disaster

Disaster
Recovery Plan
Prepared by

Park City, UT 84060

email - info@e-janco.com
Web site http://www.e-janco.com and http://www.it-toolkits.com
Version 3.0

recovery
2005 Copyright Janco Associates, Inc. ALL RIGHTS RESERVED

License Conditions:
This product is NOT FOR RESALE or REDISTRIBUTION in any physical or
electronic format. The purchaser of this template has acquired the rights to use it for
a SINGLE Disaster Recovery Plan unless the user has purchased a multi-use license.
Anyone who makes an unlicensed copy of or uses the template or any derivative of it
is in violation of United States and International copyright laws and subject to fines
that are treble damages as determined by the courts. A REWARD of up to 1/3 of
those fines will be paid to anyone reporting such a violation upon the successful
prosecution of such violators.
The purchaser agrees that derivative of this template will contain the following words
within the first five pages of that document. The words are:
Derived from the Disaster Recovery Plan Template of Janco Associates, Inc.
2001 - 2005 Copyright Janco Associates, Inc. ALL RIGHTS RESERVED
Easy use steps:
1. Read this License Conditions
2. Print the first two pages of this template
3. Delete the first two pages.
4. Save As your file name
5. Edit replace COMPANY with your enterprises name.
6. Edit replace company logo with your enterprises logo
7. Save As your filename.v001
8. As you modify the plan continue to save the DRP with a name that has an
updated version number.

DISASTER RECOVERY PLAN

FOR
Company logo here

2001 - 2005 copyright Janco Associates, Inc. ALL RIGHTS RESERVED

NOT FOR RESALE
Janco Associates, Inc. provides the licensed user of the Disaster Recovery Plan
document the right to use this document for INTERNAL USE ONLY for the enterprise
of this user only. If the licensed user is a consultant or consulting entity, using this
document for a third party (client or customer of the licensed user), a separate
license must be purchased for each client facility and or customer location.
All questions about this via email at information@e-janco.com or by phone at
435-940-9300.
The single user license is for one enterprise for one facility. If this template is used
for more than one facility than either an enterprise version or multiple copies of the
template should be purchased.
Any document that is created using this template must have 2001-2005
copyright Janco Associates, Inc within the new document. All of this original
material remains the property of Janco Associates, Inc. and the user is granted a
limited use license.

Prepared by:

11 Eagle Landing Court

Park City, UT 84060
informaton@e-janco.com
Version 3.0

Company logo here

Disaster Recovery Plan

Table of Contents1
1.0
1.1
1.2
1.3
1.4
1.5
1.6
2.0

Plan Introduction ...................................................................... 7

Mission and Objectives ......................................................... 8
DRP Scope........................................................................... 9
Authorization ......................................................................10
Responsibility......................................................................11
Key Plan Assumptions..........................................................12
Disaster Definition ...............................................................14

Business Impact Analysis ..........................................................15

Scope.................................................................................16
Objectives ..........................................................................17
Critical Time Frame .............................................................18
Application System Impact Statements..................................19
Essential
19
Delayed
19
Suspended 19
2.5
Information Reporting .........................................................21
2.6
Summary............................................................................22

2.1
2.2
2.3
2.4

3.0 Backup Strategy ...........................................................................24

3.1
COMPANY Data Center Systems ...........................................25
Back-up Files .............................................................. 25
Storage Rotation......................................................... 25
COMPANY Data Center ............................................. 25
Off Site Storage ....................................................... 25
3.2
Departmental File Servers ....................................................26
Back-up Files .............................................................. 26
Storage Rotation......................................................... 26
Department ............................................................. 26
COMPANY Data Center ............................................. 26
Off Site Storage ....................................................... 27

Major sections of this document were extracted from Client Server Management HandiGuide, PC Policies and
Procedures HandiGuide, Metric for the Internet and IT Management HandiGuide, and the IT Position Description
HandiGuide which are copyrighted by M. V. Janulaitis and published by Janco Associates, Inc. These copyrighted
materials remain the property of the copyright owners and the licensed user of this document is only granted a limited
use license of this material. For more information see www.e-janco.com

