Disaster Recovery (DR)
Continuity, Resilience & Recovery
A disaster can be anything that puts an organization's operations at risk, from a cyber attack to equipment failures to natural disasters. The goal with DR is for a business to continue operating as close to normal as possible. The disaster recovery process includes planning and testing, and may involve a separate physical site for restoring operations.
Businesses use information technology to quickly and effectively process information. Employees use electronic mail and Voice Over Internet Protocol (VOIP) telephone systems to communicate. Electronic data interchange (EDI) is used to transmit data including orders and payments from one company to another. Servers process information and store large amounts of data. Desktop computers, laptops and wireless devices are used by employees to create, process, manage and communicate information. What do you when your information technology stops working?
Resources for Information Technology Disaster Recovery Planning
- Computer Security Resource Center
- Contingency Planning Guide for Federal Information Systems
- Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities
- Building An Information Technology Security Awareness and Training Program
- IT Standards, Guidelines, and Tools and Techniques for Audit and Assurance and Control Professionals
Components Needed
- Information Technology Disaster Recovery Planning policy statement, plan overview and main goals of the plan.
- Key personnel and DR team contact information.
- Description of emergency response actions immediately following an incident.
- A diagram of the entire network and recovery site.
- Directions for how to reach the recovery site.
- A list of software and systems that will be used in the recovery.
- Sample templates for a variety of technology recoveries, including technical documentation from vendors.
- Tips for dealing with the media.
- Summary of insurance coverage.
- Proposed actions for dealing with financial and legal issues.
- Ready-to-use forms to help complete the plan.
