Disaster Recovery Plan Template Business Continuity
DRP BCP Template
ISO 27000, SOX, PCI-DSS & HIPAA Compliant
The Standard for Disaster Recovery and Business Continuity - Over 3,000 Companies World Wide have chosen this DRP/BCP Template
This Disaster Recovery Plan (DRP) can be used as a Disaster Planning template for any size of enterprise. The Disaster Recovery template and supporting material have been updated to be Sarbanes-Oxley and HIPAA compliant. The Disaster Planning Template comes as both a Word document and a static fully indexed PDF document. The DRP/BCP Template includes:
- Disaster Recovery Plan and Business Continuity Template (WORD and PDF)
- Business and IT Impact Analysis Questionnaire
- Work Plan
- Disaster Recovery / Business Continuity Audit Program
- Pandemic Planning Checklist
Preparation for Disaster Recovery / Business Continuity in light of SOX has two primary parts. The first is putting systems in place to completely protect all financial and other data required to meet the reporting regulations and to archive the data to meet future requests for clarification of those reports. The second is to clearly and expressly document all these procedures so that in the event of a SOX audit, the auditors clearly see that the DRP exists and will appropriately protect the data.
New are (Version History):- Backup & Backup Retention Policy
- Disaster Recovery Audit Program
- Compliance with the ISO 27000 Series Standards (formerly ISO 17799 now ISO 27001 & ISO 27002), Sarbanes-Oxley, PCI-DSS, and HIPAA
- Web Site Disaster Recovery Planning Form
- Project Status Report Form
- Personnel Location Report
- Department Disaster Recovery Activation Workbook
- Quick Reference Guide
- Team Alert List (Form)
- DRP Team Responsibilities
- DRP Team Checklist
- Critical Function(s) Definition
- Normal Business Hour Response Procedures
- After Hours Response Procedures
- DRP Location(s) Definition
- DRP Recovery Procedures
- Notification Procedures
- Notification Call List (Form)
- Updated Business and IT Impact Analysis Questionnaire
- Vendor Disaster Recovery Questionnaire
- Vendor Phone List Form Updated
- Key Customer Notification Form
- Critical Resources to be Retrieved Form
- Business Continuity Off-Site Materials Form
- Business Continuity Audit Program
Table of Contents
1.0 Plan Introduction
- Mission and Objectives
- Disaster Recovery / Business Continuity Scope
- Authorization
- Responsibility
- Key Plan Assumptions
- Disaster Definition
- Metrics
- Disaster Recovery / Business Continuity and Security Basics
2.0 Business Impact Analysis
- Scope
- Objectives
- Critical Time Frame
- Application System Impact Statements
- Information Reporting
- Best Data Practices
- Summary
3.0 Backup Strategy
- Site Strategy
- Data Capture and Backups
- Backup and Backup Retention Policy
- Communication Strategy and Policy
- ENTERPRISE Data Center Systems
- Departmental File Servers
- Wireless Network File Servers
- Data at Outsourced Sites (including ISP’s)
- Branch Offices (Remote Offices & Retail Locations)
- Desktop Workstations (In Office)
- Desktop Workstations (Off site including at home users)
- Laptops
- PDA’s and Smartphones
4.0 Recovery Strategy
- Approach
- Escalation Plans
- Decision Points
5.0 Disaster Recovery Organization
- Recovery Team Organization Chart
- Disaster Recovery Team
- Recovery Team Responsibilities
6.0 Disaster Recovery Emergency Procedures
- General
- Recovery Management
- Damage Assessment and Salvage
- Physical Security
- Administration
- Hardware Installation
- Systems, Applications & Network Software
- Communications
- Operations
7.0 Plan Administration
- Disaster Recovery Manager
- Distribution of the Disaster Recovery Plan
- Maintenance of the Business Impact Analysis
- Training of the Disaster Recovery Team
- Testing of the Disaster Recovery Plan
- Evaluation of the Disaster Recovery Plan Tests
- Maintenance of the Disaster Recovery Plan
8.0 Appendix
- Plan Distribution
- ENTERPRISE Sales Offices
- Disaster Recovery Team Call List
- Vendor Phone/Address List
- Off-Site Inventory
- Personnel Location Form
- Hardware/Software Inventory
- People Interviewed
- Preventative Measures
- Sample Application Systems Impact Statement
- JOB Descriptions
- Disaster Recovery Manager
- Manager Disaster Recovery and Business
- Continuity
- Pandemic Coordinator
- Application Inventory and Business Impact Analysis Questionnaire
- Key Customer Notification List
- Resources Required for Business Continuity
- Critical Resources to Be Retrieved
- Business Continuity Off-Site Materials
- Work Plan
- Audit Disaster Recovery Plan Process
- Vendor Disaster Recovery Planning Questionnaire