Version 3.0

CONFIDENTIAL

Page 2

Company logo here

3.3

3.4

3.5

3.6

3.7

3.8

Version 3.0

Disaster Recovery Plan

Wireless Network File Servers...............................................28

Back-up Files .............................................................. 28
Storage Rotation......................................................... 28
Wireless Network File Server Area.............................. 28
COMPANY Data Center ............................................. 28
Off Site Storage ....................................................... 29
Data at Outsourced Sites (including ISPs) .............................30
Back-up Files .............................................................. 30
Storage Rotation......................................................... 30
Outsourced Sites ...................................................... 30
COMPANY Data Center ............................................. 30
Off Site Storage ....................................................... 31
Desktop Workstations (In Office)..........................................32
Back-up Files .............................................................. 32
Storage Rotation......................................................... 32
Desktop Workstation location .................................... 32
COMPANY Data Center ............................................. 33
Off Site Storage ....................................................... 33
Desktop Workstations (Off site including at home users) ........34
Back-up Files .............................................................. 34
Storage Rotation......................................................... 34
Desktop Workstation location .................................... 34
COMPANY Data Center ............................................. 34
Off Site Storage ....................................................... 35
Laptops ..............................................................................36
Back-up Files .............................................................. 36
Storage Rotation......................................................... 36
Laptop location ........................................................ 36
COMPANY Data Center ............................................. 36
Off Site Storage ....................................................... 37
PDAs .................................................................................38
Back-up Files .............................................................. 38
Storage Rotation......................................................... 38
Laptop location ........................................................ 38
COMPANY Data Center ............................................. 38
Off Site Storage ....................................................... 39

CONFIDENTIAL

Page 3

Company logo here

4.0

5.0

Disaster Recovery Plan

Recovery Strategy ....................................................................40

4.1
Approach............................................................................41
4.2
Escalation Plans ..................................................................42
4.3
Decision Points....................................................................43
Plan 1 43
Plan 2 45
Plan 3 46
5.1
5.2
5.3

Version 3.0

Disaster Recovery Organization .................................................47

Recovery Team Organization Chart .......................................49
Disaster Recovery Team ......................................................51
Recovery Team Responsibilities ............................................52
5.3.1 Recovery Management...............................................52
Senior Recovery Manager Responsibilities ..................... 53
Pre-Disaster ............................................................. 53
Post-Disaster............................................................ 53
Recovery Manager Responsibilities ............................... 54
Pre-Disaster ............................................................. 54
Post-Disaster............................................................ 54
5.3.2 Damage Assessment and Salvage Team......................55
Damage Assessment and Salvage Team Responsibilities 55
Pre-Disaster ............................................................. 55
Post-Disaster............................................................ 55
5.3.3 Physical Security .......................................................57
Pre-Disaster ............................................................. 57
Post-Disaster............................................................ 57
5.3.4 Administration...........................................................58
Pre-Disaster ............................................................. 58
Post-Disaster............................................................ 58
5.3.5 Hardware Installation ................................................60
Pre-Disaster............................................................. 60
Post-Disaster............................................................ 60
5.3.6 Systems, Applications and Network Software ...............61
Pre-Disaster ............................................................. 61
Post-Disaster............................................................ 61
5.3.7 Communications........................................................62
Pre-Disaster ............................................................. 62
Post-Disaster............................................................ 62
5.3.8 Operations................................................................63
Pre-Disaster ............................................................. 63
Post-Disaster............................................................ 63

CONFIDENTIAL

Page 4

Company logo here

6.0

6.1
6.2
6.3
6.4
6.5
6.6
6.7
6.8
6.9

Disaster Recovery Plan

Disaster Recovery Emergency Procedures ..................................64

General ..............................................................................66
Recovery Management ........................................................68
Damage Assessment and Salvage.........................................71
Physical Security .................................................................75
Administration.....................................................................77
Hardware Installation ..........................................................79
Systems, Applications & Network Software ............................81
Communications..................................................................84
Operations..........................................................................86

