogakope Agency Server and head Office Servers

7 Circulars Confidential Every Day External Hard drivers, Sogakope Agency Server and Head office Servers

9 T24 Data (folder) Folder Every Day at 9:00 am

External Hard drivers, Sogakope Agency Server and Head office

18

Servers

10 Accounts(folder) Folder Every Day at 9:00 am

External Hard drivers and Sogakope Agency Servers

11 Assistant Manager(folder)

Folder Every Day at 9:00 am


13 Secretary Folder Every Day at 9:00 am


14 Project Folder Every Day at 9:00 am


15 Databank (folder) Folder Every Day at 8:30 pm


17 Audit Folder Every Day at 9:00 am

External Hard drivers and Sogakope Agency Server

18 Software Folder Every Day at 9:00 am

External Hard drivers, Sogakope Agency Server and Head office Servers

4.0.0 Communicating During a DisasterIn the event of a disaster Agave Rural Bank Limited will need to communicate with various parties to inform them of the effects on the business, surrounding areas and timelines. The Communications Team will be responsible for contacting all of the bank‘s stakeholders.

4.1.0 Communicating with the Authorities

The Communications Team’s first priority will be to ensure that the appropriate authorities have been notified of the disaster, providing the following information:

19

The location of the disaster The nature of the disaster The magnitude of the disaster The impact of the disaster Assistance required in overcoming the disaster Anticipated timelines

4.1.1 Authorities Contacts

Authorities Point of Contact Phone Number E-mail

Police Department

Fire Department

Electricity Company of Ghana

20

4.2.0 Communicating with Employees

The Communications Team’s second priority will be to ensure that the entire company has been notified of the disaster. The best and/or most practical means of contacting all of the employees will be used with preference on the following methods (in order):

E-mail (via Axigen mail where that system still functions Telephone to employee home phone number Telephone to employee mobile phone number

The employees will need to be informed of the following:

Whether it is safe for them to come into the office Where they should go if they cannot come into the office Which services are still available to them Work expectations of them during the disaster

4.2.1 Employee Contacts1. AKANYI FELIX GRANT 0 2433221092. OUT ADDO NAOMI 0 2436816653. FENU FAITH KWABLA 0 24 22849034. AKPORHOR VICTOR 0 2090413425. KUMAGAH MILLICENT 0 2003462696. TSINIGO BRIGHT 0 244 6520217. ADIABO FRANCIS ATSU 0 2044304308. TETTEVI WISE 0 2425573449. KOFFIE GLADYS 0 243 88518210. AHOVI SOLOMON 0 247 60516511. TAMAKLOE THOMAS 0 24935765512. HUMALI GODWIN 0 20 643987513. GIDIGAH PASCAL 0 240 28502714. BEDZO PAUL 0 246 43433315. TIGIDZA FRANCIS 0 24956573416. AHETO JOHN AMETEFE 0 24420717617. AMEDUME BRIGHT BEDZRA 0 24332453718. ADIABO VACO 0 50831435819. FENUKU PHILIP 0 24334494820. SOWADA ELIZABETH 0 20036724221. ABLANA MAWULI 0 50907218822. TAKYI ARKOH MALIK 0 276 14183323. AWUAH-ASOMANING EBENEZER 0 20190197324. TETTEH ERNEST 0 24381363125. WETSI WINFRED 0 249216231

21

26. MODZAKA DANIEL 0 242 755 03027. AGBOZO GIDEON 0 242 84344428. ZEWU AMANDA 0 20844128929. DORDOR DINAH 0 24326103230. DOE PIUS 0 50953525231. SEDZIFAH SITOR 0 50968191632. DEKU HOPESON 0 20867801233. ALEAWOGBE ATSU 0 50907224634. OPEKU JUSTICE 0 54070651035. DZINYELA SELASI 0 20034717936. DANYOH ISRAEL 0 240 79853337. KPETIGO CHRISTIAN DELA 0 24440747338. YEVUDOKO MICHAEL 0 24754440739. AYITEY ANTHONY 0 54257884840. AGUDZE JEFFREY PHANUEL 0 206 71268141.42.

3.0 Communicating with Clients

After all of the organization’s employees have been informed of the disaster, the Communications Team will be responsible for informing clients of the disaster and the impact that it will have on the following:

Anticipated impact on service offerings Anticipated impact on security of client information Anticipated timelines

Crucial clients will be made aware of the disaster situation first. Crucial clients will be E-mailed first then called after to ensure that the message has been delivered. All other clients will be contacted only after all crucial clients have been contacted.

