Disaster Plan Key to Success for CIOs and IT Managers
ISO 27000, SOX, PCI-DSS & HIPAA Compliant
The Disaster Plan is the standard that meets all compliance objectives.
Janco's DRP Template can be used for any size of enterprise. The Disaster Recovery template and supporting material have been updated to be Sarbanes-Oxley and HIPAA compliant. The template comes as both a Word document and a static fully indexed PDF document and includes:
Disaster Recovery Business Continuity Standard Edition
Disaster Recovery Business Continuity Template (WORD)
Disaster Recovery Business Continuity Audit Program - Compliant with ISO 27031 and ISO 22301
Disaster Recovery Manager Job Description
Manager Disaster Recovery & Business Continuity Job Description
Application Inventory and Business Impact Analysis Questionnaire
Incident Communication Plan and Policy with BEST PRACTICES for
News Conferences
Media Relations
Social Network Checklist
Included with the template are Electronic Forms which have been designed to lower the cost of maintenance of the plan. Electonic Forms that can be emailed, completed via a computer or tablet, and stored electronically including:
LAN Inventory
Location Contact Numbers
Off-Site Inventory
Personnel Locations
Plan Distribution
Remote Location Contact Information
Team Call List
Vendor Contact Information
Disaster Recovery Business Continuity Premium Edition
Disaster Recovery Business Continuity Template (WORD)
15 Full Job Descriptions (WORD)
Chief Information Officer
Chief Security Officer
Chief Compliance Officer
VP Strategy and Architecture
Director Disaster Recovery and Business Continuity
Director e-Commerce
Director Media Communications
Manager Disaster Recovery
Manager Disaster Recovery and Business Continuity
Disaster Recovery Coordinator
Disaster Recovery - Special Projects Supervisor
Manager Database
Capacity Planning Supervisor
Manager Media Library Suppor
Manager Site Management
Pandemic Coordinator
Disaster Recovery Business Continuity Gold Edition
Disaster Recovery Business Continuity Template (WORD)
243 IT Job Descriptions (WORD) including all of the job descriptions contained in the Premium edition
Disaster Reovery Business Continuity & Security Manual Templates Standard Edition Includes
Disaster Recovery Business Continuity Template in MS WORD format
Disaster Recovery Business Continuity Audit Program
Security Manual Template in MS WORD format
Business and IT Impact Questiononaire - 21 pages
Threat and Vulnerability Assessment Form
Disaster Recovery Business Continuity & Security Manual Templates Premium
Disaster Recovery Business Continuity Template (WORD)
Security Manual Template (Word)
25 Full Job Descriptions
Chief Information Officer (CIO); Chief Compliance Officer (CCO); Chief Security Officer (CSO);VP Strategy and Architecture; Director e-Commerce; Database Administrator; Data Security Administrator; Manager Data Security; Manager Database; Manager Disaster Recovery; Manager Disaster Recovery and Business Continuity; Pandemic Coordinator; Manager Facilities and Equipment; Manager Media Library Support; Manager Network and Computing Services; Manager Network Services; Manager Site Management; Manager Training and Documentation; Manager Voice and Data Communication; Manager Wireless Systems;Capacity Planning Supervisor; Disaster Recovery Coordinator; Disaster Recovery - Special Projects Supervisor; Network Security Analyst; System Administrator - Unix; System Administrator - Windows
Disaster Recovery Business Continuity & Security Manual Templates Gold Edition
Disaster Recovery Business Continuity Template (WORD)
Disaster Recovery Business Continuity Audit Program - Compliant with ISO 27031 and ISO 22301
Disaster Recovery Manager Job Description
Manager Disaster Recovery & Business Continuity Job Description
Application Inventory and Business Impact Analysis Questionnaire
Incident Communication Plan and Policy with BEST PRACTICES for
News Conferences
Media Relations
Social Network Checklist
Included with the template are Electronic Forms which have been designed to lower the cost of maintenance of the plan. Electonic Forms that can be emailed, completed via a computer or tablet, and stored electronically including:
LAN Inventory
Location Contact Numbers
Off-Site Inventory
Personnel Locations
Plan Distribution
Remote Location Contact Information
Team Call List
Vendor Contact Information
Security Manual Template (Word)
HIPAA Audit Program
ISO 2700 Security Audit
Business and IT Impact Questionnaire
Threat and Vulnerability Assessment Tool
Sarbanes-Oxley Section 404 Checklist
Electronic forms that can be Emailed, completed via a computer or tablet, and stored electronically including:
Blog Policy Compliance
Company Asset Employee Control Log
Email - Employee Acknowledgment
Employee Termination Checklist
Internet Access Request
Internet Use Approval
Internet & Electronic Communication - Employee Acknowledgment
Mobile Device Access and Use Agreement
Employee Security Acknowledgement Release
Preliminary Security Audit Checklist
Security Access Application
Security Audit Report
Security Violation Reporting
Sensitive Information Policy Compliance Agreement
243 Full Job Descriptions which includes all of the job descriptions in the premium edition
More on Disaster Plans
Can you use the cloud for Disaster Recovery and Business Continuity?