7.0

Plan Administration ..................................................................88

7.1
Disaster Recovery Manager ..................................................89
7.2
Distribution of the Disaster Recovery Plan .............................90
7.3
Maintenance of the Business Impact Analysis ........................92
7.4
Training of the Disaster Recovery Team ................................93
7.5
Testing of the Disaster Recovery Plan ...................................94
7.6
Evaluation of the Disaster Recovery Plan Tests ......................97
7.7
Maintenance of the Disaster Recovery Plan............................98

8.0

Appendix ...............................................................................101
8.1
Plan Distribution................................................................103
8.2
COMPANY Sales Offices .....................................................104
8.3
Disaster Recovery Team Call List ........................................106
8.4
Vendor Phone/Address List ................................................108
8.5
Off-Site Inventory .............................................................109
8.6
Hardware/Software Inventory ............................................110
8.7
People Interviewed............................................................112
8.8
Preventative Measures.......................................................113
8.9
Sample Application Systems Impact Statement ....................114
8.10 JOB Description.................................................................115
Disaster Recovery Manager ................................................116
Position Purpose ........................................................116
Problems and Challenges............................................116
Essential Position Functions ........................................116
Principal Accountabilities ..........................................116
Authority ................................................................117
Contacts .................................................................117
Position Requirements .............................................117

Version 3.0

CONFIDENTIAL

Page 5

Company logo here

Disaster Recovery Plan

8.11 Application Inventory and Business Impact Analysis

Questionnaire .............................................................................118
Facility / Business Function / Application .................................................. 120
Sarbanes-Oxley Compliance..................................................................... 121
System of Intenal Controls ........................................................................ 122
User Environment...................................................................................... 123
Processing Information.............................................................................. 125
Historical Information................................................................................. 126
Operating Environment.............................................................................. 127
Criticality of Application ............................................................................. 129
Database / File Names .............................................................................. 131
Documentation .......................................................................................... 132
Security...................................................................................................... 132
Application Support and Maintenance....................................................... 132
Resource Usage........................................................................................ 133
Equipment Requirements by Department ................................................ 133
Backups..................................................................................................... 134

8.12

Work Plan.........................................................................135

Project Initiation ......................................................................................... 136

Project Scheduling..................................................................................... 137
Business Impact Analysis.......................................................................... 138
Backup and Recovery Strategy ................................................................. 139
Initial Implementation................................................................................. 140
Post Implementation.................................................................................. 141

Version 3.0

CONFIDENTIAL

Page 6

Company logo here

1.0

Disaster Recovery Plan

Plan Introduction
COMPANY recognizing their operational dependency on computer systems,
including the Local Area Network (LAN), Database Servers, Internet, Intranet
and e-Mail, and the potential loss of revenue and operational control that may
occur in the event of a disaster; authorized the preparation, implementation and
maintenance of a comprehensive disaster recover plan.
The intent of a Disaster Recovery Plan is to provide a written and tested plan
directing the computer system recovery process in the event of an interruption in
continuous service resulting from an unplanned and unexpected disaster.
The Disaster Recovery Plan preparation process includes several major steps as
follows:

Identify Systems and Applications currently in use

Analyze Business Impact of computer impact and determination of

critical recovery time frames

Determine Recovery Strategy

Document Recovery Team Organization

Document Recovery Team Responsibilities

Develop and Document Emergency Procedures

Document Training & Maintenance Procedures

These steps were conducted and this document represents the completed effort in
the preparation of the COMPANY Disaster Recovery Plan.

Derived from the Disaster Recovery Plan Template of Janco Associates.

2001 - 2003 Copyright Janco Associates, Inc. ALL RIGHTS RESERVED
www.e-janco.com

Version 3.0

CONFIDENTIAL

Page 7

Company logo here

1.5

Disaster Recovery Plan

Key Plan Assumptions

The following assumptions have been established as the basis for the
development of the Disaster Recovery Plan:

Version 3.0

The plan is designed to recover from the "worst case" destruction

of the COMPANY operating environment. The worst case
includes any non-data processing function that may be in close
proximity to the data center or workstations.

