Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 47

Template

IT Disaster
Recovery Planning:
MOA ARENA
When disaster strikes, business suffers. A goal of business planning is to mitigate
disruption of product and services delivery to the greatest degree possible when
disruption due to disaster occurs. Business continuity is the overarching concern.

An IT disaster recovery plan is the lynchpin of an overall business continuity strategy.


And the purpose of business continuity is to maintain a minimum level of service while
restoring the organization to business as usual. If a business fails to put a disaster
recovery plan in place then, when disaster strikes, the company risks losing customers
to competitors, losing funding and having the need for its products or services
reevaluated and deemed unnecessary.

Micro Focus encourages every organization to proactively execute an IT Disaster


Recovery plan. To assist, we provide you with a template as a springboard for your
organization’s customized plan. Please contact a Micro Focus representative when you
are ready!

XYZ Organization IT Disaster Recovery Plan Revision History


REVISION DATE NAME DESCRIPTION
Table of Contents
XYZ Organization IT Disaster Recovery Plan Revision History.......................................................................................................2

Information Technology Statement of Intent.................................................................................................................................... 5

Policy Statement.............................................................................................................................................................................. 5

Objectives........................................................................................................................................................................................ 5

Key Personnel Contact Info............................................................................................................................................................. 6

Notification Calling Tree................................................................................................................................................................... 7

External Contacts............................................................................................................................................................................ 8

External Contacts Calling Tree...................................................................................................................................................... 10

1 Plan Overview............................................................................................................................................................................ 11

1.1 Plan Updating.................................................................................................................................................................... 11

1.2 Plan Documentation Storage............................................................................................................................................. 11

1.3 Backup Strategy................................................................................................................................................................. 11

1.4 Risk Management.............................................................................................................................................................. 12

2 Emergency................................................................................................................................................................................. 12

2.1 Alert, escalation and plan invocation................................................................................................................................. 12

2.1.1 Plan Triggering Events.................................................................................................................................................... 12

2.2.2 Assembly Points............................................................................................................................................................. 14

2.2.3 Activation of Emergency Response Team......................................................................................................................14

2.3 Disaster Recovery Team................................................................................................................................................... 14

2.4 Emergency Alert, Escalation and DRP Activation..............................................................................................................14

2.4.1 Emergency Alert............................................................................................................................................................. 15

2.4.2 DR Procedures for Management.................................................................................................................................... 15

2.4.3 Contact with Employees................................................................................................................................................. 15

2.4.4 Backup Staff.................................................................................................................................................................... 15

2.4.5 Recorded Messages / Updates....................................................................................................................................... 16

2.3.7 Alternate Recovery Facilities / Hot Site........................................................................................................................... 16

2.3.8 Personnel and Family Notification.................................................................................................................................. 16

3 Media......................................................................................................................................................................................... 16

3.1 Media Contact.................................................................................................................................................................... 16

3.2 Media Strategies................................................................................................................................................................ 16


3.3 Media Team....................................................................................................................................................................... 16

3.4 Rules for Dealing with Media.............................................................................................................................................. 16

4 Insurance.................................................................................................................................................................................... 17

5 Financial and Legal Issues........................................................................................................................................................ 17

5.1 Financial Assessment........................................................................................................................................................ 17

5.2 Financial Requirements...................................................................................................................................................... 17

5.3 Legal Actions...................................................................................................................................................................... 17

6 DRP Exercising..................................................................................................................................................................... 18

Appendix A – Technology Disaster Recovery Plan.......................................................................................................................19

Templates Disaster Recovery Plan for <System One>.................................................................................................................19

Disaster Recovery Plan for <System Two>................................................................................................................................... 21

Disaster Recovery Plan for Local Area Network (LAN).................................................................................................................23

Disaster Recovery Plan for Wide Area Network (WAN)................................................................................................................ 25

Disaster Recovery Plan for Remote Connectivity..........................................................................................................................27

Disaster Recovery Plan for Voice Communications......................................................................................................................29

Appendix B – Suggested Forms.................................................................................................................................................... 31

Damage Assessment Form........................................................................................................................................................... 31

Management of DR Activities Form............................................................................................................................................... 31

Disaster Recovery Event Recording Form.................................................................................................................................... 32

Disaster Recovery Activity Report Form........................................................................................................................................ 32

Mobilizing the Disaster Recovery Team Form............................................................................................................................... 33

Mobilizing the Business Recovery Team Form.............................................................................................................................33

Monitoring Business Recovery Task Progress Form.....................................................................................................................34

Preparing the Business Recovery Report Form............................................................................................................................34

Communications Form................................................................................................................................................................... 35

Returning Recovered Business Operations to Business Unit Leadership.....................................................................................35

Business Process/Function Recovery Completion Form...............................................................................................................36


Information Technology Statement of Intent

This document delineates our policies and procedures for technology disaster recovery,
as well as our process-level plans for recovering critical technology platforms and the
telecommunications infrastructure. This document summarizes our recommended
procedures. In the event of an actual emergency situation, modifications to this
document may be made to ensure physical safety of our people, our systems, and our
data.

Our mission is to ensure information system uptime, data integrity and availability, and
business continuity.

Policy Statement
Corporate management has approved the following policy statement:

• The company shall develop a comprehensive IT disaster recovery plan.


• A formal risk assessment shall be undertaken to determine the requirements for
the disaster recovery plan.
• The disaster recovery plan should cover all essential and critical infrastructure
elements, systems and networks, in accordance with key business activities.
• The disaster recovery plan should be periodically tested in a simulated
environment to ensure that it can be implemented in emergency situations and
that the management and staff understand how it is to be executed.
• All staff must be made aware of the disaster recovery plan and their own
respective roles.
• The disaster recovery plan is to be kept up to date to take into account changing
circumstances.

