Michigan State University
Disaster Recovery Planning


Precontingency
MSU Home Back ] Home ] Up ] Next ]

Case Histories
About
Awareness Seminar
Planning Guide
Table of Contents
Why Plan?
Other Resources

Contact Us

DRP Team Information

Planning Phase Checklist

Details of each step our documented in the Unit Guide to Business Continuity/Disaster Recovery Planning, the information below provides further considerations for each step.

  1. Organize the Project 
  2. Conduct Business Impact Analysis 

     

  3. Conduct Risk Assessment 

Assign operational priorities per agreed-to definitions

  1. Develop Recovery Strategy 

Develop contingency identification procedures for mission-oriented contingencies

Establish criteria for declaring contingency onset
Procedures to recognize degradation of system functions/results
Procedures for declaring contingency

Designate roles, responsibility, and authority of user organization during disaster

Particularly identify where roles are different than normal operations
Establish lists of critical skills among personnel
Establish lists and procedures for emergency notification of personnel
  1. Review Onsite and Offsite Backup and Recovery Procedures 

Review or Establish support agreements as required

Take into account contingency planning being done for systems that interface with your systems
Communications equipment (phone, radio)
Possibility to "team" with another organization with similar function/capability
On-site support (additional personnel, vendor support, standby equipment)

Identify ways to preserve and protect system data

Database printouts
Regularly scheduled System backups before date problems occur
CAUTION: Backup System May Be Similarly Affected if they are in the same facility.
Establish methods to detect and correct corrupt data
- Manual review of system output
  1. Select Alternate Facility 

Set up of Alternative Site

Communications
Equipment
Personnel support
  1. Develop Recovery Plan 

Identify disaster recovery procedures for Mission Critical Processes

Establish criteria for returning to normal operations
Procedures to procure replacement equipment as necessary
Procedures to restore/restart systems as required
Procedures to check system functions/results
Procedures to correct and restore corrupt/lost data

Identify general emergency alternative procedures to perform during severe disruption, set thresholds

Disable certain processes, functions, or sub-systems
Use of alternative "Office Automation" functions to perform mission
- Word processors, spreadsheets, copy machines, fax machines, etc.
Perform the operation of the failed system/infrastructure item manually
Shift or call in personnel as needed to support the mission
Shift communications channels to alternates as needed
Transfer function/mission to different organization/system/contracting

During Disaster (Execution Phase)

Maintain manual logs, as required
Monitor for specific risk contingency triggers (see Risk Management details, below)
Check system functions and judge results, use to determine next steps (see Risk Management details, below)
Notify appropriate authorities of nature and scope of problem
Execute specific risk contingency plans as required
Modify and improve contingency plans as required; i.e., be clever and flexible
Minimize threat to life and property
Minimize damage to equipment
Minimize damage to data

Post Disaster (Recovery Phase)

Execute post-contingency plans as required
Procure new equipment as required
Restore and restart systems as require
Check system functions and results
Correct and restore corrupt and/or lost data
Notify appropriate authorities of resolution of problem

Result of this phase is a set consisting of:

Validated lists and procedures to execute before a severe disruption occurs
Validated lists and procedures to execute during a severe disruption
Validated lists and procedures to execute after a severe disruption to get back to "normal" operating mode
  1. Test the Plan 

Establish and perform training program

Practice/test Disaster Recovery Plan to reduce risks during actual execution
Estimate costs to set up and implement plans
Identify training needs to carry out plans
  1. Maintain the Plan 
  2. Perform Periodic Audit

The above information has been combined with public information posted on the Mitre Corporation's WWW site (terms of use below).

Unless otherwise indicated, all information on this system is considered public information and may be distributed or copied, provided that it includes attribution and this paragraph, and that no fee is charged other than the actual cost of transmission or reproduction or the standard connection-time charges on a BBS, on-line service, or Internet connection. It may not be distributed for financial gain or included in a commercial collection or compilation without prior permission from the copyright owner(s).