Disaster Recovery Planning

Disaster is a sudden event, such as an accident or a natural

catastrophe that causes great damage or loss of business reputation,
clientages. It is a sudden calamitous event that seriously disrupts the
functioning of an ATMs or financial transactions and causes human, IT,
assets and economic or environmental losses that exceed the banks ability
to cope using its own resources. . To survive such an event, it is necessary to
develop recovery procedures and formalize them into a disaster recovery
plan. Disaster Recovery Planning refers to a recovery system where PEASO
Corp. can provide a continuity plan or business process contingency plan or a
backup data that can restore datas of ATM machines when such disaster
came.
STATEMENT OF INTENTION

The intent of the DRP is to recover and protect a business IT facilities,

such as the network, document management system and core system, in the
disruptive events. Those events include both natural disaster such as
earthquake and manmade disasters such as power outage. It is impossible
that the company can always avoid disasters, so the disaster recovery plan
plays and important role after the company suffers a disaster. It will be
effectively help to minimized downtime and data loss to ensure some level of
organizational stability and an orderly recovery after a disaster if the
company prevail a careful plan.

Objectives
PEASO Corporation comes up with the following objectives in
the disaster recovery plan:
Minimizing disruption of business operations
Minimizing risk of delays

Ensuring a level of security

Assuring reliable backup systems

Aiding in restoration of operations with speed

IMPLEMENTATION

Forming the
Disaster Recovery
Team

Audit and Update

Plans

Build and Test

Recovery Plans

Business Impact
and Risk Analysis

Recovery Strategies

DISASTER RECOVERY TEAM

A Disaster Recovery Plan is needed to be established by a Disaster
Recovery Team in order to restore normal operations if a disaster occurs. This
team is composed of existing employees of PEASO Corporation who are
qualified to become a part of the team, usually personnel from the
companys Management Information System department. The team
functions as a strategic planning and tactical response unit. Each team
member is given temporary duties and responsibilities beyond their normal
employment classification.
The Disaster Recovery Team is divided into five groups, with each
group having different functions. The following are the five groups under the
Disaster Recovery Team:

Disaster Recovery Lead(s)

The Disaster Recovery Lead is the one who is responsible in making all
decisions related to Disaster Recovery efforts included in the companys DRP.
The main function of the DR Lead is to guide the overall disaster recovery
process and also to determine if a disaster occurred that may affect the
business operations. All individuals involved in the disaster recovery process
should report to this person.

Disaster Management Team

The Disaster Management Team is the first to take action in the

occurrence of a disaster. This team will assess the disaster, determine the
critical functions and formulate the steps to be taken in the restoration of the
business operations.

Facilities Team

The Facilities Team is the group responsible for all the issues that are
associated to the physical facilities where the business/organization,
employees and equipment are settled. The teams primary function is to
make sure that the alternate location facilities are maintained properly and
also to participate in the examination of any physical damages to the
primary facility.

Operations Team

The objective of the Operations Team is to provide the employees with

tools which they need to perform their duties as quickly and efficiently as
possible.

Communications Team

The Communication Team has the most critical role in the DRP as this
is the team responsible for all communications during a disaster, and until
normal business operations are already restored. This includes
communication with employees, clients, and the media, if necessary.

BUSINESS IMPACT AND RISK ANALYSIS

It is vital for the company to conduct a risk assessment and business
impact analysis related to disasters that may affect the operations of the
business. The primary purpose of conducting a business impact analysis is to
identify how quickly the company will recover its activities from incidents to
avoid larger damage. It will also help determine the Maximum Acceptable
Outage/Recovery Time Objective, Maximum Data Loss/Recovery Point
Objective, required resources and other important information that is

essential in developing a business continuity strategy. The risk assessment

helps identify which kinds of incidents the company might face in the future
and prepare in order to minimize the damage of such incidents.

Risk Management
Risk assessment is one of the most important steps in the preparation
of the Disaster Recovery Plan. A comprehensive risk assessment activity
allows the company to understand the various threats it can be exposed to,
the possible extent of damage and formulate strategies for damage control.
Potential threats assessed are listed below:
POTENTIAL DISASTER

BRIEF DESCRIPTION OF POTENTIAL

CONSEQUENCES AND REMEDIAL ACTIONS

Flood

All critical equipment is located on the same floor.

