What follows is, possibly, relevant to any disaster as much as to a cataclysmic event in an Information System. To convey the idea rather than a standard specimen, only the frame has been sketched in; to be interpreted, as applicable, to an organization or a situation.
This submit deals with aspects: the tasks in planning; and the components to a plan.
Disaster Recovery Planning Tasks
Disaster Recovery Plan tasks can be visualized to be of six major phases, as below:
- Definition Phase;
- Functional Requirements Phase;
- Design Phase;
- Implementation Phase;
- Testing and Activation Phase;
- Maintenance Phase.
Phase-I
In this phase the parameters of all that is to be included is assessed and put in perspective. It would consist of things like.
- The objectives;
- Terms of reference;
- Planning perspective.
Phase-II
Is possibly the most critical phase to include such sections and activities as
- Making an inventory of resources to be included; e.g. hardware, software, telecommunications components, data life cycles, also actions or movement like date Conversion, Movement, Physical as well as electrical; also procedures and Standard Operating Practices;
- Critical appraisal of the Applications and the installation against recovery Objectives;
- Deciding what is to be covered in the plan;
- Establish priorities based on the criticality of time frames, threats and Organization’s performance.
Phase-III
Is particularly significant in a plan being prepared for the first time 9Note the reference to equipment alternatives) and would include such things as:-
- Identify design alternatives;
- Specify in detail, the alternatives e.g. hardware, software, telecommunication, staffing procedures etc;
- Identify potential vendors: if purchase necessary;
- Analyze risks in various alternatives as well as costs involved to improve to desired levels;
- Select the acceptable design: including financial approvals.
Phase-IV
Would put into action the desired and designed Plan and would be made up of:
- Acquisition of land, building, utilities, hardware, Telecommunications lines etc;
- Negotiate and sign contracts with vendors, Consultants;
- Writing of Manual of Procedure;
- Training of personnel;
- Site preparation;
- Development of a test plan;
- Development of a Maintenance Plan.
Phase-V
Is equivalent to a system test run in computer jargon. It will consist of three Segment as below:-
Segment 1: Paralleling
ADVERTISEMENTS:
Segment 2: Live Testing
Segment 3: Maintenance Testing.
Segment 1
In this, all activities external to the Complex in Disaster Recovery plan are tested or triggered, such as:-
ADVERTISEMENTS:
a) Scheduling all ‘on call’ personnel and practicing the drill;
b) Triggering arrangements external to the complex;
c) Practice ‘back-up’ by invoking them and working job;
d) Validate adequacy of back-up by comparing with a live job selected at random;
ADVERTISEMENTS:
e) Correct errors in plan if any;
f) Repeat(d), (e) till snags, complications and so on are removed and simple, streamlined Standard Operating procedure emerges.
Segment 2
“Set the dogs free” and simulate a breakdown; the following actions will be included:
ADVERTISEMENTS:
g) Attempt to run using the plan only;
h) Correct defects, if detected: retain if necessary and review Standard Operating procedures;
i) Repeat (c) to (h) till drill is free of all bugs, and is simple, reliable, economical and effective.
Segment 3
ADVERTISEMENTS:
Is in the best traditions of Management Science and is invoked on two occasion; as a routine, and whenever there is a change as below:
j) Repeat (g) to (i) annually;
k) Repeat (c) to (f) whenever there is a revision to Plan.
Phase-VI
It is not strictly a part of the planning, as no tasks are performed. It is a development of philosophies during the implementation phase and applied as on-going activity. The stress will be on the software and in this connection, two books must be maintained : software Change authorization and software packages. Other items needing constant maintenance are:-
- Names, title, Media etc;
- Back-up library (data systems, Application Software etc.);
- Documentation and Standard Operating Procedures.