Objectives
The principal objective of the disaster recovery program is to develop, test and
document a well-structured and easily understood plan which will help the company
recover as quickly and effectively as possible from an unforeseen disaster or
emergency which interrupts information systems and business operations. Additional
objectives include the following:

• The need to ensure that all employees fully understand their duties in
implementing such a plan
• The need to ensure that operational policies are adhered to within all planned
activities
• The need to ensure that proposed contingency arrangements are cost-effective
• The need to consider implications on other company sites
• Disaster recovery capabilities as applicable to key customers, vendors and others
Key Personnel Contact Info

Name, Title Contact Option Contact Number


Pamela D. Escobar , CEO, Work
MANAGEMENT DEPARTMENT
Alternate 5564-3345
Mobile 0932 555 9882
Home Unit 407 Campos Rueda
Building101 Urban
Email Address ohara.morris@gmail.com
Alternate Email ohara.morris@gmail.com

Glenda W. Mccann, VP, Work


MANAGEMENT DEPARTMENT
Alternate 6784-4786
Mobile 0933 555 0664
Home 115 Mother Ignacia Avenue
1100
Email Address blackking@gmail.com
Alternate Email blackking@gmail.com

Sanford A. Silva, VP Work


OPERATIONS, MANAGEMENT
DEPARTMENT
Alternate 2564-8573
Mobile 0910 555 4808
Home  Katipunan Ave., 1105, NCR
Email Address kilback.selena@yahoo.com
Alternate Email kilback.selena@yahoo.com

Charley G. Holland, VP HR, Work


MANAGEMENT DEPARTMENT
Alternate 2345-8642
Mobile 0921 555 0971
Home RFG Building, Burgos Avenue
Email Address kmckenzie@gmail.com
Alternate Email kmckenzie@gmail.com

Sandy R. Marsh, EXECUTIVE Work


SECRETARY, MANAGEMENT
DEPARTMENT
Alternate 9832-555
Mobile 0919 555 6516
Home Unit 407 Campus Pangasinan
Email Address borreros.hickey@gmail.com
Alternate Email borreros.hickey@gmail.com

Norberto W. Buckley CFO, Work


FINANCE DEPARTMENT
Alternate 7234-4562
Mobile 0919 555 7290
Home 78 Calit BinmaleyPangasinan
Email Address bins.alexane@gmail.com
Alternate Email bins.alexane@gmail.com

Ilene U. Kerr, Work


ACCOUNTANT FINANCE
DEPARTMENT
Alternate 6512-8743
Mobile 0980 555 4633
Home 46 Carael Pangasinan
Ma corkery.raul@gmail.com
Alternate Email corkery.raul@gmail.com

Isreal Q. Bartlett, AUDITOR Work


FINANCE DEPARTMENT
Alternate 9633-8799
Mobile 0908 555 1097
Home 56 Calmay Pangasinan
Email Address amiya.konopelski@yahoo.com
Alternate Email amiya.konopelski@yahoo.com

Rosario L. Levine, Work


ACCOUNTANT FINANCE
DEPARTMENT
Alternate 5674-8762
Mobile 0908 555 1120
Home 32 San Quintin Pangasinan
Email Address stokes.heber@gmail.com
Alternate Email stokes.heber@gmail.com

Annette N. Simmons, AUDITOR Work


FINANCE DEPARTMENT
Alternate 1129-9005
Mobile 0908 555 1120
Home 543 Lucao Dagupan City
Pangasinan
Email Address vdamore@gmail.com
Alternate Email vdamore@gmail.com

Sharlene A. Bentley, ENG. Work


MANAGER
Alternate 1580-3002
Mobile 0909 555 1130
Home 512St.RosaBinmaley
Pangasinan
Email Address kling.allene@gmail.com
Alternate Email kling.allene@gmail.com

Armando C. Little, ENG. Work


SUPERVISOR
Alternate 3456-9732
Mobile 63 907 555 3846
Home 352 Perez Dagupan City
Pangasinan
Email Address ddickinson@gmail.com
Alternate Email ddickinson@gmail.com

Corey J. Durham,SR ENG Work .


Alternate 2243-6697
Mobile 0929 555 6876
Home 211 Arellano Dagupan City
Email Address evans.orn@gmail.com

Alternate Email evans.orn@gmail.com

James T. Plong, ENG. Work


Alternate 1004-2576
Mobile 0928 555 1025
Home 565 Gueset Dagupan City
Pangasinan
Email Address sydni.windler@gmail.com
Alternate Email sydni.windler@gmail.com

Wiley P. Hines, DEPARTMENT Work


SECRETARY
Alternate 9046-3793
Mobile 0910 555 9264
Home 132 Dawel Dagupan City
Pangasinan
Email Address walter.langworth@gmail.com
Alternate Email walter.langworth@gmail.com

Fred O. Ortiz, Work


PROCUREMENT MANAGER
Alternate 1234-5678
Mobile 0980 555 4386
Home 63 Bolosan Dagupan
Email Address tod.dickinson@gmail.com
Alternate Email tod.dickinson@gmail.com

Rudolph M. Harris, Work


PROCUREMENT SUPERVISOR
Alternate 6920-2567
Mobile 0980 555 4386
Home 973 Lilimasan San Carlos
Email Address kovacek.howell@gmail.com
Alternate Email kovacek.howell@gmail.com

Sheldon J. Mcdowell, SR Work


PROCUREMENT SPECIALIST
Alternate 0268-3854
Mobile 0980 555 4386
Home 531 Lucao Dagupan City
Pangasinan
Email Address zoe.kessler@gmail.com
Alternate Email zoe.kessler@gmail.com

Samuel N. Shannon, Work


PROCUREMENT SPEC
Alternate 0903-6426
Mobile 0907 555 3582
Home 75 Bued Calasiao Pangasinan
Email Address mohr.adeline@gmail.com
Alternate Email mohr.adeline@gmail.com

Hong D. Dunn, DEPARTMENT Work


SECRETARY
Alternate 1453-6367
Mobile 0928 555 4362
Home 341 San Fabian Pangasinan
Email Address antwan.hettinger@gmail.com
Alternate Email antwan.hettinger@gmail.com
Jamaal A. Cervantes, Work
EXECUTIVE SECRETARY
Alternate 2704-2563
Mobile 0923 555 1237
Home 843 Bued Calasiao Pangasinan
Email Address gkoelpin@gmail.com
Alternate Email gkoelpin@gmail.com

