Disaster Recovery. Don t Wait It May Be Too Late Winter Education Conference Arlington, VA

Transcription

1 Disaster Recovery Don t Wait It May Be Too Late 2014 Winter Education Conference Arlington, VA

2 CarLa Burtsong 02/25/2014 2

3 Our Goals During This Presentation Why a disaster recovery plan? Definition of disaster recovery Disaster recovery principles Business continuity plans Excellent reference material Ready, set, practice! 02/25/2014 3

4 Let s talk (cooked) turkey How many have a disaster recovery plan (DRP)? How many have a business continuity plan (BCP)? Who wrote it? When did YOU last review it? When was it last tested? When was it last updated? 02/25/2014 4

5 Not Rocket Science But it is lots of hard work! Multiple resources Borrow shamelessly from others 02/25/2014 5

6 NACRC resources Disaster recovery and restoration RFP s/plans from: Louisiana Tennessee Texas Virginia 02/25/2014 6

7 Examples of disasters What is a disaster? How big does it have to be? 02/25/2014 7

8 Is this a disaster? The winter of 2014 has been snowy and icy for much of the mid-west and east of the U.S. 02/25/2014 8

9 How about this? This is probably a disaster wherever it occurs. Offsite records storage is a key component of recovering from a disaster like this. 02/25/2014 9

10 How about this? In flood prone areas, preparation in advance can minimize the recovery. 02/25/

11 How about this? If this happened in Florida, definitely a disaster! 02/25/

12 Disasters vary by region What is apt to happen in your geographical area? Storm? Hurricane or Snow? Earthquake? Tornado? Flood? Fire? Terrorism? Power Failure? 02/25/

13 A potential disaster anywhere! It isn t just about natural disasters provided by Mother Nature! 02/25/

14 A potential disaster anywhere! 02/25/

15 Name examples Environmental disasters Natural disasters Man-made disasters 02/25/

16 Why a Disaster Recovery Plan? You never know when, where or how a disaster might occur Your minor emergency may equal another s major disaster Disasters can be environmental, natural or man-made 02/25/

17 Definition of disaster recovery plan A disaster recovery plan (DRP) is a documented process or set of procedures to recover and protect a business infrastructure in the event of a disaster. Ordinarily documented in written form, it specifies procedures an organization is to follow in the event of a disaster. A comprehensive statement of consistent actions to be taken before, during and after a disaster. 02/25/

18 DRP principles Do most important/critical first Define what is most critical Create emergency operating environment Return to regular operating environment Imagine the unimaginable (no electricity, no building, no staff) 10/24/

19 DRP steps 1-5 Obtaining top management commitment Establishing a planning committee Performing a risk assessment Establishing priorities for processing and operations Determining recovery strategies 02/25/

20 DRP steps 6-10 Collecting data Organizing and documenting a plan Developing testing criteria and procedures Testing the plan Obtaining plan approval 02/25/

21 Controversies and Caveats Lack of buy-in Incomplete RTOs and RPOs Recovery time objectives (RTOs) Recovery point objectives (RPOs) Systems myopia Lax security Outdated plans 02/25/

22 RTOs and RPOs Lack of buy-in Incomplete RTOs and RPOs Recovery time objectives (RTOs) rto-rpo.docx Recovery point objectives (RPOs) Systems myopia Lax security Outdated plans 02/25/

23 What should your plan cover? Your location? Your office (assuming multiple locations)? How much of the county government organization? How to integrate your plans with those of other parts of the county government entities? 02/25/

24 What to consider in plans? Paper records Electronic records Microfilm records Office areas Storage areas On-site filing cabinets Off-site warehouse shelving 02/25/

25 Whose records ARE most important? Everyone thinks their records are most important Who decides priorities for recovery? How much money do you have? 02/25/

26 Consider emergency contract Example: Orange County FL contract with Polygon in case something happens! Have renewed 5-year contract twice and used for 2 minor emergencies 02/25/

27 Your vendors Have contact names and numbers for your software and hardware vendors handy (and distributed to key staff) Who can bring what equipment in what priority order? 02/25/

28 Business Continuity Plan (BCP) A comprehensive organizational plan that includes the DRP. Business Resumption Plan Occupant Emergency Plan Continuity of Operations Plan Incident Management Plan Disaster Recovery Plan 02/25/

29 Excellent reference material _recovery_plan _continuity_planning p-buy.htm (Pocket Response Plans) R-Project.aspx (IPER Projects) 02/25/

30 Ready, set, practice! No plan is good unless it has been tested. Every plan needs changes after testing! How have you tested? Desktop Field Simulated Actual (too late!) 02/25/

31 Summary and Conclusion Get copies of DRP from other locales Post yours on the NACRC web site Borrow shamelessly Call 2-3 other locales that have experienced the reality Incorporate their hands-on suggestions Ask them to visit you or ask to visit them Don t put off getting plan created or reviewed/updated Put it on your calendar, step by step 02/25/

32 Thank you for joining us today Questions? Your presenters Carol Foglesong Orange County, FL Larry Burtness Washoe County, NV /25/