drp-124724695352-phpapp01

Disaster Recovery Plan forInformation Technology

Scope of This Plan

Enables the department to restore companys core information systems in the event of a disaster.

Identifies areas of substantial risk and exposure to disaster.

Practices & ProceduresThe fundamental business practice followed by the IT department is essential to the recovery of department operations. These key activities include:

Data backup & restorationServer & systems administrationSystem shutdown and startupIdentification of critical Systems

Data Backup & Restoration

Full backups are performed each weekend with incremental backups occurring each weeknight. Backup tapes for each week are collected and stored in the Server Room in a fire-proof safe. Each week the collection is taken offsite. Long term archives are removed from the rotation scheme with monthly backups retained for one year and annual backups retained for three years. Key servers across all platforms are included in the backup schedule. Archival copies of operating system and application software, detail network documentation and a copy of this plan are also stored offsite.

Server & System Administration

Current practice for managing servers and desktop systems across company include:

Ensuring high availability of serversUser support and desktop system supportServer maintenance is scheduled outside of normal business hours

System Shutdown & Startup

Instructions for shutdown and startup of critical servers will be located in the Server Room and attached to this plan. These procedures cover the equipment in the Server Room as well as network components for the WAN/LAN. A copy of these procedures is also stored offsite.

Critical Systems

ERP SystemWindows Server Domain ControllersStorage and Application ServersDHCP/WINS/DNS Servers and Print ServicesNetwork Communication components (i.e. firewalls, routers, wireless access point, etc)Voice Communications (PBX)

Recovery Operations

Re-establishing operations after a disaster requires the following:A process to follow as a guide for recoveryIdentification of the most critical services provided by the departmentPriorities for re-establishing those servicesSystem documentation/configuration informationPreservation of system and data backup tapes

Additional preparatory actions include:Contact equipment replacement provider to initiate declaration of disaster and delivery of hardwareNotify hardware maintenance providers of disaster condition and disposition of affected equipmentsNotify software providers of disaster condition and imminent need of new software keys, as appropriate, upon identification of serial numbers of replacement equipmentRetrieve most recent backup tapes and transport them the host-site location

Recovery Process

Initial Reaction phaseThe discoverer of a disaster will notify the related parties. Each party will notify others as appropriate.

Initial organization and preparation for the recovery:Notify and assemble the recovery staffReview recovery planOrganize for damage assessmentEstablish communications systems for the staffAssign duties and responsibilities to the staff

Perform a preliminary damage assessment:Conduct a site survey of the affected areaInventory any salvageable or usable equipmentReview the overall damageCommunicate status to executive staff

Recovery Process

Recovery phaseSalvage operations:Recover all salvageable hardwareService or refurbish equipment as necessaryRe-establish services in their order of priority

Reconstitution PhaseRestore IT System processing capabilities to normal operations. Depending upon the amount of damage that has occurred, the recovery process can be done locally or if the situation warrants it, the restoration can be done at other non-affected facility.

Appendix:

Primary and Secondary Facility Contact InformationSystem Shutdown & Startup ProceduresCommand Center Operations