Hilton W. Warner, SR ADMIIN Work


Alternate 1755-7378
Mobile 0928 555 2817
Home 163 Calmay Dagupan City
Pangasinan
Email Address jerrod.reichert@gmail.com
Alternate Email jerrod.reichert@gmail.com

Leandro R. Powell, ADMIN Work


SUPERVISOR
Alternate 1048-5236
Mobile 0983 555 0823
Home 432 Manat Binmaley
Pangasinan
Email Address connelly.maiya@gmail.com
Alternate Email connelly.maiya@gmail.com

Wilber P. Spence, ADMIN 1 Work


Alternate 3802-5325
Mobile 63 929 555 5840
Home 256 Caloocan Binmaley
Pangasinan
Email Address enid.barton@gmail.com
Alternate Email enid.barton@gmail.com

RAINIER CALIMLIM, ADMIN 2 Work


Alternate 6090-3590
Mobile 0983 555 0469
Home 535 Caloocan Sur Binmaley
Pangasinan
Email Address huels.claudia@gmail.com
Alternate Email huels.claudia@gmail.com

Lilly E. Flores, CHIEF- Work


INFORMATION OFFICER
Alternate 2244-9924
Mobile 0928 355 2237
Home 362 Lucao Dagupan City
Pangasinan
Email Address krippin@gmail.com
Alternate Email krippin@gmail.com

Ester M. Berger, CHIEF TECH Work


OFFICER
Alternate 2209-9035
Mobile 0928 555 4310
Home 412 Baybay lopez Binmaley
Pangasinan
Email Address qblick@gmail.com
Alternate Email qblick@gmail.com

Son C. Garrison, CHIEF Work


OPERATIONS OFFICER
Alternate 9038-9376
Mobile 0928 555 5356
Home 712 San Isidro Sur Binmaley
Pangasinan
Email Address bkonopelski@gmail.com
Alternate Email bkonopelski@gmail.com

KRISTILLE CEREZO, SENIOR Work


SECURITY SPEC
Alternate 0813-5693
Mobile 0928 555 0858
Home 32 Calasiao Pangasinan
Email Address awisoky@gmail.com
Alternate Email awisoky@gmail.com

VERNALYN ANGELES, SENIOR Work


SYSTEM ADMIN
Alternate 0135-5489
Mobile 0910 555 0219
Home 256 San Carlos Pangasinan
Email Address katelin.kihn@lgmail.com
Alternate Email katelin.kihn@lgmail.com

Jessica K. Kane, SR NETWORK Work


OPERATIONS
Alternate 1580-8330
Mobile 0909 555 3014
Home 125 Bani Pangasinan
Email Address howell.aiden@gmail.com
Alternate Email howell.aiden@gmail.com

Ben G.king, SERVICE DESK Work


SUPERVISOR
Alternate 3290-6328
Mobile 0983 555 5674
Home 107 NaguilayanBinmaley
Pangasinan
Email Address lauretta.hamill@gmail.com
Alternate Email lauretta.hamill@gmail.com

Asa B.Patrick, SERVICE DESK Work


Alternate 3004-6578
Mobile 0983 555 9129
Home 424 lucao Dagupan City
Pangasinan
Email Address cruickshank.bettye@dgmail.com
Alternate Email cruickshank.bettye@dgmail.com

Bruce R. Weeks, IT ASSET Work


Alternate 2456-8703
Mobile 0919 555 2923
Home 41 Las Vegas Bonuan Dagupan
City
Email Address herman.mariano@gmail.com
Alternate Email herman.mariano@gmail.com

Kirby Y. Gibson, IT TECH Work


Alternate 3586-7090
Mobile 0932 555 6904
Home 74 Baybay Polong Binmaley
Pangasinan
Email Address judd12@gmail.com
Alternate Email judd12@gmail.com

Maynard D. Harrell, YARD Work


MANAGER
Alternate 3088-3692
Mobile 0908 555 4625
Home 232 Malued Dagupan City
Pangasinan
Email Address flossie.okon@gmail.com
Alternate Email flossie.okon@gmail.com

Jermaine K. Shelton, YARD Work


SUPERVISOR
Alternate 1089-2895
Mobile 0932 555 8530
Home 212 Tapuac Dagupan City
Pangasinan
Email Address jasper15@gmail.com
Alternate Email jasper15@gmail.com

Jeanine X. Mckenzie, Work


DOCUMENT CONTROLLER SR
Alternate 2704-2794
Mobile 0932 555 0123
Home 43 Caloocan Norte Binmaley
Email Address josefa.bayer@yahoo.com
Alternate Email josefa.bayer@yahoo.com

Josef Q. Kramer, DOCUMENT Work


CONTROLLER FOREMAN
Alternate 0259-7025
Mobile 0910 555 9181
Home 55 Lasip Grande Pangasinan
Email Address alanis57@gmail.com
Alternate Email alanis57@gmail.com

Yesenia B. Small, WELDER Work


Alternate 1902-4803
Mobile 63 932 555 1655
Home 67 Lasip Chico Pangasinan
Email Address beatty.eddie@yahoo.com
Alternate Email beatty.eddie@yahoo.com

Truman A. Summers, Work


DRAFTSMAN
Alternate 0909-8025
Mobile 0928 555 6428
Home 621 Bonuan binlocDagupan City
Pangasinan
Email Address ewald07@gmail.com
Alternate Email ewald07@gmail.com
Scottie O. Callahan, WORKER 1 Work
Alternate 5079-5894
Mobile 0921 555 2038
Home 333 Laguna
Email Address qgoyette@gmail.com
Alternate Email qgoyette@gmail.com

Tommy C. Hodges, WORKER 2 Work


Alternate 5638-5994
Mobile 0928 555 4221
Home 375 Pugaro Dagupan City
Pangasinan
Email Address korey50@gmail.com
Alternate Email korey50@gmail.com

