IT Disaster Preparedness
IT Disaster Preparedness. The Academic Perspective Joy Summers-Ables, University of Oklahoma Health Sciences Center. OUHSC Library IT Disaster Plan. Where in the world is Waldo?. The Broader Perspective. Institutional Identity Where does the library fit on campus
IT Disaster Preparedness
E N D
Presentation Transcript
IT Disaster Preparedness The Academic Perspective Joy Summers-Ables, University of Oklahoma Health Sciences Center
OUHSC Library IT Disaster Plan Where in the world is Waldo?
The Broader Perspective Institutional Identity • Where does the library fit on campus • Where does it fit in terms of IT • What relationships have been established Familiar Terms • Disaster planning • Disaster recovery
IT Disaster Planning • Before the Disaster • Disaster Recovery Coordinator • Maintenance/Approval of disaster plan • Understand roles and responsibilities • Train employees in emergency preparedness • Test disaster recovery plan • Insurance • Funding
Observations Back up your contingency plan • Disaster Recovery Plan • Key personnel and contact information • Inventory of • Critical Systems – specific details • Hardware, software • Non-critical systems
Preparing a Disaster Plan • Baltimore Academic Libraries Consortium – Disaster Preparedness Planhttp://matrix.msu.edu/~disaster/balcplan.php#Resources • Books • Web sites • Local Resources
Preparing a Disaster Plan • Emergency Response and Salvage Wheelshttp://www.heritagepreservation.org/catalog/wheel1.htm • Federal Emergency Management Agency http://www.fema.gov/ehp/ers_wl2.shtm • Northeast Document Conservation Center http://www.nedcc.org/welcome/disaster.htm
The Broader Perspective Beyond the Disaster • What’s at risk • Continue to offer services • Business impact New Terms • Business Impact Analysis • Risk assessment • Business Continuity
Business Impact Analysis • What is the exposure to loss from various risks that can be identified? • What is the magnitude of physical and operational risk exposure? • How extensive are the risks relative to loss of productivity, revenue and reputation? • What can be done to mitigate the risk? • What are the costs of mitigating the risk? • What is the cost/benefit of the various mitigation measures that can be implemented?
Risk Assessment Natural Risks • Flooding (either natural, or due to roof leaks, broken, frozen, or clogged pipes, seepage) • Fire (fire, smoke, and water hose damage) • Snow/ice storm (broken windows, dampness) • Vermin/insects • Humidity (lack of environmental control (i.e. no air conditioning) in the space) • Mold
Risk Assessment Technical Risks • Power Failure • HVAC failure • Malfunction or failure of CPU • Server failure • Failure of system software • Telecommunications failure • Loss of physical access to resources • Electromagnetic interference
Risk Assessment Human Risks • Improper handling of sensitive data • Unauthorized access • Malicious damage or destruction of data • Theft • Civil disorder • Vandalism • Sabotage
Risk Assessment • Harvard University Library – Disaster Prevention and Recovery http://hul.harvard.edu/rmo/resources_02.shtml • Risk Assessment Instructions • Risk Assessment Worksheet
Business Continuity Planning • Step 1 – Project Initiation • Step 2 – Functional Requirements • Step 3 – Design and Development • Step 4 – Implementation • Step 5 – Testing and Exercising • Step 6 – Maintenance and Updating If a Disaster Occurs • Step 7 – Execution
Business Continuity • ISACA - Information Systems Audit and Control Association http://www.isaca.org/Content/ContentGroups/Journal1/20023/Business_Continuity_A_Business_Survival_Strategy.htm • IT governance serving a variety of professional IT-related positions • DRI – Institute for Continuity Management http://www.drii.org/DRII/ • Planning model
Best Resource - People • People with previous experience • Other knowledgeable individuals • IT personnel
Contact Information • Joy Summers-Ables University of Oklahoma Health Sciences Center Robert M Bird Health Sciences Library 405-271-2285, opt.5 joy-summers@oushc.edu
Webliography • Disaster Recovery Planfor TheAustralian National Herbarium http://www.anbg.gov.au/cpbr/disaster-plan/ • llinois State University Libraries Disaster Plan http://palimpsest.stanford.edu/bytopic/disasters/plans/isudis.html • Library of Congress – Emergency Preparedness and Response http://www.loc.gov/preserv/pubsemer.html
Webliography – p.2 • National Library of Australia – Collection Disaster Plan http://www.nla.gov.au/policy/disaster/ • New York University Library http://library.nyu.edu/preservation/disaster/toc.htm • Syracuse University Library Disaster Manual http://library.syr.edu/information/preservation/manual.htm