In addition to assisting with the disaster planning process, it is hoped this document will also::

Transcription

1 First Step f a Disaster Recver Analysis: Knwing What Yu Have and Hw t Get t it Ntes abut using this dcument: This free tl is ffered as a guide and starting pint. It is des nt cver all pssible business scenaris. Any recmmendatins we make are based upn wrking knwledge f prducts at the time writing, and may nt be the best slutin fr yur business. Please be aware f security at all times. Fr example, nce yu start filling this ut, d nt send this t smene else ver nn-ssl . When yu are dne filling ut the dcument, we highly recmmend yu passwrd prtect it and either write the passwrd dwn in a safe place r nte it in a passwrdkeeper tl. Yu can print ut this dcument, but be aware that the frm bxes can hld mre lines f text than what can be displayed when printed. In additin t assisting with the disaster planning prcess, it is hped this dcument will als:: 1. give yu a central place t keep netwrk critical data in a frmat that can be stred in a secure clud envirnment and made readily available t thers as apprpriate, 2. create a critical passwrd list s that when yu need t change passwrds, the task is streamlined and critical accunts are less likely t be verlked, 3. and, help yu knw yur netwrk better s that yu might see pints in yur netwrk that need better recrd keeping, prcesses, and/r backups. Critical Systems Vendrs Phne (vice) service - VIP (Vice ver IP)? POTS (Plain Old Telephne Service)? Bth? Wh handles yur telecmmunicatins, and hw many cmpanies are invlved? If mre than ne number, hw many lines? What are the numbers? Any dedicated t a special functin, like fax? Prvider Cntact Inf Yur custmer inf (custmer number and any identifying infrmatin they might require, such as last fur digits f billing credit card, call-in PIN, and/r username and passwrd fr nline lgins.) Techngizm P.O. Bx Dallas, TX

2 Internet service (there may be mre than ne prvider, i.e., Time-Warner cable fr internal use, Clear wi-fi fr public use and backup) What kind f service(s) d yu use? (Cable, T1, DSL, Fiber, Wi-fi, etc.) Prvider Cntact Inf Yur custmer inf (custmer number and any identifying infrmatin they might require, such as last fur digits f billing credit card, call-in PIN, and/r username and passwrd fr nline lgins.) Website Hsting Hsting cmpany cntact inf Yur custmer inf: Lgin URL, Username and Passwrd: Any ther custmer inf yu have (custmer number and any identifying infrmatin they might require, such as last fur digits f billing credit card, call-in PIN) Other hsting inf: cpanel, hsting cntrl panel, and/r FTP lgins If yu have a website that yu can lg int directly (like a Wrdpress, Wix, r Yah site), list yur lgin inf here: Techngizm P.O. Bx Dallas, TX

3 Service Are yu using the service that cmes with yur webhsting package? IF yu have separate service frm yur hsting, r if sme f yur business s are nt assciated with yur dmain (i.e., gmail r yah), fill ut the inf belw: Yur custmer inf fr Dmain-related s: Lgin URL, Username and Passwrd: Any ther custmer inf yu have (custmer number and any identifying infrmatin they might require, such as last fur digits f billing credit card, call-in PIN) Yur lgin inf fr nn-dmain related s (such as gmail r yah): DOMAIN - this is VERY imprtant t knw and keep updated. If yur dmain registratin expires, all f yur ther dmain-related services will g dwn (website, dmain-assciated ), even if they are nt managed by the same cmpany as yur dmain registrar. Additinally, yu have a shrt grace perid (varies by registrar) t redeem an expired dmain. If yur dmain is a versatile dmain (culd easily be used by smene else), yur likelihd f regaining cntrl f it after the grace perid expires is very small. Which dmains d yu have that are assciated with a website and/r ? Which dmains d yu have fr marketing purpses (r ther purpses) that are pinted t anther dmain (i.e., when yu type example.net int yur brwser, it ges t example.cm.) Techngizm P.O. Bx Dallas, TX