Vincent V. Brock, WORKER 3 Work


Alternate 9234-5742
Mobile 0923 555 9154
Home 462 Manat Binmaley
Pangasinan
Email Address zwaters@gmail.com
Alternate Email zwaters@gmail.com

Gregg Y. Wiley, WORKER 4 Work


Alternate 0935-4337
Mobile 0923 555 9154
Home 192 Perez Dagupan City
Pangasinan
Email Address ashton15@gmail.com
Alternate Email ashton15@gmail.com

Darius R. Munoz, WORKER 5 Work


Alternate 3208-4383
Mobile 0928 555 5694
Home 78 Tapuac Dagupan City
Pangasinan
Email Address quigley.consuelo@yahoo.com
Alternate Email quigley.consuelo@yahoo.com

Stewart Z. Conley, WORKER 6 Work


Alternate 1343-3634
Mobile 0921 555 4050
Home 621 Alaminos Pangasinan
Email Address glennie.halvorson@gmail.com
Alternate Email glennie.halvorson@gmail.com

Eric W.Roth, WORKER 7 Work


Alternate 1089-5325
Mobile 0922 555 3739
Home 04 Carael dagupan City
Pangasinan
Email Address bautista.corekin@gmail.com
Alternate Email bautista.corekin@gmail.com

Mohamed D. Dunlap, Work


WORKER 8
Alternate 9506-6347
Mobile 0929 555 7980
Home 727 San Fabian, Pangasinan
Email Address hustle@gmail.com

Alternate Email hustle@gmail.com


hustle@gmail.com
Lauri S. Bolton, WORKER 9 Work
Alternate 3256-7394
Mobile 0929 555 7980
Home 321 Gomez st. Dagupan City
Pangasinan
Email Address joseph.deguzman@gmail.com
Alternate Email joseph.deguzman@gmail.com

Notification Calling Tree


ENG. MANAGER

PROCUREMENT
MANAGER

VP HR
EXECUTIVE
Person SEC

Identifying
Incident C.F.O CHIEF
INFORMATION
OFFICER

YARD MANAGER
External Contacts

Name, Title Contact Option Contact Number


Alexander D. Cervantes
- Landlord / Property
Manager
Dagupan Land Property
Incorporation
Work 532
Mobile 0930 071 3455
Home Mangaldan, Pangasinan
Email Address AlexanderCervantes@gmail.com

Joy T. De Guzman -
Water Company
Water District Dagupan Work 583
Mobile 0966 432 7379
Home Dagupan City Pangasinan
Email Address joydeguzman@gmail.com

Robert L. Diaz -
Telecom Carrier 1
Converge Work 565
Mobile 0996 798 6231
Fax 9862
Home Binmaley Pangasinan
Email Address robertdiaz@gmail.com

Benz lopez - Telecom


Carrier 2
PLDT Work 558
Mobile 0912 734 9003
Home Lingayen Pangasinan
Email Address benzlopez@gmail.com

Mark Chin - Hardware


Supplier 1
HQhardwarecompany Work 564
Mobile 0943 568 8319
Emergency 832-5426
Reporting
Email Address Markchin3@gmail.com
Jack Fernandez -
Server Supplier 1
Asus Server Work 639
Mobile 0978 655 9835
Fax 7803-2713
Email Address JackFernandez@gmail.com

Arthur Amemdo -
Workstation Supplier 1
Asus Mobile Workstation Work 715
Mobile 0977 1532 9753
Home Pantal Dagupan City Pangasinan
Email Address Arthuramemdo86@gmail.com

Name, Title Contact Option Contact Number


Crisha Aquino - Office
Supplies 1
Project enterprise Work 366
Mobile 0989 334 7653
Home San Carlos Pangasinan
Email Address CrishaAquino@gmail.com
Josh Palaganas -
Insurance – Name
Life Insurance Philippines Work 209
Mobile 0963 817 0802
Home Alaminos City Pangasinan
Email Address Joshpalaganas24@gmail.com

Gwen Pablo - Site


Security –
Asgard Security Agency Work 330
Mobile 0912 879 9801
Home Malued Dagupan City
Email Address GwenPablo@gmail.com

Robert Hernandez - Off-


Site Storage 1
Off-Site Tarlac City Work 674
Mobile 0932 658 0032
Home Caranglaan Dagupan City
Pangasinan
Email Address roberthernandez@gmail.com
AlliaClaveria - Off-Site
Storage 2
Off-Site Bulacan User ID 2367
Password 235837743
Home San Carlos Pangasinan
Email Address Alliaclaveria26@gmail.com

GeminoUntalan - HVAC

LG Aircon Company Work 687
Mobile 0920 365 4732
Home CamaleyBinmaley
Email Address Geminountalan45@gmail.com

Marlon Yoton - Power


Generator –
Black Power Generator Work 983
Mobile 0953 742 6483
Home San Fabian Pangasinan
Email Address MarlonYoton98@gmail.com

Rohing Bautista - Other



Phillipines Construction Work
Builder 656
Mobile 0934 968 2001
Home Bolinao Pangasinan
Email Address RohingBautista143@gmail.com

External Contacts Calling Tree


CEO

ENG. VP

ENG.
HR DEP SEC MANAGER

SR. ENR
Person
Identifying
Incident YARD
MANAGER

CENPELCO
HR YARD
SUPERVISOR

PLDT DOC.
CONTROLLER

IT TECH

1 Plan Overview

1.1 Plan Updating

It is necessary for the DRP updating process to be properly structured and controlled.
Whenever changes are made to the plan they are to be fully tested and appropriate
amendments should be made to the training materials. This will involve the use of
formalized change control procedures under the control of the IT Director.

1.2 Plan Documentation Storage

Copies of this Plan, CD, and hard copies will be stored in secure locations to be defined
by the company. Each member of senior management will be issued a CD and hard
copy of this plan to be filed at home. Each member of the Disaster Recovery Team and
the Business Recovery Team will be issued a CD and hard copy of this plan. A
master protected copy will be stored on specific resources established for this purpose.