- Departmental DRP and BCP Activation Workbook
- Web Site Disaster Recovery Planning Form
- General Distribution Information
- Business Pandemic Planning Checklist
Premium Edition Disaster Business Continuity Template
The premium edition contains 15 full job descriptions. They are:
- Chief Information Officer
- Chief Security Officer
- Chief Compliance Officer
- VP Strategy and Architecture
- Director Disaster Recovery and Business Continuity
- Director e-Commerce
- Manager Disaster Recovery
- Manager Disaster Recovery and Business Continuity
- Disaster Recovery Coordinator
- Disaster Recovery - Special Projects Supervisor
- Manager Database
- Capacity Planning Supervisor
- Manager Media Library Support
- Manager Site Management
- Pandemic Coordinator
DRP BCP Template General Description
The DRP template is over 200 pages and includes everything needed to customize the Disaster Recovery Plan to fit your specific requirement. The electronic document includes proven written text and examples for the following major sections of a disaster recovery plan:
- Plan Introduction
- Business Impact Analysis - including a sample impact matrix
- DRP Organization Responsibilities pre and post disaster - DRP / BCP checklist
- Backup Strategy for Data Centers, Departmental File Servers, Wireless Network servers, Data at Outsourced Sites, Desktops (In office and "at home"), Laptops and PDA's.
- Recovery Strategy including approach, escalation plan process and decision points.
- Disaster Recovery Procedures in a check list format
- Plan Administration Process
- Technical Appendix including definition of necessary phone numbers and contact points
- Job Descriptions
- Disaster Recovery Manager
- Manager Disaster Recovery and Business Continuity
- Pandemic Coordinator
- Work Plan to modify and implement the template. Included is a list of deliverables for each task. (Risk Assessment and Vulnerability Assessment)
- Disaster Recovery Manager Responsibilities
- Distribution of the Disaster Recovery Plan
- Maintenance of the Business Impact Analysis
- Training of the Disaster Recovery Team
- Testing of the Disaster Recovery Plan
- Evaluation of the Disaster Recovery Plan Tests
- Maintenance of the Disaster Recovery Plan
Click on the link below to get the DRP/BC sample pages now and make it part of your disaster recovery toolkit.
Backup Matrix - Sample from Template
Testimonials
Testimonial - Dave Baker - City of Hamilton -I have found the DRP template invaluable!
Testimonial - Bob Rifenbury -MCSE/CCNA Launch Testing Lab -The DRP Template saved me about 6 months of work!
Testimonial - Kelly Keeler - Martin's Point Health Care -I have received and I began using the template immediately. IT IS GREAT! Made this process a snap for me. Cut my documentation time down from. weeks to hours! This document has made, what began to be an overwhelming process turn into a snap!
Testimonial - Juan Stamos - Mexico City Corporation -We had a DRP in place, but needed a more user friendly structure. The Disaster Recovery Template (Gold edition) has that structure. It was very easy to quickly move our DRP into Janco's DRP Template -- a real added value.
This template is not for resale or re-distribution - Disaster Plan Template, Disaster Recovery Planning Template Disaster Recovery Template, Disaster Recovery
Disaster Recovery / Business Continuity - DRP / BCP News
Cost of email downtime is high
In today's economy, the importance of e-mail takes on new meaning. Recovery time and recovery point objectives (RTOs and RPOs) are no longer general rules. The Exchange administrator's ability to meet or exceed the proverbial lines in the sand, in terms of time to recover and the age of the data recovered, can mean the difference between gainful employment and prepping for a job interview. In fact, average yearly cost of Exchange downtime for a 500-person corporation, according to data derived from the Contingency Planning Association and Strategic Research, is over $1.5 million.
Disaster Recovery Planning Template Business Continuity Plan
Sarbanes - Oxley - ISO 27000 (27001 & 27002) - HIPAA - PCI- Compliant
Disaster Recovery Planning (DRP) template can be used by any size enterprise. The template and supporting material have been updated to be Sarbanes-Oxley compliant. The Disaster Recovery Planning Documentation comes as a Word document and includes:
- Disaster Recovery Plan Template
- Business and IT Impact Analysis Questionnaire
- Work Plan
- Disaster Recovery & Business Continuity Audit Program
Included in the template is Business Impact Questionnaire as
well as a full Job Description for the Disaster Recovery Manager. The
premium edition contains 11 full job descriptions.