The worst-case destruction assumes the loss of the total facility,

supporting infrastructures (power grids, telephone switching
centers, microwave towers, and cell and wireless transmission sites
within a ten (10) mile radius of the facility), and key personnel on
the DRP team due to injury and or death. In that case the plan
should be documented to the extent that an employee (or contractor
if so authorized) can assume the key management role in the
execution of the DRP.

Although the plan is designed for worst case, inherent in the plan
strategy is the ability to recover up to the most minor interruption,
which is perhaps a more likely situation.

The plan is base upon a sufficient number of center staff not being
incapacitated to implement and affect recovery. Therefore, the
level of detail of the plan is written to a staff experienced in the
Companys computer services. Development, testing and
implementation of new technologies and applications are
suspended so that all resources are available to recover existing
critical production processing.

Off-site inventory and equipment acquired through vendors is

considered to be the only resource with which to recover computer
processing. Items at the original site are not expected to be
salvageable and used for recovery. This includes items stored in
any on-site security location.

An alternate site (backup computer facility) in which to establish

recovery of computer processing is necessary. Time frame
requirements to recover computer processing are significantly less
than estimated times to repair/reconstruct a data center on an
emergency basis.

CONFIDENTIAL

Page 12

Company logo here

2.1

Disaster Recovery Plan

Scope

The scope of the Business Impact Analysis is the COMPANY operating

departments supported by data center facilities located at ____________
______________________________. This network encompasses the
following information technology services:

General business applications, such as word-processing,

spreadsheet and database applications

e-Mail

File servers supporting all business operations

Gateway to the host applications and other sites

WEB / e-commerce processing

Wireless Networks

Non-COMPANY infrastructure including power grids, telephone

switching centers, microwave towers, and cell and wireless
transmission sites within a ten (10) mile radius of the facility

To determine the maximum time frame allowable, the following COMPANY

operating departments were interviewed (See Appendix - People Interviewed):
Information Technology
Sales
Marketing
Credit
Finance
Human Resources
Manufacturing
Distribution
Customer Service
Accounting
Investor Relations

Version 3.0

CONFIDENTIAL

Page 16

Company logo here

Disaster Recovery Plan

5.0 Disaster Recovery Organization

The effectiveness and operability of the Disaster Recovery Plan is dependent on
the knowledge and expertise of the personnel who develop and execute the plan.
It is essential to determine which talents are required and to assign personnel who
meet those requirements.
A recovery from a disaster is best conducted by teams of personnel that are
formed to perform specific functions (e.g., hardware acquisition, hardware
installation, operations). The number and types of teams are dictated by the size
and type of computer processing capabilities and facility the plan is being
developed to recover.
The organization of the staff to recover the system is designed for the worst case
situation. The worst case, requiring a move to the alternative site, must be
executed by a coordinated team to minimize the operational impacts to end-users,
senior management and COMPANY as a whole.
The Disaster Recovery Team Organization, therefore, is set up to accomplish:

Version 3.0

Expeditious and efficient recovery of computer processing;

Intermediate and minor impact/expenditure decisions within the

Information Technology personnel during the recovery process;

Major impact/expenditure decisions at the management level; and

Streamline reporting of recovery progress from recovery teams

upward to senior management and end-users.

