





Contact Us
DRP
Team
Information
| | Planning Phase Checklist
Details of each step our documented in the Unit Guide to Business
Continuity/Disaster Recovery Planning, the information below provides further
considerations for each step.
- Organize
the Project
- Conduct
Business Impact Analysis
- Conduct
Risk Assessment
Assign operational priorities per agreed-to definitions
- Develop
Recovery Strategy
Develop contingency identification procedures for mission-oriented
contingencies
 | Establish criteria for declaring contingency onset
 | Procedures to recognize degradation of system functions/results
 | Procedures for declaring contingency |
| |
Designate roles, responsibility, and authority of user organization
during disaster
 | Particularly identify where roles are different than normal operations
 | Establish lists of critical skills among personnel
 | Establish lists and procedures for emergency notification of personnel |
| |
- Review
Onsite and Offsite Backup and Recovery Procedures
Review or Establish support agreements as required
 | Take into account contingency planning being done for systems that
interface with your systems
 | Communications equipment (phone, radio)
 | Possibility to "team" with another organization with similar
function/capability
 | On-site support (additional personnel, vendor support, standby equipment)
| | | |
Identify ways to preserve and protect system data
 | Database printouts
 | Regularly scheduled System backups before date problems occur
- CAUTION: Backup System May Be
Similarly Affected if they are in the same facility.
 | Establish methods to detect and correct corrupt data
- - Manual review of system output
|
| |
- Select
Alternate Facility
Set up of Alternative Site
 | Communications
 | Equipment |
 | Personnel support
| |
- Develop
Recovery Plan
Identify disaster recovery procedures for Mission Critical
Processes
 | Establish criteria for returning to normal operations
 | Procedures to procure replacement equipment as necessary
 | Procedures to restore/restart systems as required |
 | Procedures to check system functions/results
 | Procedures to correct and restore corrupt/lost data |
| | |
Identify general emergency alternative procedures to perform during
severe disruption, set thresholds
 | Disable certain processes, functions, or sub-systems
 | Use of alternative "Office Automation" functions to perform mission
- - Word processors, spreadsheets, copy machines, fax machines, etc.
 | Perform the operation of the failed system/infrastructure item manually
 | Shift or call in personnel as needed to support the mission
 | Shift communications channels to alternates as needed
 | Transfer function/mission to different organization/system/contracting
|
| | | | |
During Disaster (Execution Phase)
 | Maintain manual logs, as required
 | Monitor for specific risk contingency triggers (see Risk Management
details, below)
 | Check system functions and judge results, use to determine next steps
(see Risk Management details, below)
 | Notify appropriate authorities of nature and scope of problem
 | Execute specific risk contingency plans as required
 | Modify and improve contingency plans as required; i.e., be clever and
flexible
 | Minimize threat to life and property
 | Minimize damage to equipment
 | Minimize damage to data |
| | | | | | | |
Post Disaster (Recovery Phase)
 | Execute post-contingency plans as required
 | Procure new equipment as required
 | Restore and restart systems as require |
 | Check system functions and results
 | Correct and restore corrupt and/or lost data
 | Notify appropriate authorities of resolution of problem |
| | | |
Result of this phase is a set consisting of:
 | Validated lists and procedures to execute before a severe
disruption occurs
 | Validated lists and procedures to execute during a severe
disruption
 | Validated lists and procedures to execute after a severe
disruption to get back to "normal" operating mode |
| |
- Test
the Plan
Establish and perform training program
 | Practice/test Disaster Recovery Plan to reduce risks during actual execution
 | Estimate costs to set up and implement plans
 | Identify training needs to carry out plans |
| |
- Maintain
the Plan
- Perform
Periodic Audit
The above information has been combined with
public information posted on the Mitre
Corporation's WWW site (terms of use below).
Unless otherwise indicated, all
information on this system is considered public information and may be
distributed or copied, provided that it includes attribution and this paragraph,
and that no fee is charged other than the actual cost of transmission or
reproduction or the standard connection-time charges on a BBS, on-line service,
or Internet connection. It may not be distributed for financial gain or included
in a commercial collection or compilation without prior permission from the
copyright owner(s).
|