4.3.1 Crucial Clients

Company Name Point of Contact Phone Number E-mail

AGOZIE ENTERPRISE

AGOZIE WILLIAM 0244838506

KONU VERONICA 0243648322

AQUALINK GHANA LIMITED

0243259442

22

4.4.0 Communicating with the Media

After all of the organization’s employees have been informed of the disaster, the Communications Team will be responsible for informing media outlets of the disaster, providing the following information:

An official statement regarding the disaster The magnitude of the disaster The impact of the disaster Anticipated timelines

4.4.1 Media Contacts

Company Name Point of Contact Phone Number E-mail

TONGU FM Marketing Manager 233 54-335-8666

SHINE FM Marketing Manager 233 302 963739

VOLTA STAR Programs Manager 233 271133111

5.0 Dealing with a DisasterIf a disaster occurs in Agave Rural Bank, the first priority is to ensure that all employees are safe and accounted for. After this, steps must be taken to mitigate any further damage to the facility and to reduce the impact of the disaster to the organization.

Regardless of the category that the disaster falls into, dealing with a disaster can be broken down into the following steps:

1) Disaster identification and declaration2) DRP activation3) Communicating the disaster4) Assessment of current and prevention of further damage5) Standby facility activation6) Establish IT operations7) Repair and rebuilding of primary facility

23

5.1 Disaster Identification and Declaration

Since it is almost impossible to predict when and how a disaster might occur, the ICT department must be prepared to find out about disasters from a variety of possible avenues. These can include:

First hand observation System Alarms and Network Monitors Environmental and Security Alarms in the Primary Facility Security staff Facilities staff End users Media reports

Once the Disaster Recovery Lead has determined that a disaster had occurred, he/she must officially declare that the company is in an official state of disaster. It is during this phase that the Disaster Recovery Lead must ensure that anyone that was in the primary facility at the time of the disaster has been accounted for and evacuated to safety according to the company’s Evacuation Policy.

While employees are being brought to safety, the Disaster Recovery Lead will instruct the Communications Team to begin contacting the Authorities and all employees not at the impacted facility that a disaster has occurred.

24

5.2 DRP Activation

Once the Disaster Recovery Lead has formally declared that a disaster has occurred he/she will initiate the activation of the DRP by triggering the Disaster Recovery Call Tree. The following information will be provided in the calls that the Disaster Recovery Lead makes and should be passed during subsequent calls:

That a disaster has occurred The nature of the disaster (if known) The initial estimation of the magnitude of the disaster (if known) The initial estimation of the impact of the disaster (if known) The initial estimation of the expected duration of the disaster (if known) Actions that have been taken to this point Actions that are to be taken prior to the meeting of Disaster Recovery Team Leads Scheduled meeting place for the meeting of Disaster Recovery Team Leads Scheduled meeting time for the meeting of Disaster Recovery Team Leads Any other pertinent information

If the Disaster Recovery Lead is unavailable to trigger the Disaster Recovery Call Tree, that responsibility shall fall to the Disaster Management Team Lead

5.3 Communicating the Disaster

Refer to the “Communicating during a Disaster” section of this document.

5.4 Assessment of Current and Prevention of Further Damage

Before any employees from Agave Rural Bank Limited can enter the primary facility after a disaster, appropriate authorities must first ensure that the premises are safe to enter.

The first team that will be allowed to examine the primary facilities once it has been deemed safe to do so will be the Facilities Team. Once the Facilities Team has completed an examination of the building and submitted its report to the Disaster Recovery Lead, the Disaster Management, Networks, Servers, and Operations Teams will be allowed to examine the building. All teams will be required to create an initial report on the damage and provide this to the Disaster Recovery Lead within 7 days of the initial disaster.

During each team’s review of their relevant areas, they must assess any areas where further damage can be prevented and take the necessary means to protect the bank’s assets. Any necessary repairs or preventative measures must be taken to protect the facilities; these costs must first be approved by the Disaster Recovery Team Lead.

25

5.5 Standby Facility Activation

The Standby Facility will be formally activated when the Disaster Recovery Lead determines that the nature of the disaster is such that the primary facility is no longer sufficiently functional or operational to sustain normal business operations.

At the moment Agave Rural Bank Limited does not have a standby facility. But I included this in case of the future provisions.

