Plan de continuidad de negocios

Unit Guide to Disaster Recovery Planning

Unit Guide to Disaster Recovery Planning Complete

3/12/2001

1

Unit Guide to Disaster Recovery Planning

Executive Summary:
Unit Guide to Disaster Recovery Planning
The University has recognized the significance of each unit producing and maintaining Disaster Recovery Plans in order to prepare and address how each unit will continue doingbusiness in the event of a severe disruption or disaster. The Disaster Recovery Planning Team, coordinated by the Client Advocacy Office (CAO) will be the primary resource for assisting each unit with the DRP initiative, by providing education, awareness and tools. The team will work to identify, collect, and organize information and tools for disaster recovery planning and documentation, anddisseminate all information to University units in an effective and easily understood manner, so that unit plans may aggressively be developed, tested, distributed, and a copy provided to the CAO for central tracking purposes. After the initial endeavor, the responsibility for providing support will transition from the DRP Team to the Client Advocacy Office.

Definitions:
Business Continuity is anall-encompassing term covering both disaster recovery planning and business resumption planning. Disaster Recovery is the ability to respond to an interruption in services by implementing a plan to restore an organization's critical business functions. Both are differentiated from Loss Prevention Planning, which comprises regularly scheduled activities such as system back-ups, system authenticationand authorization (security), virus scanning, and system usage monitoring (primarily for capacity indications). The primary focus of this effort is on Disaster Recovery Planning.

Developing the Plan: The following ten steps, more thoroughly described in the document that follows, generally characterize disaster Recovery Plans:
Phase I – Information Gathering 1. Organize the Project 2. ConductBusiness Impact Analysis 3. Conduct Risk Assessment 4. Develop Recovery Strategy 5. Review Onsite and Offsite Backup and Recovery Procedures 6. Select Alternate Facility Phase II – Writing and Testing the Plan 7. Develop Recovery Plan 8. Test the Plan Phase III – Maintaining and Auditing the Plan (Ongoing) 9. Maintain the Plan 10. Perform Periodic Audit

3/12/2001

2

Unit Guide toDisaster Recovery Planning

Purpose and Scope for a Unit Disaster Recovery Plan
The primary reason for a unit to engage in Disaster Recovery Planning is to ensure the ability of the unit to function effectively in the event of a severe disruption to normal operations. Severe disruptions can arise from several sources: natural disasters (tornadoes, fire, flood, etc.), equipment failures, processfailures, from mistakes or errors in judgment, as well as from malicious acts (such as denial of service attacks, hacking, viruses, and arson, among others). While the unit may not be able to prevent any of these from occurring, planning enables the unit to resume essential operations more rapidly than if no plan existed. Before proceeding further, it is important to distinguish between loss preventionplanning and disaster recovery planning. The focus of loss prevention planning is on minimizing a unit's exposure to the elements of risk that can threaten normal operations. In the technology realm, unit loss prevention planning includes such activities as providing for system back-ups, making sure that passwords remain confidential and are changed regularly, and for ensuring operating systemsremain secure and free of viruses. Disaster recovery planning focuses on the set of actions a unit must take to restore service and normal (or as nearly normal as practical) operations in the event that a significant loss has occurred for critical functions. A systematic disaster recovery plan does not focus unit efforts and planning on each type of possible disruption. Rather it looks for the...