The principal objective of the disaster recovery program is to develop, test and document a well-structured and easily understood plan which will help the company recover as quickly and effectively as possible from an unforeseen disaster or emergency which interrupts information systems and business operations.
It is necessary for the DRP updating process to be properly structured and controlled. Whenever changes are made to the plan they are to be fully tested and appropriate amendments should be made to the training materials. This will involve the use of form Alize change control procedures under the control of an IT Director.
There are many potential disruptive threats which can occur at any time and affect the normal business process. We have considered a wide range of potential threats and the results of our deliberations are included in this section.
Each potential environmental disaster or emergency situation has been examined. The focus here is on the level of business disruption which could arise from each type of disaster.
When an incident occurs the Emergency Response Team (ERT) must be activated. The ERT will then decide the extent to which the DRP must be invoked.
All employees must be issued a Quick Reference card containing ERT contact details to be used in the event of a disaster.
The DR plan will rely principally on key members of management and staff who will provide the technical and management skills necessary to achieve a smooth technology and business recovery.
Suppliers of critical goods and services will continue to support recovery of business operations as the company returns to normal operating mode.
The Emergency Response Team (ERT) is responsible for activating the DRP for disasters identified in this plan, as well as in the event of any other occurrence that affects the company’s capability to perform normally. One of the tasks during the early stages of the emergency is to notify the Disaster Recovery Team (DRT) that an emergency has occurred.
The notification will request DRT members to assemble at the site of the problem and will involve sufficient information to have this request effectively communicated.
The Business Recovery Team (BRT) will consist of senior representatives from the main business departments. The BRT Leader will be a senior member of the company’s management team, and will be responsible for taking the overall charge of the process and ensuring that the company returns to normal working operations as early as possible.
The members of the management team will keep a hard copy of the names and contact numbers of each employee in their departments.
In addition, the management team members will have a hard copy of the company’s disaster recovery and business continuity plans on file in their homes in the event that the headquarters building is inaccessible, unusable, or destroyed.
Disaster recovery plan exercises are an essential part of the plan development process.In a DRP exercise, no one passes or fails; everyone who participates learns from exercises–what needs to be improved, and how the improvements can be implemented.
Plan exercising ensures that emergency teams are familiar with their assignments and, more importantly, are confident in their capabilities. Successful DR plans launch into action smoothly and effectively when they are needed. This will only happen if everyone with a role to play in the plan has rehearsed the role one or more times. The plan should also be validated by simulating the circumstances within which it has to work and seeing what happens.