Disaster Recovery Planning
By Ed Duncan, Consultant, SBSC, MCSE, MCSA
Here in south Florida, we are approaching the most active months of the hurricane season. Hopefully your company has plans in place in the event a hurricane or other natural disaster should occur. If not then don't despair, this month's article will cover a few tips to help you get prepared.
Prepare a risk assessmentWhen doing your disaster recovery planning, prepare for other contingencies besides natural disasters. There are risks to your company in the form of theft, equipment failure, power outages, communication outages, AC or plumbing problems, workplace violence, neighborhood safety hazards, and more. Determine the impact to your business using the various scenarios listed, and the costs required keeping your risk exposure to a minimum.
Prioritize business processes and functions
Prioritize different departments of the business focusing in on those systems and processes that are vital to the operation of the business. Any areas that are essential to the incoming cash flow of the business should be given top priority over other areas of the business. Determine how long the business can survive without specific departments, business processes, or system applications. Look at alternative ways to get these key areas back up and running in a limited fashion.
Get IT involved early
Having your IT support people involved early on in disaster recovery planning is very important. They can help with planning strategies to get voice and data communications rerouted and back up as quickly as possible after a disaster. Hurricane proof colocation facilities are available in south Florida. Keeping your critical servers in these facilities may make sense if your business can't afford to be down for an extended period of time. These facilities can become extremely busy during the imminent approach of a hurricane, so be sure to work with an account representative well in advance to have space reserved for your equipment and personnel.
Keep a copy of important documents
You should plan to keep a binder, a disc, or flash drive with important information in the event your office is damaged or inaccessible. This binder at a minimum should contain important information such as staff emergency contact information, capital asset inventory, inventory of computer equipment, copies of maintenance agreements, insurance information, vendor contact numbers with your account information, and your disaster recovery plan itself. Any documentation that is important to getting your business back up and running should be included. Also if you are not doing online data backups of your servers, you should make sure you have a complete tape or external drive backup of the data stored offsite in a secure location.
Communicate plans to your staff
You may know all the details of your recovery plan, but unless you are planning to do all the work yourself, the plans are useless if not communicated properly to your staff and coworkers. Make sure your staff is fully aware of the recovery plans, and what their specific roles will be during the recovery effort.
Test your recovery plans
Remember back in grade school, about 2 or 3 times a year, the school ran fire drills. The same concept applies here. Having a disaster recovery plan is great, but if it has never been tested, there is a high probability that it won't work as expected. You don't want to be in a situation of finding out that there is a critical flaw in the plan when the disaster is occurring, so it is important to run drills at least once a year to make sure everything will work according to plan.
The primary goals of a disaster recovery plan is to minimize time needed to recover from a disaster, and a guide to follow for getting the business back up and operating in a limited state after the disaster has passed. No plan is perfect and it should be reviewed by you and members of your team periodically and adjustments made when necessary.