Comprehensive Disaster Recovery Plan Development with a Focus on High-Risk Scenarios
E N D
Presentation Transcript
Disaster Recovery: Plan Development Mark Carlson, VP of Information Technology SMI – Carrollton, GA ERICSA 50th Annual Training Conference & Exposition ▪ May 19 – 23 ▪ Hilton Orlando Lake Buena Vista, Florida ERICSA 50 CELEBRATES YEARS OF SERVING FAMILIES: THE MAGIC IS STILL ALIVE ERICSA ERICSA ERICSA ERICSA ERICSA
Topics • Original versus Current BC Plan • Roles and People • Plan Development • Plan Creation • Tabletop Exercises • Recovery Tests • Disaster Events
Original Plan • FEMA Based • Full featured BCP with focus on “the plan” • Components • Risk Assessment • Emergency Communication Plan Quick Reference • Emergency Action Plan • Incident Prevention Plan • Testing Scripts … and more
Current Plan • “Operations” based • Simplified DR plan with focus on high risk and the highest probability outage scenarios • Primary Component • Scenario Tables (including onsite and offsite) • Associated Components • Tabletop exercises • Testing scripts
Roles and People • Business Continuity Team • BC Plan Manager • BC Plan Testing Team • Incident Response Team • Incident Response Coordinator • Recovery Agents…
Roles and People Cont. • Specific Positions • Operational Management • Technical Management • Chief Operating Officer • Personalities
Plan Development: Workflow Update Disaster Disaster Test Plan Creation Tabletop Exercises
Plan Creation Update Disaster Tabletop Exercises Recovery Test Plan Creation
Plan Creation • Survey Operational Environment • Define High Risk, Most Common Scenarios • Organize by Operational / Technical Services • Plug-in Recovery Activities into “Scenario Tables” • Create Tabletop & Testing Script Documents
Scenario Table Structure • Scenario Setup • Description, Services Affected, Mitigation, Symptoms, Response Coordinator • Phase 1 – Impact Assessment • Phase 2 – Recovery • Phase 3 – Restoration
Tabletop Exercises Update Disaster Plan Creation Recovery Test Tabletop Exercises
Tabletop Exercise • Scenario Table Walkthrough • Mental exercise for DR team (Recovery Phase) • Notes appended to the scenario tables • Scenario Table Quality Improvements • BC Manager compiles feedback • Operational validation • Technical details may be added • Contact information verified
Recovery Test Update Disaster Creation Tabletop Exercises Recovery Test
Recovery Test Documents • Testing Scripts • Disaster Recovery Scorecard
Testing Scorecard • Setup & Dismantle Results • Application Results
Disaster Event Update Disaster Plan Creation Tabletop Exercises Disaster Test
Disaster Event • Conference Call • Disseminate the Scenario • Involve the BC Manager • Treat it as a Tabletop Exercise • Update Plan
Remember • Organization is Key • Define operational and technical services to drive plan scenarios and to integrate with processes • Keep it Simple and Practical • The most comprehensive Business Continuity plan is often the least used • Create & tabletop scenarios with a history FIRST • Leverage Personalities and People
Logistics of Disaster RecoveryThe First 24-72 Hours John Popa Xerox State and Local Solutions ERICSA 50th Annual Training Conference & Exposition ▪ May 19 – 23 ▪ Hilton Orlando Lake Buena Vista, Florida ERICSA 50 CELEBRATES YEARS OF SERVING FAMILIES: THE MAGIC IS STILL ALIVE ERICSA ERICSA ERICSA ERICSA ERICSA
A Disaster is Declared…What needs to be done in 24-72 hours? Communicate with Internal Leadership Communicate with State Leadership
Infrastructure Facility Equipment Technology
Refining the Process Rebuilding the Disaster Site
Physical Disasters: Preventative Planning and Recovery Alisha A. Griffin, IV-D Director New Jersey ERICSA 50th Annual Training Conference & Exposition ▪ May 19 – 23 ▪ Hilton Orlando Lake Buena Vista, Florida ERICSA 50 CELEBRATES YEARS OF SERVING FAMILIES: THE MAGIC IS STILL ALIVE ERICSA ERICSA ERICSA ERICSA ERICSA
Disaster: • a sudden calamitous event bringing great damage or destruction • A sudden greatness for time or failure Synonyms • apocalypse, catastrophe, debacle, tragedy
Goals: • Manage Effectively - a potential disaster or only an incident / failure • Ensure Quality Customer Service
Key Components • Ownership • Documentation and Planning • Disaster Recovery • Business Continuity
Ownership • It’s Everyone’s Responsibility • Technical • Program • Communication • Internal • External • Customers