Once this determination has been made, the Facilities Team will be commissioned to bring the Standby Facility to functional status after which the Disaster Recovery Lead will convene a meeting of the various Disaster Recovery Team Leads at the Standby Facility to assess next steps. These next steps will include:

1. Determination of impacted systems2. Criticality ranking of impacted systems3. Recovery measures required for high criticality systems4. Assignment of responsibilities for high criticality systems5. Schedule for recovery of high criticality systems6. Recovery measures required for medium criticality systems7. Assignment of responsibilities for medium criticality systems8. Schedule for recovery of medium criticality systems9. Recovery measures required for low criticality systems10.Assignment of responsibilities for recovery of low criticality systems11.Schedule for recovery of low criticality systems12.Determination of facilities tasks outstanding/required at Standby Facility13.Determination of operations tasks outstanding/required at Standby Facility14.Determination of communications tasks outstanding/required at Standby Facility15.Determination of facilities tasks outstanding/required at Primary Facility16.Determination of other tasks outstanding/required at Primary Facility17.Determination of further actions to be taken

During Standby Facility activation, the Facilities, Networks, Servers, Applications, and Operations teams will need to ensure that their responsibilities, as described in the “Disaster Recovery Teams and Responsibilities” section of this document are carried out quickly and efficiently so as not to negatively impact the other teams.

5.6 Restoring IT Functionality

Refer to the “Restoring IT Functionality” section of this document.5.7 Repair & Rebuilding of

Primary Facility

Before the enterprise can return operations to Primary Facilities, those facilities must be returned to an operable condition. The tasks required to achieve that will be variable depending

26

on the magnitude and severity of the damage. Specific tasks will be determined and assigned only after the damage to Primary Facilities has been assessed.

6.0 Restoring IT FunctionalityShould a disaster actually occur and Agave Rural Bank Limited need to exercise this plan, this section will be referred to frequently, as it will contain all of the information that describes the manner in which the bank’s information system will be recovered.

27

6.1 Current System Architecture

28

Server

Workstation

Workstation

Workstation

Workstation

Switch

AGAVE RURAL BANK NETWORK

Router

6.2 IT Systems

Rank IT System System Components (In order of importance)

1 Computer Server Web server software (Apache Webserver) T24 Service Application server software Application server backup T24 Image Folder FTP Client software Database server backup Offline Customer Balance Active Directory

2 16 Port Switches All the port working

3 STL Modem

4 STL Satellite dish

5 16 Port Switch All the port working

6 LAN Patch Panel All the port working

7 PABX Intercom Services, Handset

8 Desktop Computers Windows 7 OS, Internet Explorer 8, Office suite 07

9 Laptop Computers Windows 7 or 8 OS, Internet Explorer 8, Office suite 07,

11 Backup Drives All server data and information

12 Ezwich Devices Enrolment device, rollers, scanners, cards etc

29

6.3 LIST OF ASSET UNDER THE ICT DEPARTMENT (HEAD OFFICE AND DABALA AGENCY)

Department Name

System User

System Name

Component Name

Vendor Name

Model Number

Serial Number UPS UPTIME

UPS DOWN TIME

ICT Dell Desktop System Unit Dell Dell Optiplex 380

DFQ2Q4J

HP Desktop System Unit HP Compaq Dx2400 MXL93611NKHP Monitor HP L1710Dell Desktop System Unit Dell Dell

Optiplex 3802CTD22S

Server System Unit Dell Dell Power Edge T110

27CSB25

Dell Monitor Dell-20

HP Desktop System Unit HP Compaq U242KN8ZB848 FaultyServer System Unit Dell PowerEdge

2600DFBQ31J Faulty

Sever System Unit Dell Dell Power Edge T110

9840842

APC UPS APC 750APC UPS APC 740APC UPS 1500HP Desktop System Unit HP Compaq DX2300 HUB7260BJMDell Monitor Dell-19 faultyHP Monitor HP-19 faulty

HP Desktop System Unit HP Compaq DX2400 MXL900SNS FaultyIntercom Handset Panasonic