1.3 Backup Strategy

Key business processes and the agreed backup strategy for each are listed below.
The strategy chosen is for a fully mirrored recovery site at the company’s offices in
.
This strategy entails the maintenance of a fully mirrored duplicate site which will
enable instantaneous switching between the live site (headquarters) and the backup
site.

KEY BUSINESS PROCESS BACKUP STRATEGY


IT Operations Fully mirrored recovery site
Tech Support - Hardware Fully mirrored recovery site
Tech Support - Software Fully mirrored recovery site
Facilities Management Fully mirrored recovery site
Email Fully mirrored recovery site
Purchasing Fully mirrored recovery site
Disaster Recovery Fully mirrored recovery site
Finance Fully mirrored recovery site
Contracts Admin Fully mirrored recovery site
Warehouse & Inventory Fully mirrored recovery site
Product Sales Fully mirrored recovery site
Maintenance Sales Fully mirrored recovery site
Human Resources Off-site data storage facility
Testing Fully Mirrored Recovery site - Fully mirrored recovery site
Workshop Fully Mirrored Recovery site - Fully mirrored recovery site
Call Center Fully mirrored recovery site
Web Site Fully mirrored recovery site
1.4 Risk Management

There are many potential disruptive threats which can occur at any time and affect the
normal business process. We have considered a wide range of potential threats and the
results of our deliberations are included in this section. Each potential environmental
disaster or emergency situation has been examined. The focus here is on the level of
business disruption which could arise from each type of disaster.

Potential disasters have been assessed as follows:


Probability Brief Description Of
Potential Disaster Rating Impact Potential
Rating Consequences
& Remedial
Actions
Flood 3 4 All critical equipment
islocated on 1st Floor
Fire 3 4 FM200 suppression
system installed in main
computer centers. Fire
and smoke detectors
onall floors.
Tornado 5 4 The site will build
underground office
Electrical storms 5 4 Power genarator
Act of terrorism 5 4 Security agent or guards
Act of sabotage 5 4 It department system
Electrical 3 4 Redundant UPS array
power together with auto standby
Failure generator that is tested
weekly
&remotelymonitored 24/7.
UPSs also remotely
monitored.
Loss of 4 4 Two diversely routed T1
communications trunks into building.
network services WAN redundancy,
voicenetwork resilience

Probability: 1=Very High, 5=Very Low Impact: 1=Total destruction, 5=Minor annoyance

2 Emergency

2.1.1 Alert, escalation and plan invocation


2.1.2 Plan Triggering Events
2.2 Key trigger issues at headquarters that would lead to activation of the DRP are:
• Total loss of all communications
• Total loss of power
• Flooding of the premises
• Loss of the building
2.2.2 Assembly Points
Where the premises need to be evacuated, the DRP invocation plan identifies two
evacuation assembly points:
• Primary – Far end of main parking lot;
• Alternate – Parking lot of company across the street

2.2.3 Activation of Emergency Response Team


When an incident occurs the Emergency Response Team (ERT) must be activated.
The ERT will then decide the extent to which the DRP must be invoked. All
employees must be issued a Quick Reference card containing ERT contact details
to be used in the event of a disaster. Responsibilities of the ERT are to:

• Respond immediately to a potential disaster and call emergency services;


• Assess the extent of the disaster and its impact on the business, data center,
etc.;
• Decide which elements of the DR Plan should be activated;
• Establish and manage disaster recovery team to maintain vital services and
return to normal operation;
• Ensure employees are notified and allocate responsibilities and activities as
required

2.3 Disaster Recovery Team

The team will be contacted and assembled by the ERT. The team's responsibilities
include:
• Establish facilities for an emergency level of service within 2.0 business hours;
• Restore key services within 4.0 business hours of the incident;
• Recover to business as usual within 8.0 to 24.0 hours after the incident;
• Coordinate activities with disaster recovery team, first responders, etc.
• Report to the emergency response team

2.4 Emergency Alert, Escalation and DRP Activation

This policy and procedure has been established to ensure that in the event of a disaster
or crisis, personnel will have a clear understanding of who should be contacted.
Procedures have been addressed to ensure that communications can be quickly
established while activating disaster recovery.

The DR plan will rely principally on key members of management and staff who will
provide the technical and management skills necessary to achieve a smooth
technology and business recovery. Suppliers of critical goods and services will
continue to support recovery of business operations as the company returns to normal
operating mode.

2.4.1 Emergency Alert

The person discovering the incident calls a member of the Emergency Response Team
in the order listed:

Emergency Response Team


Jerico Awanin – IT DEPARTMENT
Jordan lgnacio-IT DEPARTMENT
If not available try:
Marilyn Gonzales- IT DEPARTMENT
Anna Claveria – IT DEPARTMENT

The Emergency Response Team (ERT) is responsible for activating the DRP for
disasters identified in this plan, as well as in the event of any other occurrence
that affects the company’s capability to perform normally.

One of the tasks during the early stages of the emergency is to notify the Disaster
Recovery Team (DRT) that an emergency has occurred. The notification will request
DRT members to assemble at the site of the problem and will involve sufficient
information to have this request effectively communicated. The Business Recovery
Team (BRT) will consist of senior representatives from the main business departments.
The BRT Leader will be a senior member of the company's management team, and will
be responsible for taking overall charge of the process and ensuring that the company
returns to normal working operations as early as possible.

2.4.2 DR Procedures for Management


Members of the management team will keep a hard copy of the names and contact
numbers of each employee in their departments. In addition, management team
members will have a hard copy of the company’s disaster recovery and business
continuity plans on file in their homes in the event that the headquarters building is
inaccessible, unusable, or destroyed.

2.4.3 Contact with Employees


Managers will serve as the focal points for their departments, while designated
employees will call other employees to discuss the crisis/disaster and the company’s
immediate plans. Employees who cannot reach staff on their call list are advised to call
the staff member’s emergency contact to relay information on the disaster.
2.4.4 Backup Staff
If a manager or staff member designated to contact other staff members is unavailable
or incapacitated, the designated backup staff member will perform notification duties.

