Disaster Recovery — Policy and Procedure Outline

Only available on StudyMode
  • Download(s) : 114
  • Published : July 24, 2012
Open Document
Text Preview
INFORMATION TECHNOLOGY DISASTER RECOVERY AND DATA BACKUP POLICY

Table of contents

1.1Purpose- 6 -
1.2Mission and Objectives- 7 -
1.3Scope- 7 -
1.4Key Plan Assumptions- 7 -
1.5Disaster Definition- 8 -
1.6Business Impact Analysis- 8 -
1.6.1Objectives- 8 -
1.6.2Applications- 8 -
1.6.3Application profiles and other Information Assets- 9 -
1.7Analysis of Policies and Procedures- 10 -
1.8.1Prioritized Risks- 13 -
1.8.2Summary- 14 -
1.8.2.1Risks Reference to Critical Business Applications- 14 -
2BACKUP STRATEGY- 15 -
2.1Introduction- 15 -
2.3Backup Files- 15 -
2.3.1System Files- 15 -
2.3.2Client (Toll gate) Machine- 16 -
2.3.3Databases- 17 -
2.3.6Application Files- 18 -
2.4Storage- 18 -
2.5Storage Media- 18 -
2.5.1Media capacity and device performance- 18 -
2.5.2Media Labeling- 19 -
2.5.3Media Rotation- 19 -
2.6Backup Verification- 20 -
2.7Archiving- 20 -
2.8Road Fund’s Servers Backup Strategy Summary- 21 -
3RECOVERY STRATEGY- 22 -
3.1Introduction- 22 -
3.2Escalation Plans- 23 -
3.2.1Notification- 23 -
3.2.2Disaster Communication and Declaration- 23 -
3.3Disaster Categories- 24 -
3.4Damage Assessment- 24 -
3.5Recovery Activation Plan- 25 -
3.5.1Plan Activation Details- 25 -
3.5.2Recovery Site Activation- 26 -
3.6Stabilization- 27 -
3.7End of Disaster Declaration- 27 -
3.7.1Post-disaster review- 27 -
3.8Recovery Preparedness- 28 -
4DISASTER RECOVERY TEAM ORGANISATION- 29 -
4.1Disaster Recovery Team- 29 -
4.2Teams roles and responsibilities.- 30 -
4.2.1Steering Committee- 30 -
4.2.3Business Continuity Management Team- 31 -
5PLAN ADMINISTRATION- 32 -
5.1Distribution of Disaster Recovery Plan- 32 -
5.2Maintenance of Disaster Recovery Plan- 32 -
5.3Training of Disaster Recovery Team- 32 -
5.4Testing of Disaster Recovery Plan- 32 -
5.4.3Initial Test- 33 -
5.4.4Quarterly surprise tests- 34 -
5.4.5Post Test Review- 34 -
6.Recommendations.- 35 -
6.1.1.Establishment of an internal Information Technology (IT) position.- 35 -
6.1.2.Hardware Requirements.- 35 -
6.1.3.Development of Processes, Procedures, Policies and standards for use and handling Information Technology equipment.- 36 -
APPENDIX 1: DRT MEMBERS & CONTACT DETAILS- 37 -
APPENDIX 2: PRELIMINARY DAMAGE ASSESSMENT FORM- 38 -
APPENDIX 3: DETAILED DAMAGE ASSESSMENT FOR- 39 -
APPENDIX 4: ENVIRONMENT DAMAGE ASSESSMENT FORM- 40 -
APPENDIX 5: HARDWARE DAMAGE ASSESSMENT FORM41
APPENDIX 6: NETWORK DAMAGE ASSESSMENT FORM42
APPENDIX 7: DISASTER COMMUNICATION CHECKLIST43
APPENDIX 8: DISASTER RECOVERY EVENT LOG44
APPENDIX 9: DRP CHANGE HISTORY FORM45

1
BACKGROUND

Road Fund initially acquired some software and hardware infrastructure for handling of toll gate services at several toll points across the country. The software infrastructure identified at border posts. Border post are summarized in the table below:

Backend Infrastructure

System| Acquired From| Backend| Function|
I-Park System| Aludi Technologies| Microsoft SQL Server 2000| used for cash toll payments| Softcon System| Aludi Technologies| Microsoft Access Database| used for card (prepaid) toll payments| Eagle DVR| Aludi Technologies| DVR Video files (multimedia)| used for premises surveillance| Table 1: Road Fund Systems’ Summary

Figure1: Eagle DVR Layout

Figure 2: I-Park System Layout

Figure 3: Softwin system layout

While this infrastructure and applications meet most of the required business-fit, it has been identified that there is a high risk of data loss associated with the degree of preparedness of the Fund to recover and resume business operations in the event of natural and man-made disasters. The Fund does not have standard and documented procedures...
tracking img