Disaster Recovery Plan Template
Business Continuity
ISO 27000 (formerly ISO 17799), Sarbanes - Oxley,
PCI-DSS & HIPAA Compliant
The Standard for Disaster Recovery and Business Continuity
This
Disaster Recovery Plan (DRP) can be used as a Disaster Planning
template for any size of enterprise. The Disaster Recovery template and
supporting material have been updated to be Sarbanes-Oxley and HIPAA
compliant. The Disaster Planning Template comes as both a Word
document and
a static fully indexed PDF document and includes:
Disaster Recovery Plan and Business Continuity Template
Business and IT Impact Analysis Questionnaire
Work Plan
Disaster Recovery / Business Continuity Audit Program
Preparation for Disaster Recovery / Business Continuity in light of
SOX has two primary parts. The first is putting systems in place to
completely protect all financial and other data required to meet the
reporting regulations and to archive the data to meet future
requests for clarification of those reports. The second is to
clearly and expressly document all these procedures so that in the
event of a SOX audit, the auditors clearly see that the DRP
exists and will appropriately protect the data.
Compliance with the ISO 27000
Series Standards (formerly ISO 17799 now ISO 27001 & ISO 27002),
Sarbanes-Oxley, PCI-DSS, and HIPAA
Web Site Disaster Recovery Planning Form
Project Status Report Form
Personnel Location Report
Department Disaster Recovery
Activation
Workbook
Quick Reference Guide
Team Alert List (Form)
DRP Team Responsibilities
DRP Team Checklist
Critical Function(s) Definition
Normal Business Hour Response Procedures
After Hours Response Procedures
DRP Location(s) Definition
DRP Recovery Procedures
Notification Procedures
Notification Call List (Form)
Updated Business and IT Impact
Analysis Questionnaire
Vendor Disaster Recovery Questionnaire
Vendor Phone List Form Updated
Key Customer Notification Form
Critical Resources to be Retrieved Form
Business Continuity Off-Site Materials Form
Business Continuity Audit Program
The premium edition contains 14 full job descriptions. They are:
Chief Information Officer
Chief Security Officer
Chief Compliance Officer
VP Strategy and
Architecture
Director Disaster Recovery
and Business Continuity
Director e-Commerce
Manager Disaster Recovery
Manager Disaster Recovery
and Business Continuity
Disaster Recovery
Coordinator
Disaster Recovery -
Special Projects Supervisor
Manager Database
Capacity Planning
Supervisor
Manager Media Library
Support
Manager Site Management
The DRP template is over 200 pages and includes
everything needed to customize the Disaster Recovery Plan to fit your specific
requirement. The electronic document includes proven written text and
examples for the following major sections of a disaster recovery plan:
Plan
Introduction
Business Impact
Analysis - including a sample impact matrix
DRP Organization
Responsibilities pre and post disaster - drp checklist
Backup Strategy
for Data Centers, Departmental File Servers, Wireless Network
servers, Data at Outsourced Sites, Desktops (In office and "at
home"), Laptops and PDA's.
Recovery
Strategy
including approach, escalation plan process and decision points
Disaster
Recovery Procedures
in a check list format
Plan
Administration
Process
Technical
Appendix including definition of necessary phone numbers and
contact points
Job Description
for Disaster Recovery Manager (3 pages long) - entire disaster
recovery team job descriptions are available.
Work Plan
to modify and implement the template. Included is a
list of deliverables for each task. (Risk Assessment and Vulnerability
Assessment)
There is a extensive
section that show how a full test of the DRP can be conducted. It
includes
Disaster
Recovery Manager Responsibilities
Distribution
of the Disaster Recovery Plan
Maintenance
of the Business Impact Analysis
Training
of the Disaster Recovery Team
Testing
of the Disaster Recovery Plan
Evaluation
of the Disaster Recovery Plan Tests
Maintenance
of the Disaster Recovery Plan
Click on the link below to get the
DRP/BC sample pages
now and make it part of your disaster recovery toolkit.
Backup Matrix - Sample from Template
Testimonials
Testimonial -
Dave Baker - City of Hamilton -I have found
the DRP template invaluable!
Testimonial -
Bob Rifenbury -MCSE/CCNA Lauch
Testing Lab -The DRP Template saved me about 6 months of work!
Testimonial - Kelly Keeler -
Martin's Point Health Care -I have received and I began using the template
immediately. IT IS GREAT! Made this process a snap for me. Cut my
documentation time down from. weeks to hours! This document has made,
what began to be an overwhelming process turn into a snap!
Testimonial -
Juan Stamos - Mexico City
Corporation -We had a DRP in place, but
needed a more user friendly structure. The Disaster Recovery Template (Gold
edition) has that structure. It was very easy to quickly move our DRP into
Janco's DRP Template -- a real added value.