2.4.5 Recorded Messages / Updates


For the latest information on the disaster and the organization’s response, staff
members can call a toll-free hotline listed in the DRP wallet card. Included in messages
will be data on the nature of the disaster, assembly sites, and updates on work
resumption.

2.3.7 Alternate Recovery Facilities / Hot Site


If necessary, the hot site at SunGard will be activated and notification will be given via
recorded messages or through communications with managers. Hot site staffing will
consist of members of the disaster recovery team only for the first 24 hours, with other
staff members joining at the hot site as necessary.

2.3.8 Personnel and Family Notification


If the incident has resulted in a situation which would cause concern to an employee’s
immediate family such as hospitalization of injured persons, it will be necessary to
notify their immediate family members quickly.

3 Media

3.1 Media Contact


Assigned staff will coordinate with the media, working according to guidelines that have
been previously approved and issued for dealing with post-disaster communications.

3.2 Media Strategies


1. Avoiding adverse publicity
2. Take advantage of opportunities for useful publicity
3. Have answers to the following basic questions:
• What happened?
• How did it happen?
• What are you going to do about it?

3.3 Media Team


•Rocky Legaspi - IT DEPARTMENT
•Tiffany Dela Cruz – IT DEPARTMENT

3.4 Rules for Dealing with Media
Only the media team is permitted direct contact with the media; anyone else
contacted should refer callers or in-person media representatives to the media
team.

4 Insurance

As part of the company’s disaster recovery and business continuity strategies a number
of insurance policies have been put in place. These include errors and omissions,
directors &officers liability, general liability, and business interruption insurance.

If insurance-related assistance is required following an emergency out of normal


business hours, please contact:

Person
Next
Policy Name Coverage Coverage Amount Of Responsible
Renewal
Type Period Coverage For
Date
Coverage

5 Financial and Legal Issues

5.1 Financial Assessment

The emergency response team shall prepare an initial assessment of the impact
of the incident on the financial affairs of the company. The assessment should
include:
• Loss of financial documents
• Loss of revenue
• Theft of check books, credit cards, etc.
• Loss of cash

5.2 Financial Requirements

The immediate financial needs of the company must be addressed. These can include:
• Cash flow position
• Temporary borrowing capability
• Upcoming payments for taxes, payroll taxes, Social Security, etc.
• Availability of company credit cards to pay for supplies and services required
post- disaster
5.3 Legal Actions

The company legal department and ERT will jointly review the aftermath of the incident
and decide whether there may be legal actions resulting from the event; in particular,
the possibility of claims by or against the company for regulatory violations, etc.
6 DRP Exercising

Disaster recovery plan exercises are an essential part of the plan development process.
In a DRP exercise no one passes or fails; everyone who participates learns from
exercises – what needs to be improved, and how the improvements can be
implemented. Plan exercising ensures that emergency teams are familiar with their
assignments and, more importantly, are confident in their capabilities.

Successful DR plans launch into action smoothly and effectively when they are needed.
This will only happen if everyone with a role to play in the plan has rehearsed the role
one or more times. The plan should also be validated by simulating the circumstances
within which it has to work and seeing what happens
Appendix A – Technology Disaster Recovery Plan

Templates Disaster Recovery Plan for <System One>

Management and Security System


SYSTEM

OVERVIEW
PRODUCTION SERVER Location: Robinsons Calasiao
Server Model: Client Server Model
Operating System: windows 10
CPUs: HP
Memory: 32gb
Total Disk: 6
System Handle: System Management
System Serial #: 088134254
DNS Entry:
IP Address: 192.658.10.0
Other:
HOT SITE SERVER
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS

KEY CONTACTS
Hardware Vendor Dell company
System Owners Jinky Chua / IT department
Database Owner Fairy Cacayurin / IT department
Application Owners Desiree Montalbo / IT department
Software Vendors Oracle
Offsite Storage Inside of Robinsons Calasiao

BACKUP STRATEGY
FOR SYSTEM ONE
Daily 6 hours
Monthly 4 times a week
Quarterly 4 times a week
SYSTEM ONE
DISASTER
RECOVERY
PROCEDURE
Scenario 1 Robinson Main contact a Robinsons Calasiao to
data recovery and security
Total Loss of Data
Scenario 2 Contact a System Security

Total Loss of HW
ADDENDUM

File Systems
CONTACTS

File System as of File system Kbytes Used Avail 60%used


Mounted on
Minimal file
systems to
be created
and restored
from backup:

Other critical files Quick Restore of


to modify data
Necessary Quick restore
directories
to create

Critical files to Quick restore


restore
Secondary files to Minimal restore
restore
Other files to Quick restore
restore

Disaster Recovery Plan for <System Two>

Database system and hardware equipment


SYSTEM

OVERVIEW
PRODUCTION SERVER Location: Robinsons Galleria
Server Model: client server model
Operating System: Windows vista
CPUs: Intel
Memory: 6gb
Total Disk: 6
System Handle: Software and system
System Serial #: 863972931
DNS Entry:
IP Address: 192.000.10.0.
Other:
HOT SITE SERVER Security System
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS

KEY CONTACTS
Hardware Vendor Intel company
System Owners Ricky Agustin/ IT Department
Database Owner Henry Mamaril / IT Management
Application Owners George Lopez / IT Department
Software Vendors Oracle
Offsite Storage Inside Robinson Galleria

BACKUP STRATEGY for


SYSTEM TWO
Daily 5 hours
Monthly 4 a week
Quarterly 4 a week

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
Robinson Main contact a Robinsons Calasiao to
Scenario 1 data recovery and security

Total Loss of Data


Contact a System Security
Scenario 2

Total Loss of HW

File Systems
ADDENDUM

CONTACTS

File System as of File system Kbytes Used Avail %used


Mounted on
Minimal file
systems to
be created
and restored
from backup:

