Business Continuity and Disaster Recovery Planning

1. Business Continuity and Disaster Recovery Planning CMPE296T Fall 2007 Final Project Professor Richard Sinn Team Members Li Yang Smita Uniyal

2. Agenda • Introduction • Examples of Threats • Objective Of DRP • Business Continuity Planning • Business Impact Analysis • Disaster Recovery Plan • Testing and Simulation • Globalization • Conclusion

3. Introduction • What is business continuity and disaster recovery? • An organizational effort to respond to potential threats that may render critical resources useless • Disaster recovery and business continuity planning are processes that help organizations prepare for disruptive events.

4. Examples of Threats • Technological • Computer crashes, network failure, malware infections, data theft • Human • Terrorism, theft, vandalism, political unrest • Natural • Fires, floods, earthquakes, storms, disease

5. Objective of DRP • Minimizes system downtime and recovery time. • Minimizes the risk of permanent loss of core assets or the entire organization. • Minimizes confusion during a disaster. • Minimizes decision-making during a high-stress time when emotions will be running high. • Provides a platform in which to simulate various disaster recovery scenarios.

6. Business Continuity Planning • Allocate available budget for essential organization functions. • Plan a failover mechanism. • Prepare a Disaster Recovery Plan • Prepare a Business Resumption Plan • Prepare a Business Recovery Plan • Prepare a Contingency Plan

7. Business Impact Analysis • Procedure to gather information on crucial systems and processes • Basic areas to cover • Contingency plan for absence of key personnel • Simulate emergency scenarios • Develop crisis communications with employees, customers, suppliers, outside world • For partnership with local police, firefighters, etc. • Continuously assess and improve performance

8. Disaster Recovery Plan • Addresses 3 key areas • Prevention: pre-disaster • Continuity: during a disaster • Recovery: post-disaster

9. Disaster Recovery Plan • Consists of • Clear concise procedures listed chronologically • Don’t assume people carrying out procedures are those who wrote them • Maintain up-to-date contact list • Specify time it takes to carry out procedures • Update DR plan on a regular basis

10. Testing and Simulation • No amount of pre-planning can realistically prepare for the actual disaster itself • Testing and simulation are useful methods to verify the effectiveness of DR plans

11. Globalization • A global workforce and supply chain forces corporations to monitor many sources of threats • Example • Floods in India • SARS epidemic in China • Solutions • Technology • Insurance

12. Conclusion • Disasters are always on the horizon; therefore every organization must have a plan to deal with it • Globalization makes DR planning more critical • Organizations must consider all aspects of business – especially personnel • Good DR and BC planning does make a difference!

13. References • [1] http://www.scotland.gov.uk/Resource/Img/94471/0023282.gif • [2] Chin, P. (2005). Introduction to Disaster Recovery Planning. Retrieved November 23, 2007, fromhttp://www.intranetjournal.com/articles/200503/ij_03_24_05a.html • [3] http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci801381,00.html • [4] Mitchell, R. L. (2007). Four Disaster Survival Tips from Northrop Grumman. Retrieved November 25, 2007, from http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9030438&intsrc=cs_li_latest • [5] Michael, G. (2006). Bombings, Floods, Plagues – Nothing slows India’s Outsourcing Boom. Retrieved November 26, 2007 from http://geekwhisperer.wordpress.com/2006/09/14/bombings-floods-plague-%E2%80%93-nothing-slows-india%E2%80%99s-outsourcing-boom/