CONFIDENTIAL

Page 47

Disaster Recovery Plan

Company logo here

5.3

Recovery Team Responsibilities

5.3.1 Recovery Management

The Recovery Management is responsible for managing the
recovery effort as a whole, ensuring restoration occurs within
planned Critical Time Frames and assists in resolving problems
requiring management action. The Recovery Management
Team consists of the Senior Recovery Manager and the
Recovery Manager. The team is activated at the call of the
Senior Recovery Manager when a disaster occurs. All other
recovery teams report directly to the Recovery Management
Team. Specifically, the Recovery Management Team is
charged with:

Version 3.0

CONFIDENTIAL

Page 52

Disaster Recovery Plan

Company logo here

5.3.5 Hardware Installation

The Hardware Team is responsible for site preparation, physical planning,
and installation of data processing equipment to meet the required
processing capacity of COMPANY in the event of a disaster. This
includes responsibility for ordering and installing hardware for both the
alternative site and the permanent site.
Pre-Disaster

Understands the role and responsibilities within the

Disaster Recovery Plan

Work closely with recovery management team to reduce

possibility for disaster in data center (See Preventative
Measures in Appendix)

Trains employees in emergency preparedness

Participates in Disaster Recovery Plan tests as required

Maintains current system and LAN configuration in off-site

storage

Post-Disaster

Version 3.0

Verifies with the alternative site pending occupancy

requirements

Inspects the alternative site for physical space requirements

Interfaces with software, communications and operations

team members on space configuration of alternative site

Coordinates transportation of salvageable equipment to

alternative site

Notifies administration team of equipment required

Ensures the installation of ___ temporary terminals

connected to alternative site mainframe

Prepares plans for hardware installation at the alternative

site

Installs hardware at the alternative site

Plans and coordinates the transportation and installation of

hardware at the permanent site, when available

CONFIDENTIAL

Page 60

Company logo here

ENTERPRISE
Business and IT Impact Questionnaire
The purpose of this questionnaire is to determine the criticality of the applications used at ENTERPRISE. The information
provided will be used to develop a Application Inventory that can be used in the Disaster Recovery Plan that minimizes
the impact of the loss of this application in the event of a disaster. (PLEASE USE ADDITIONAL BLANK PAPER OR
ATTACHMENTS WHEREVER NECESSARY)

Facility / Business Function / Application

Name:
Provide a brief description/purpose mission:

What are the main functions?

Was this developed in-house or purchased from a vendor? If purchased from a vendor, do you hold the plans,
source code etc.:

If the application is a purchased package, are there extensive modifications to this application (briefly describe
modifications):

What programming language was used to create the application?

How old is this application (maturity):

Who is the owner of this application (i.e. Joe Smith of Accounting):

Version 3.0

CONFIDENTIAL

Page 120

Company logo here

8.12

Work Plan

Below are a set of tasks that can be used to create a work plan to implement the Disaster Recovery Planning
process as defined in this template21. Each of the tasks should have an individual or steering committee
member assigned to the task along with start date, end date and deliverable defined. For example, a deliverable
for a status meeting could be defined as approved minutes of the meeting and the deliverable for a function
assessment could be a completed Application Inventory and Business Impact Questionnaire for the function
(see page 118).

21

There is an Excel spreadsheet that comes with this document that can be use for the actual planning and reporting process.

Version 3.0

CONFIDENTIAL

Page 135

Company logo here

Project Initiation

1. Identify COMPANY executive management sponsor

Deliverable - Organizational responsibility assigned

2. Create DRP Steering Committee and schedule update meetings through plan
completion (if possible through plan implementation)

Deliverable - Steering Committee minutes and meeting

schedule

3. Define scope of effort (see DRP Scope page 9)

Deliverable - Disaster Recovery Plan - Scope

4. Define status reporting mechanism

Deliverable - Reporting Relationships

5. Review and Modify Plan Assumptions (see page 12)

Deliverable - Disaster Recovery Plan - Plan

Assumptions

6. Assign responsibility for day-to-day project management

Deliverable - Staff Assignments

7. Allocate staffing resources for DRP creation (see Recovery Team Members page
49). Note: members and alternates should be assigned

Deliverable - Staff Assignments

8. Schedule project team orientation

Deliverable - Team Orientation Agenda and Schedule

9. Create and distribute project announcement for COMPANY (See Authorization

page 10)

Version 3.0

Deliverable - Announcement Letter and Distribution

List

CONFIDENTIAL

Page 136