Only second floor is occupied

Fire

No fire and smoke detectors on all floors.

Proposed to be included in the leasehold
improvements

Act of terrorism and

sabotage

Securities are well maintained in the area and

personnel are all aware of emergency landline

Electrical power Failure

Redundant battery array together with auto

standby generator that is tested weekly &
remotely monitored 24/7.

RECOVERY STRATEGIES
Protecting data against loss, corruption, disasters whether man-made
or natural and or for any other reason is one of the top priorities of PEASO
Corporation. It is quite simple to think of an idea on how to create back-up
methods but implementing an efficient and effective set of recovery
techniques for the company's operations could be difficult. Before arriving
with the idea of choosing the best back-up method, the company should first

undergo through an analyzation process to determine the extent of the data

to be restored. Afterwards, the company and banks will need to decide if
whether the established back-up technique is applicable or not. Depending
on their agreement, banks can obtain the data by means of full data back-up
and incremental data back-up.
In full data back-up, the banks personnel were being assisted by data
back-up personnel in copying the data to another set of media, which can be
in the form of a tape, disk or a DVD or CD. However, using this method still
creates some of the disadvantages such as it takes longer time to perform
the restoration, it requires more storage space and also this method is
applicable only to a small amount of data.
In terms of incremental data backup, this method will result in copying
the data that has change since the last back-up operation. Banks will copy
and store all relevant data little by little and in a continuous manner of
copying and saving the needed information. Such process will only stop if the
banks have acquired all the necessary records. It is usually done where there
are large files of data needed to back-up.
BUILD AND TEST RECOVERY PLANS
The written plan constructed by the Disaster Recovery Team must
cover both minor and major disasters and must be able to address the
individual as well as community-wide natural calamities including hurricanes
and massive flooding. Such plan must also provide a precise way of reaching
team members together with their alternates, banks managers, support
agencies, consultants and any other persons during times of adversity.
The presented recovery plan must also permits initial as well as
continuous employee training. Well-trained personnel are needed especially
during the times of reconstruction and salvage phases of the recovery
process. Initial training will be consummated by means of professional
seminars and special in-house educational programs. This kind of strategy
contributes to the overall organization and communication with regards to
individual jobs and provides opportunity to widen the understanding of the
system, facilities, procedures and other company related matters. Also, it
aids the management in discovering not just the strength but also the flaws
and weaknesses of the existing policies and procedures, and thus, allows
them to make the necessary adjustments as needed.
The recovery plan must not only provide details of back-up but more
importantly, it must be able to identify the order in which data are restored.
And as such, it should reflect the complexity of daily transactions regarding
the number of exchanges that took place in a particular currency.

DRP Exercising
One of the vital key to a successful performance of every individual is
their constant exposure to various drills and exercises. These kinds of
activities will assist the management to determine their degree of
preparedness and whether such preparation is capable of securing their
employees, facilities, work environment and business operations in case of
emergency.
The extent of damage to a company caused by a disaster signifies how
well the company prepares before the incident. The set of drills serve as a
training ground for the people to become knowledgeable of the plans, and to
improve the quality of their performance so they can respond accordingly to
any given situation.
Some of the benefits of having drills and exercises are:
-Exposing people to possible threats and danger in the environment and its
perceived impact to the company as a whole.
-Authenticating education and training of its people
-Obtaining feedback that will be used for further improvement
-Clarifying responsibilities
-testing the validity of the changes made in the procedures
-estimating the efficiency of the entire preparedness program
-Determining the capabilities of existing resources and distinguishing the
need for more resources
Audit and Update Plans
The recovery plan is subject to review by the members of the Disaster
Recovery Team. This team is given the privilege to make updates and replace
parts of the plan which they deemed as non-essential. Revisions are to be
done as needed in order to improve the process and to ensure the reliability
and security of critical data.

GANTT CHART FOR DISASTER RECOVERY PROGRAM

Activities
Disaster Recovery Process
Set up database
Set up network
Data validation
Reconcile data

Days
1
1 2 3 4 5 6 7 8 9 0

1
1

1
2

1
3

1
4