4 Dmain Registrar Cntact Inf - (yu may have mre than ne if yu wn multiple dmains) Yur custmer inf fr each dmain registrar yu use: Lgin URL, Username and Passwrd: Any ther custmer inf yu have (custmer number and any identifying infrmatin they might require, such as last fur digits f billing credit card, call-in PIN, security questin answers, etc.) Access Cntrl - Wh has access t yur critical data? Critical Systems Access - Emplyees, Partners, Cntractrs, Vendrs Smetimes peple wh are n lnger assciated with yur cmpany may still have access t yur critical systems. Think carefully abut wh might have current passwrds (and ther access data) t these systems. Ideally, passwrds shuld be changed when cntractrs are dne with a prject (i.e., web develpers r phne installers) r when an emplyee leaves wh had access t critical passwrds. Even if yu cmpletely trust these individuals, they may unwittingly leave ld inf expsed t peple whm yu can't trust. Services fr which yu shuld cnsider changing the passwrd when key peple leave are: Server and data access, via remte (i.e., LgMeIn r VPN) Server and data access via wireless netwrk (i.e., can cmpany files be accessed wirelessly frm a nearby lcatin such as the parking lt?) Dmain, Service, and Web Hsting Phne Service Internet Service Server and business critical cmputers lgins (recmmended, thugh nt always necessary) Techngizm P.O. Bx Dallas, TX

5 Persn with passwrd access (Emplyee, Partner, Cntractr, Vendr) Still Active? Respnsible fr and/r Access t: Techngizm P.O. Bx Dallas, TX

6 Internal and External Netwrks Internal Netwrk: Cmputers cnnecting t each ther, r t a server. Hw d yu share data in yur ffice? Fr example, d yu have a file server where yu stre yur cmpany spreadsheets and dcuments, and everyne saves their cmpany wrk there? Des sme cmpany data get saved n individual cmputersnte? D they cnnect t it via a data cable (wired) r wirelessly (a wireless ruter)? Explain yur set up belw include ruter wireless passwrds and access infrmatin (admin username and passwrd) nte if yu give ut yur wireless passwrd t nn-business peple r devices (like cell phnes) External Netwrk: Cmputers cnnecting t the internet, and nt thrugh yur internal netwrk. Sme ffices ffer wireless cnnectin t the internet in a way that des nt allw thse using the cnnectin t see any f the cmputers r servers in the ffice. If yu have an external netwrk like this, explain hw it is set up, including the ruter wireless passwrd and the ruter admin username and passwrd. Hardware and Data Prtectin The number ne envirnmental threat t data is hardware failure due t electrical events. S, the first thing t check is hw yur critical data systems are prtected. Uninterrupted Pwer Supplies (UPS) and Surge Prtectin Pwer Strips NOTE n UPS's: Cst differences in UPS devices are usually due t hw many amps they handle, and what kind f features they have. Des it tell yu when the filter is wearing ut? The battery? The life expectancy f a UPS is up t three years (r tw fr bad pwer lcatins) befre cmpnents need t be replaced. Nt all equipment needs t be n a UPS, but expensive ruters, expensive printers, businesscritical cmputers, and servers definitely d. List the equipment yu are currently using, and as best yu can, nte the type, mdel, and age f each. Als nte whether devices are plugged int a UPS r a surge-prtectr strip. Techngizm P.O. Bx Dallas, TX

7 Lcatin Device (type, mdel, age) What's plugged int it Techngizm P.O. Bx Dallas, TX

8 Backups BASIC BEST PRACTICES: All business data shuld be backed up t smewhere stable; an nsite backup system needs t be prtected by a healthy UPS, and external harddrive age needs t be mnitred carefully. We recmmend changing ut external strage drives every tw-three years. Critical business data shuld be backed up t at least tw stable places, with a strage cpy ffsite. Archives are useful in the rare event a data crruptin r prblem is reflected bth the current backups, r if yu need pre-cnversin data (fr example, if a migratin t a new sftware tl went badly.) If yu use a prgram installed n yur cmputer fr yur (like Outlk r Thunderbird), yur backup plan needs t include backing up yur strage file (i.e., backing up the.pst files used by Outlk) D sme research befre chsing an nline backup service. Each ne has prs and cns, s yu will want t chse ne that fits yur business needs. If yu want t backup a large amunt f data (500G r mre), be prepared - it is expensive. As f 9/12/2014, clud (nline) backup systems we recmmend are Mzy and Carbnite fr smaller data needs, and Datt fr large data needs. There are many gd nsite backup systems. Fr a small business wner with strage needs f less than 2T, we recmmend using a highly rated external harddrive with Macrium Reflect sftware (a separate purchase). HOW TO USE THE TABLE BELOW: Using ne sectin fr each backup, dcumenting what is being backed up and hw. In "Ntes", include any infrmatin that is nt cvered by the ther fields but shuld be remembered (i.e, encryptin drive passwrds, web access URL's, etc.) Techngizm P.O. Bx Dallas, TX

9 Techngizm P.O. Bx Dallas, TX

10 NOTES: Techngizm P.O. Bx Dallas, TX