Other critical files Quick restore


to modify
Necessary Quick restore
directories
to create

Critical files to Quick restore


restore
Secondary files to Restoring
restore
Other files to Quick Restore
restore
Disaster Recovery Plan for Local Area Network (LAN)

SYSTEM

OVERVIEW
SERVER Location: Robinsons La Union
Server Model: client server model
Operating System: Windows
CPUs: Intel
Memory: 6gb
Total Disk: 8
System Handle: Software and system
System Serial #: 960256820
DNS Entry:
IP Address: 192.168.10.0
Other:
HOT SITE SERVER
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS

KEY CONTACTS
Hardware Vendor Intel company
System Owners Melchore Abando / IT Department
Database Owner Myla Flores / IT Management
Application Owners Rachel Inshor/ IT Department
Software Vendors Oracle
Offsite Storage Inside Robinsons La Union

BACKUP STRATEGY for


SYSTEM TWO
Daily 6 hours
Monthly 4 a week
Quarterly 4 a week

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
ADDENDUM

CONTACTS

Robinson Main contact a Robinsons La Uninion to


Scenario 1 data recovery and security

Total Loss of Data


Contact a System Security
Scenario 2

Total Loss of HW

File Systems

File System as of File system Kbytes Used Avail %used


Mounted on
Minimal file
systems to
be created
and restored
from backup:

Other critical files Quick restore


to modify
Necessary Minimal restore
directories to
create
Critical files to Quick restore
restore
Secondary files to Quick restore
restore
Other files to Quick restore
restore
Disaster Recovery Plan for Wide Area Network (WAN)

SYSTEM
OVERVIEW

EQUIPMENT Location: Robinsons Magnolia


Device Type: client server model
Model No.: Windows
Technical Specifications:
Network Interfaces:
Power Requirements;
System Serial #:0823558
DNS Entry:
IP Address: 192.168.10.0
Other:
HOT SITE EQUIPMENT
SPECIAL
APPLICATIONS
ASSOCIATED DEVICES

KEY CONTACTS
Hardware Vendor HP company
System Owners Marcelo Gotos/ IT Department
Database Owner Carla Santiago/ IT Management
Application Owners Raul Claro/ IT Department
Software Vendors Oracle
Offsite Storage Inside Robinson Magnolia
Network Services

BACKUP STRATEGY for


SYSTEM TWO
Daily 5 hours
Monthly 4 weeks
Quarterly 4 weeks

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
ADDENDUM

CONTACTS

Robinson Main contact a Robinsons Magnolia to


Scenario 1 data recovery and security

Total Loss of Network


Contact a System Security
Scenario 2

Total Loss of HW

Support Systems

Support system Quick restore

Critical network Quick restore


assets
Critical interfaces Minimal restore
Critical files to Quick restore
restore
Critical network Quick restore
services to restore
Other services Minimal restore
Disaster Recovery Plan for Remote Connectivity

SYSTEM Sss

OVERVIEW
EQUIPMENT Location: Robinsons Cebu
Device Type: client server model
Model No.: Windows
Technical Specifications:
Network Interfaces:
Power Requirements;
System Serial #:
08736365
DNS Entry:
IP Address: 192.168.10.0
Other:
HOT SITE EQUIPMENT
SPECIAL
APPLICATIONS
ASSOCIATED DEVICES

KEY CONTACTS
Hardware Vendor Acer Company
System Owners Angelo Soriano/ IT Department
Database Owner Flloyd Ferrer/ IT Department
Application Owners Jamaica Walter/ IT Department
Software Vendors Oracle
Offsite Storage Inside Robinsons Cebu
Network Services

BACKUP STRATEGY for


SYSTEM TWO
Daily 5 hours
Monthly 4 week
Quarterly 4 week

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
ADDENDUM

CONTACTS

Robinson Main contact a Robinson Cebu to data


Scenario 1 recovery and security

Total Loss of Network


Contact a System Security
Scenario 2

Total Loss of HW

Support Systems

Support system

Critical network Quick restore


assets
Critical interfaces Minimal Restore
Critical files to Quick restore
restore
Critical network Quick restore
services to restore
Other services Minimal Restore
Disaster Recovery Plan for Voice Communications

SYSTEM

OVERVIEW
EQUIPMENT Location: Robinsons Antipolo
Device Type: client server model
Model No.: Windows
Technical Specifications:
Network Interfaces:
Power Requirements;
System Serial
#:0635272454
DNS Entry:
IP Address: 192.168.10.0
Other:
HOT SITE EQUIPMENT
SPECIAL
APPLICATIONS
ASSOCIATED DEVICES

KEY CONTACTS
Hardware Vendor HP company
System Owners Rodolfo Palaganas /IT Department
Database Owner Mike Ragasa/IT Management
Application Owners Princess Marie Del Monte/IT Department
Software Vendors Oracle
Offsite Storage Inside Robinsons Antipolo
Network Services

BACKUP STRATEGY for


SYSTEM TWO
Daily 5 hours
Monthly 4 weeks
Quarterly 4 weeks

SYSTEM TWO
DISASTER
RECOVERY
PROCEDURE
ADDENDUM

CONTACTS

Robinson Main contact a Robinson Cebu to data


Scenario 1 recovery and security

Total Loss of Switch


Contact a System Security
Scenario 2

Total Loss of Network

Support Systems

Support system Quick restore

Critical network Minimal Restore


assets
Critical interfaces Quick restore
Critical files to Quick restore
restore
Critical network Quick restore
services to restore
Other services Minimal Restore
Appendix B – Suggested Forms

Damage Assessment Form


Key Business Description Of Extent Of Damage
Process Problem
Affected

Management of DR Activities Form


• During the disaster recovery process all activities will be determined using a
standard structure;
• Where practical, this plan will need to be updated on a regular basis throughout
the disaster recovery period;
• All actions that occur during this phase will need to be recorded

Activity Name:
Reference Number:
Brief Description:

CommencementDate/ CompletionDate/ In
Time Time Resource Charg
s Involved e
Disaster Recovery Event Recording Form

• All key events that occur during the disaster recovery phase must be recorded.
• An event log shall be maintained by the disaster recovery team leader.
• This event log should be started at the commencement of the emergency and a
copy of the log passed on to the business recovery team once the initial
dangers have been controlled.
• The following event log should be completed by the disaster recovery team
leader to record all key events during disaster recovery, until such time as
responsibility is handed over to the business recovery team.

