Disaster Prevention and RecoveryAeneas Case StudyAeneas Case Study Cont.How Much Do You Know?QuizQuiz ContinuedSlide 7DisastersNaturalEnvironmentalIncitedFacts and StatisticsGetting Started: Contingency PlanningContingency Planning Basics ContinuedCyber Protection: 12 Step PlanCyber Protection ContinuedSlide 17After Plan Is CreatedRecovery PlanningRecovery Planning: Storage OptionsRecovery Planning: Storage OptionsSlide 22Slide 23Slide 24Off-Site Commercial Storage Guidelines (6)Off-Site Commercial Storage GuidelinesSlide 27Quiz AnswersQuiz Answers ContinuedSlide 30ReferencesReferences ContinuedDisaster Prevention and RecoveryEvan Happel, Sheena McLeod, Colin MillisonAeneas Case StudyInternet and Telephone of Jackson TennesseeMay 4, 2003 400 businesses hit by a category F4 tornado with 200 mph winds.11 deaths and $50 million in damagesHow did their disaster recovery plan help?Aeneas Case Study Cont.Backup systemsEmployees worked from remote locations.Less than 72 hours they were back, fully serving the customers needs.Most people never even lost servicePlanned for the worst case scenario.How Much Do You Know?Take out a piece of paper and pencil.Quiz time!See how much you know, then we will give you the answers at the end.Quiz1) True or False- Disaster recovery planning is complex and expensive?2) Which option is not a required item in a disaster recovery plan?–A. Location of recovery facility–B. Computer equipment list–C. List of phone numbers of key people in the company–D. Disaster recovery testing results(www.paeinc.com/book/paefrm.html)Quiz Continued3) True or False- Why should you care about disaster prevention. There is nothing that can be done to prevent a disaster. (www.paeinc.com/book/paefrm.html)4) Reviewing of a disaster recovery plan should take place–A. Once –B. Once a year–C. Twice a year (Total Contingency Planning for Disasters)Quiz Continued5) What are the three types of disasters?6) What percentage of business organizations have a workable disaster recovery plan?(Total Contingency Planning for Disasters)DisastersCan fall into one of three types•1. Natural-Caused by a natural event •2. Environmental-Related to environmental problems•3. Incited-Provoked and urged on(Total Contingency Planning for Disasters)NaturalExamples:FloodEarthquakeTornadoFireHurricane(Total Contingency Planning for Disasters)EnvironmentalExamples:Aircraft crashExplosionContaminationPower(Total Contingency Planning for Disasters)IncitedExamples:ArsonSabotageVandalism(Total Contingency Planning for Disasters)Facts and StatisticsAt least 1/4 of all businesses that close because of disaster never reopen (www.ibhs.org/business_prtection.com)Current estimates put business losses as high as several billion dollar each week to various forms of cyber attacks (www.ready.gov)A company loses around $1 million/hour due to down time or idle employees (Disaster Recovery Planning)Getting Started: Contingency PlanningObjectives of a contingency plan–1)Prevent disaster from occurring–2)Contain the impact of a disaster if one does happen–3)Provide an organized response to a disaster–4)Minimize disruptions to cash flow–5)Provide alternate ways to service customer orders–6)Prevent a significant long-term loss of market share (Total Contingency Planning for Disasters)Contingency Planning Basics ContinuedKnowing what to plan for–Visit FEMA’s website and explore “are you ready”Impact analysis-examine four areas–1)The relative value of the information of infrastructure component–2)The possible public fallout–3)The denial of business potential–4)The ease of attack (Total Contingency Planning for Disasters)Cyber Protection: 12 Step Plan1) Use strong passwords and change them regularly2) Look out for e-mail attachments and internet download modules3) Install, maintain, and apply anti-virus programs4) Install firewallsCyber Protection Continued5) Remove unused software and user accounts; clean out everything on replaced equipment6) Establish physical access controls for all computer equipment7) Create backups for important files, folders, and software8) Keep current software updatesCyber Protection Continued9) Implement network security with access controls10) Limit access to sensitive and confidential data 11) Establish and follow a security financial risk management plan; maintain adequate insurance coverage12) Get technical expertise and outside help when you need it (ready.gov)After Plan Is CreatedCommunicateReassess annually(Total Contingency Planning for Disasters)Recovery PlanningPractical Reasoning–To avoid extended periods of downtime•Idle = big $–To avoid loss of data/information/physical goods•Due to uncontrollable situations, such as terrorist attacksLegal Reasoning–Governmental agencies pass regulations and acts to ensure companies implement a recovery plan •IRS (cross-industry)•Banking, Health Care, and Financial sectors(source: Disaster Recovery Planning)Recovery Planning: Storage OptionsConsolidated Storage–Multiple platforms using a Storage Area Network (SAN) to put all their data into one centralized/secure location–Sold at Dell.com, starting at $1000–Also sold by Hewlett Packard, Hitachi Data Systems, and Data Domain(source: Disaster Recovery Planning)Recovery Planning:Storage OptionsTape Storage–Magnetic tapes/cassettes used to back up data–Most affective when stored off-site–Need to be checked regularly to make sure they are storing data properly–Sold at Dell.com ($699 to $20,000+)–Also at Hewlett Packard, Hitachi Data Systems, and Data Domain (Source: Disaster Recovery Planning)Recovery Planning: Storage OptionsRemote Mirroring–Saving data simultaneously in two or more locations using a high speed Local Area Network (LAN)–Geographically separate to avoid destruction a data by the same disaster–Service provided by RADirect.com (no prices listed)(source: Disaster Recovery Planning)Recovery Planning:Storage OptionsOff-site Cooperative Storage–Sharing a warehouse or facility with another company•Pro: less expensive•Con: less secure, can you trust who you are sharing with?(source: Disaster Recovery Planning)Recovery Planning:Storage OptionsOff-site Commercial Storage–Moving-and-Storage Facilities (tangible files)•U-Haul $45 to $130 per
View Full Document
Unlocking...