Communication during a recovery process often is not well planned
Disaster recovery
and emergency team members status communication and news have distinct
audiences with different needs when a crisis occurs.
- Employees/General Populace: Need access to 'basic information' such as where to go, when to return to work, and how to locate general information about the crisis situation
- Disaster Recovery Team Members: Need to account for all employees/constituents safety and assess the state of business operations; need the ability to communicate in real time, disseminate information, track recovery efforts, assign tasks and provision supplies, power, etc.; need the ability to have real time status of the situation
- Executives/Leaders: Need to know that their employees and constituents are safe; need to know the status of their business and access a high level, real-time status of the recovery efforts; need to be able to communicate with customers, investors, and people external to their business about the crisis.
Effective crisis communication requires technology to provide a unified solution for communicating information to all involved constituents and should provide a single source of accurate and up-todate information that can be accessed.
- more infoMany Businesses Fail After a Disaster
Businesses'
reliance on IT systems and digital data has never been greater. The 2007 Best's
Underwriting Guide found that only 6% of companies that suffer catastrophic data
loss survive while 43% never reopen and 51% close within 2 years of the
disaster. Best's Underwriting Guide 2007 also found that 93% of the companies
that did not have their data backed up in the event of a disaster went out of
business. An analysis of SMBs' prioritization of disaster recovery, backup and
high availability for 2008 shows that businesses understand the risks to their
business and the value of protection. However, many organizations still think
that backup is a sufficient disaster recovery plan. However, mid-sized
enterprises are at the most risk to disaster and are more likely to rely
strictly on backup as a disaster recovery plan.
The needs and resources of mid-market
firms are unique. Midsized companies must work with limited finances
infrastructure and human resources. Robust disaster recovery used to be
affordable and manageable only by large enterprises. Mid-sized enterprises
relied more on backup than on a formal disaster recovery plan. As businesses'
reliance on IT has grown, backup has increasingly shown its weaknesses. However,
the introduction and maturation of several key technologies, such as
virtualization, have brought affordable and easily implementable Disaster
Recovery and Business Continuity to small and mid-sized companies. SMBs do
not always equate virtualization with Disaster Recovery and Business
Continuity because awareness of the many virtualization applications is
just starting to grow.
Continuous Data Protection can be used as a backup strategy for DRP amd BCP
Continuous Data Protection (CDP) is an increasingly popular disk-based backup strategy. It is replication with an Undo button. Every time a block of data changes on the system being backed up, it is transferred to the CDP system. However, unlike replication, CDP stores changes in a log, so you can undo those changes at a very granular level. In fact, you can recover the system to literally any point in time at which data was stored within the CDP system.
A near-CDP system works in similar fashion except that it has
discrete points in time to which it can recover. To put it another way, near-CDP
combines snapshots with replication. Typically, a snapshot is taken on the
system being backed up, whereupon that snapshot is replicated to another system
that holds the backup.
Why take the snapshot on the source before
replication? Because only at the source can you typically quiesce the
application writing to the storage so that the snapshot will be a meaningful
one.
Consolidation and Disaster Planning
Most organizations today are faced with conflicting goals and challenges. They have geographically distributed workforces, with headquarters, datacenters, branch offices, and mobile workers scattered widely. Everyone needs to access email, file shares, and mission critical applications, and the speed of access directly ties to employee productivity. So computing resources have been widely deployed in many locations to give the local workers the best possible service delivery. However, this approach is now seen as wasteful and expensive with extra hardware and software to buy and maintain for many locations, and often few local IT staff to support the systems. As budgets get tighter, organizations are looking for solutions to handle this burden. IT consolidation is the number one approach today, taking infrastructure out of remote offices and into the main data center as a way to cut costs and boost IT staff productivity. The trick is how to consolidate without hurting the performance for the end users.
While consolidation can certainly bring a number of benefits to
organizations, it will take more than just a Friday afternoon to
ensure that
your consolidation, disaster recovery, and business continuity projects are
truly successful. As far too many IT managers will tell you, a poorly planned
project will have your executives screaming, users threatening mutiny, and IT in
the hot seat to quickly undo all the effort that went into the project in the
first place.
- Lay out a change and risk management strategy
- Develop a plan for resiliency
- Test (and improve) branch office performance & local consolidation
- Architect a forward-looking infrastructure & support plan
- Plan a phased roll-out