Toshiba Laptop

Laptop Toshiba Satellite

PSCBLU-01Y003

9C2542150

Intercom Telephone Switch

Belta 208-416 PABX

Canon Scanner Canon LIDE100

Printer EPSON DFX9000

1

Router STL Sky Edge II

Switch Cisco SMB 16 Ports

SR2016

Switch TP- LINK 5 Ports

VOIP STL Audio Codes MP-112 VOIP Gateway

Intercom Handset Huawei E3M9XC73A2807463

Bright Amedume

Dell Desktop System Unit Dell Optiplex 380 8BQ2Q4J

HP Printer Printer HP LaserJet 5100

Canon Printer and Photocopier

Canon Image Runner 2318

Canon Scanner Canon LIDE100Intercom Handset MicrotelEPSON Printer EPSON

DFX-8500APC UPS APC-UPS

650John Aheto Intercom Handset Panasonic

2

Faith Fenu Dell Desktop System Unit Dell OptiPlex 380

B9Q2Q4J

Dell Monitor DellIntercom Handset Panasonic

Wise Tettevi

Dell Desktop System Unit Dell OptiPlex 380

B9Q2Q4J

Dell Monitor DellAPC UPS APC-UPS

750

Pius Doe Dell Desktop System Unit Dell OptiPlex 380

GBQ2Q4J

Dell Monitor DellAPC UPS APC-UPS

650

Bright Tisinigo


3CDVI5J

HP Moniter HP L1906APC UPS APC-UPS

650Intercom Handset Panasonic

3

cashier Elizabeth Sowada

Dell Desktop System Unit Dell Optiplex 380 DRQDZ1SDell Monitor DellAPC UPS APC-UPS

750Counter Money

CounterEsayCount KJ4H06094845

CCC Desk Dell Desktop System Unit

Dell OptiPlex 380

BFQ2Q4J

Dell Monitor Dell-19Cheque Scanner

Scanner PANNI PANN1 Vision X

APC UPS APC-UPS 750

Micro Finance

Dell Desktop System Unit

Dell OptiPlex 380

17M3Q4J

Dell Monitor DellMercury UPS Mercury-

UPS

4

Audit Toshiba Laptop Toshiba Satellite C660

PSC00Q-07D03JF3

6C049914K

Cashier Mawule Ablana

Dell Desktop System Unit

Dell OptiPlex 380

HP Monitor Monitor HP L1710EsayCount Counter EsayCount

Gladys Koffie

HP Desktop System Unit

HP Compaq dx2300

HUB72706LO

Dell Monitor Dell-19Malik Takyi Toshiba Laptop Toshiba

LaptopPSCBLU-COX003

YC225343Q

Total Number of Desktop Computer: 16Total Number of Laptops: 3

5

6.4 LISTS OF ASSETS UNDER THE ICT DEPARTMENT (SOGAKOPE AGENCY)

Department Name

System User

System Name

Component Name

Vendor Name Model Number

Serial Number

Millicent Kumagah

HP Desktop System Unit HP-17 Compaq dx2300

HUB7260812

Dell Monitor DellAPC UPS APC UPS-750

Naomi Out-addo


F5M3Q4J4

Dell Monitor Dell-19APC UPS APC UPS-750

Sitor HP Printer HP LaserJet P1606dn

VNC3B02160


3DQ2Q4J

Dell Monitor Dell -19Intercom Handset PanasonicAPC UPS APC UPS-650Intercom Handset HuaweiCanon Printer Image runner

6

2318

Dina Dordo Dell Desktop System Unit OptiPlex 380 9CQ24JDell Monitor Dell -19ACP UPS ACP ACP-UPS

750Easy Count Counter Money

CounterK14H06094856

Intercom Handset AcatelHopson Deku

HP Desktop System Unit HP Compaq dx2300 MXL9341LV5

HP Monitor HP L1710Mercury UPS Mercury -UPS

Amanda Zewu

HP Desktop System Unit HP Compaq Dx2300 HUB7260BIN

HP Monitor HP L1710APC UPS ACP-UPS 750HP Printer HP LaserJet P1005Easy-Count Counter Counting

Machine

Jeffery Aguzeh


9DDV15J

Dell Monitor Dell -19ACP UPS ACP-UPS 750APC UPS ACP-UPS 650 Faulty

Wilfred Wetsi

HP Desktop System Unit HP Compaq Dx2400 MXL93611H0

HP Monitor HP-19Intercom Handset PanasonicMercury UPS Mercury-UPS

Christian Kpetigo

Toshiba Laptop Satellite-C855-S5356

PSCBLU-00X003

YC224781Q

Intercom Handset PanasonicIntercom Handset Panasonic

Manager Michael Agbetepey

Dell Desktop System Unit OptiPlex 380 2DDV15J

Dell Monitor Dell-19

7

HP Laptop HP 5CB406165CCanon Scanner Canon LIDE100Intercom Handset Panasonic

Server Room

Dell System Unit PowerEdge T110 98408420

Maxma UPS Maxma-700 1HAF14031944317156

8

Disaster Recovery Plan

Documents

role responsibilities

disaster management

contact information

disaster identification

disastera disaster

disaster recovery lead

team members

network team