* Update service is for 12 months unless it is purchased within 30
days of the purchase of the Template. Janco reserves the right
to validate purchase of the customer was made for the template.
An
increasing number of professionals know that small-scale emergencies can be
contained if staff members are prepared to react quickly. Damage can be limited
even in the face of a large-scale disaster. For example, cultural institutions
in Charleston, South Carolina, formed a consortium that focused on disaster
preparedness several years before they were hit by a hurricane. Many of those
institutions sustained only minor damage because they were able to put their
early warning procedures into operation.
Disaster planning is complex; the written plan is
the result of a wide range of preliminary activities. The entire process is most
efficient if it is formally assigned to one person who acts as the disaster
planner for the institution and is perhaps assisted by a planning team or
committee. The enterprise's director may play this primary role or may delegate
the responsibility, but it is important to remember that the process must be
supported at the highest level of the organization if it is to be effective. The
planner should establish a timetable for the project and should define the scope
and goals of the plan, which will depend largely on the risks faced by the
enterprise.
Business continuity planning must account for all hazards
(both man-made and natural disasters). You should plan in advance to manage any
emergency situation. Assess the situation, use common sense and available
resources to take care of yourself, your co-workers and your business's
recovery.
Disasters can come in all shapes and sizes, from natural
disasters (floods, hurricanes, and earthquakes) to emergencies resulting from an
accident (burst water pipe), deferred maintenance (leaking roof), or negligence
(fire or mold). An effective response will be determined by how well prepared
you are to deal with a disaster.
Disaster planning is an
essential component of preserving your institutionÂ’s collections. With a written
disaster plan, libraries, archives, museums, historical societies, and other
collection-holding institutions can reduce the risk of disaster and minimize
losses. The Disaster Recovery Planning / Business Continuity
Template is perfect for small, medium-sized, and
large institutions that do not have in-house preservation staff.
The Disaster Recovery Planning / Business Continuity
Template is also valuable for large library systems or museum
campuses that need to develop separate but related plans for multiple buildings,
locations, or branches.
Disaster Planning for IT Driven by Business Units
-
Business units shape your disaster recovery and business continuity
procedures (see Disaster Recovery Plan Template Business Continuity -
http://www.e-janco.com/DisasterPlanning.htm). If the business operating units determine that
the company must be up within 48 hours of an incident, then you can plan based
on the amount of time it would take to implement the recovery continuity plan to
have the business back up in that timeframe.
The
recovery procedure should be written in a detailed plan or "script." Establish a
Recovery Team from among the IT and business unit staff and assign specific
recovery duties to each member. The manner in which your team conducts its
recovery probably will be no different than its regular production procedures:
the chain of command likely will not change and neither will the aspects of the
network for which each member is responsible. However the plan must take into
consideration that the plan will be executed by others.For example on 9-11 the CIO and his
management team were in London when the towers fell.The plan was activated and executed by a
low level operations manager.
Define how to deal with the loss of
various aspects of the network (databases, servers, bridges/routers,
communications links, etc.) and specify who arranges for repairs or
reconstruction and how the data recovery process occurs. The script will also
outline priorities for the recovery: What needs to be recovered first? What is
the communication procedure for the initial respondents? To complement the
script, create a checklist or test procedure to verify that everything is back
to normal once repairs and data recovery have taken place.
Communication Systems Impacted Most By Major Disasters
-
When a
major disaster strikes communication systems are effected greatly. A Number of
studies have shown that on September 11 2001, the telecommunications
infrastructure of the greater Manhattan area quickly became saturated within
minutes of the event. Further, although rescue work began the following day, a
suitable communications setup was not in place until two weeks. On a similar
note, some of the worst struck areas in the December 2004 Tsunami disaster on
the island country of Indonesia were literally unreachable via any means of
communication.
The time
immediately following a disaster, whether natural or Â’man-madeÂ’ is most crucial
for the rescue work that goes on and it is imperative that the multiple types of
emergency personnel present in the area have an efficient and reliable
communications infrastructure at their immediate disposal. While some
standardization effort have been made in this direction no standard architecture
has been agreed upon by the world community and the design of such a network
with the aforementioned desirable qualities remains an open issue needing
immediate attention.
Staff Training Key to Disaster Recovery Planning
-
One of the most significant Disaster Recovery
shortcoming lies in the fact that many companies may not have specialized
IT staff at each location to properly manage the storage infrastructure for that
site. Instead, the task is relegated to the staff member whoÂ’s deemed "the
techie" in the office, who is asked to perform this essential function in his or
her "spare time". As a result, that person may not have the necessary IT skill
set to adequately perform the job - and they probably also lack the time
and the inclination to perform the duties correctly and consistently, even when
time is not a factor.