February 2nd, 2012
In December
2010 Google launched Message Continuity, a new cloud-based disaster recovery
and business continuity service for Microsoft Exchange. A year later,
Google has announced the end of that service, leaving many organizations with
the task of finding an alternative Microsoft Exchange business continuity
service.
While the vendor said that existing contracts will continue to be serviced
until their renewal date, for some early adopters of this service will only have
a few weeks, or even days, to find an alternative solution.
This raises a warning flag about the wisdom of relying on the public cloud
companies for any services which may be critical to your day-to-day activities;
or for business continuity.
The cloud brings many new solutions for disaster recovery and business
continuity: but buyer beware has never been more crucial. Service level
agreements only apply if your supplier is in business; and there is certainly no
requirement for suppliers to provide any support or service once a contract
expires.
After this termination of service can you trust Google or any other vendor to
host a mission-critical service?
Whether your business is a one-man operation or it employs a thousand people,
the starting point is the same: identify the processes critical to your success.
To do this, you should first define what critical means in your business. Rank
each process according to that definition, and then ask how long can your
business survive without it, who performs it, and what IT resources support it.
Questions you can ask:
Can you simply not survive without this process? This should be your
primary priority. Your business continuity plan must protect all primary
priorities when a disaster strikes.
Can you survive only a day or two without it? This should be a secondary
priority. Your business continuity plan should address all secondary
priorities after primary priorities are handled.
Can you survive a week or more without it? Add it to your list of low
priorities.
BS 25999 defines the maximum tolerable period of disruption
(MTPD) as :the duration after which an organization's viability will be
irreparably damaged if delivery of a particular product or service cannot be
resumed". It advises companies to " assess over time the impacts if the
activity is disrupted" and " establish the MTPD of each activity". It instructs
us to identify the latest time by which an activity must be resumed, establish
the minimum level to which resumption must be achieved, and set the time within
which normal activity levels must be restored. It says companies should
" identify any inter-dependent activities, assets, supporting infrastructure or
resources that also have to be maintained"
Disaster Preparedness equals risk, resilience and effective disaster recovery planning
December 14th, 2011
Most people who are involved in emergency management are aware of the four
primary phases of emergency management: prevention/mitigation, preparedness,
response and recovery.
Recovery includes short-term measures taken to restore essential functions
and systems, as well as longer-term activities intended to facilitate a return
to pre-emergency conditions, or ideally to improve conditions through mitigation
measures.
Importance of data recovery for mid-sized companies
November 5th, 2011
Identifying the right tools for data recovery in the disaster
recovery and business continuity processes is extremely important to the success
and continuity of middle‐sized organizations. These tools need to be integrated
without requiring an expensive and disruptive overhaul of existing IT
infrastructure, and without adding to or demanding more of IT staff.
One key to this is to build on existing data storage and protection
equipment. Tape is the best option when expanding on existing processes, because
tape is a medium that is affordable.