Disaster Recovery

Objectives

At the end of the lesson, students should be able to Explain the seven tiers of disaster recovery solutions.

Explain the phases of disaster recovery planning Describe business continuity planning and threat analysis

Overview

Seven tiers of Disaster Recovery Solutions Phases of disaster recovery planning Business continuity planning Threat analysis Disaster Recovery Procedures

Overview of disaster recovery solutions.

Tier 0: No off-site data Tier 2: Data backup with a hot site Tier 3: Electronic vaulting Tier 4: Point-in-time copies Tier 5: Transaction integrity Tier 6: Zero or near-Zero data loss Tier 7: Highly automated, business integrated solution

Disaster Recovery Plan (DRP)

Phase I – Data Collection Phase II – Plan Development and Testing Phase III – Monitoring and Maintenance

Phase 1 – Data Collection

Project should be organized with timeline, resources, and expected output Business impact analysis should be conducted at regular intervals Risk assessment should be conducted regularly Onsite and Offsite Backup and Recovery procedures should be reviewed Alternate site location must be selected and ready for use urvivability and securability

Phase 2 – Plan Development and Testing

Development of Disaster Recovery Plan Testing the plan Project should be organized with timeline, resources, and expected output

Phase 3 – Monitoring and Maintenance

Maintenance of the Plan through updates and review Periodic inspection of DRP Documentation of changes

Phase 3 – Monitoring and Maintenance

Threat Analysis

Disease Earthquake Fire Flood Cyber attack Sabotage Hurricane Utility outage Terrorism

Disaster Recovery Procedures (DRP)

Objectives of disaster recovery planning include: • Providing a sense of security • Minimizing risk of delays • Guaranteeing the reliability of standby systems • Providing a standard for testing the plan.

• Minimizing decision-making during a disaster

Methodology

1. Obtain Top Management Commitment 2. Establish a planning committee 3. Perform a risk assessment 4. Establish priorities for processing and operations 5. Determine Recovery Strategies 6. Perform Data Collection 7. Organize and document a written plan 8. Develop testing criteria and procedures 9. Test the Plan 10. Approve the plan