Description of Disaster:
Commencement Date:
Date/Time DR Team Mobilized:

Activities Undertaken Date and Outcome Follow-On


by Time Action
DR Team Required

Disaster Recovery Team's Work Completed: <Date>


Event Log Passed to Business Recovery Team: <Date>

Disaster Recovery Activity Report Form


• On completion of the initial disaster recovery response the DRT leader should
prepare a report on the activities undertaken.
• The report should contain information on the emergency, who was notified and
when, action taken by members of the DRT together with outcomes arising from
those actions.
• The report will also contain an assessment of the impact to normal business
operations.
• The report should be given to business recovery team leader, with a copy to
senior management, as appropriate.
• A disaster recovery report will be prepared by the DRT leader on completion of
the initial disaster recovery response.
• In addition to the business recovery team leader, the report will be distributed to
senior management

The report will include:


• A description of the emergency or incident
• Those people notified of the emergency (including dates)
• Action taken by members of the DRT
• Outcomes arising from actions taken
• An assessment of the impact to normal business operations
• Assessment of the effectiveness of the BCP and lessons learned
• Lessons learned

Mobilizing the Disaster Recovery Team Form


• Following an emergency requiring recovery of technology infrastructure assets,
the disaster recovery team should be notified of the situation and placed on
standby.
• The format shown below can be used for recording the activation of the DR
team once the work of the damage assessment and emergency response
teams has been completed

Description of Emergency:
Date Occurred:
Date Work of Disaster Recovery Team Completed:

Name of Contact Contacted Start Date


Team Details On (Time / By Whom Response Required
Member Date)

Relevant Comments (e.g., Specific Instructions Issued)

Mobilizing the Business Recovery Team Form


• Following an emergency requiring activation of the disaster recovery team,
the business recovery team should be notified of the situation and placed
on standby.
• The format shown below will be used for recording the activation of the
business recovery team once the work of the disaster recovery team has
been completed.

Description of Emergency:
Date Occurred:
Date Work of Business Recovery Team Completed:

Name of Contact Contacted Start Date


Team Details On (Time By Whom Response Required
Member /Date)

Relevant Comments (e.g., Specific Instructions Issued)

Monitoring Business Recovery Task Progress Form


• The progress of technology and business recovery tasks must be closely
monitored during this period of time
• Since difficulties experienced by one group could significantly affect other
dependent tasks it is important to ensure that each task is adequately resourced
and that the efforts required to restore normal business operations have not
been underestimated

Note: A priority sequence must be identified although, where possible, activities will
be carried out simultaneously.

Recovery Tasks Person(s) Completion Date Milestone Other


(Order of Responsibl Estimated Actual s Relevant
Priority) e Identified Information
1.
2.
3.
4.
5.
6.
7.
Preparing the Business Recovery Report Form

• On completion of business recovery activities the BRT leader should prepare a


report on the activities undertaken and completed
• The report should contain information on the disruptive event, who was notified
and when, action taken by members of the BRT together with outcomes arising
from those actions
• The report will also contain an assessment of the impact to normal business
operations
• The report should be distributed to senior management, as appropriate

The contents of the report shall include:


• A description of the incident
• People notified of the emergency (including dates)
• Action taken by the business recovery team
• Outcomes arising from actions taken
• An assessment of the impact to normal business operations
• Problems identified
• Suggestions for enhancing the disaster recovery and/or business continuity plan
• Lessons learned

Communications Form
• It is very important during the disaster recovery and business recovery activities
that all affected persons and organizations are kept properly informed
• The information given to all parties must be accurate and timely
• In particular, any estimate of the timing to return to normal working operations
should be announced with care
• It is also very important that only authorized personnel deal with media queries

Groups of Persons Selected To Coordinate


Persons or Communications
Organizations to Affected Persons / Organizations
Affected Name Position Contact Details
byDisruption
Customers
Management &
Staff
Suppliers
Media
Stakeholders
Others
Returning Recovered Business Operations to Business Unit Leadership

• Once normal business operations have been restored it will be necessary to return
the responsibility for specific operations to the appropriate business unit leader
• This process should be formalized in order to ensure that all parties understand
the change in overall responsibility, and the transition to businessas-usual
• It is likely that during the recovery process, overall responsibility may have been
assigned to the business recovery process lead
• It is assumed that business unit management will be fully involved throughout the
recovery, but in order for the recovery process to be fully effective, overall
responsibility during the recovery period should probably be with a business
recovery process team

Business Process/Function Recovery Completion Form


The following transition form should be completed and signed by the business
recovery team leader and the responsible business unit leader, for each process
recovered.

A separate form should be used for each recovered business process.

Name Of Business Process


Completion Date of Work Provided by Business
Recovery Team
Date of Transition Back to Business Unit
Management
(If different than completion date)

I confirm that the work of the business recovery team has been completed in
accordance with the disaster recovery plan for the above process, and that
normal business operations have been effectively restored.

Business Recovery Team Leader Name:

Signature:

Date:

(Any relevant comments by the BRT leader in connection with the return of
this business process should be made here.)
I confirm that above business process is now acceptable for normal working

conditions. Name:

Title:

Signature:

Date:

Courtesy of Micro Focus, Inc.

This document is intended to be a starting point for a potential disaster recovery plan and is a not, in any way, a complete disaster
recovery plan. Micro Focus does not take responsibility for any disaster recovery plans that are based off of this document, nor any
failure due to implementation or execution of this template.

Acknowledgement to Paul Kirvan of searchdisasterrecovery.com for the inspiration of this template.

135-000078-001

You might also like