SACRAO 2012 T2.08 Technical Disaster Recovery

1. SACRAO 2012 T2.08 Technical Disaster Recovery 2012 SACRAO

2. National Park Community College Hot Springs, AR 4,156 Students 231 Faculty and Staff 173 Adjunct Faculty Dr Allen B Moody Associate Dean for Academic Affairs bmoody@npcc.edu

3. April 9, 2009 Rich Mountain Community College

10. Rich Mountain Community College • Classes at the Mena campus resumed at Rich Mountain Community College April 20, 2009 – 11 days later. • 70% of classes could be held on campus. Rich Mountain is using two separate locations for the other thirty percent of classes. • Chancellor Wayne Hatcher reported that the Arkansas Disaster Insurance was providing excellent coverage with up to eighty percent or more coverage of expenses for damage. • ADHE has requesting additional funds through the Federal Stimulus program. • AATYC member colleges have helped the campus with its immediate classroom/computers needs and related staff support. • The biggest concern at the present time is for the faculty/staff and students that suffered due to the tornado. Eight (8) faculty/staff members lost their homes and belongings. We are not sure of the total number of students that suffered a loss. • Rich Mountain is committed to providing counseling to those faculty/staff and students in need. • Rich Mountain has set-up a task force of four (4) to five (5) individuals to coordinate the efforts to collect furniture and other necessary supplies for those that lost everything in the storm.

11. 2009 LegislationThe Arkansas Campus Security Enhancement Act Task Force Timeline Sep.1, 2010Provide Written Review & Guidelines Aug.19, 2009First Meeting at ADHE Sep.1, 2009Task Force to Receive Safety Plans From Each Institution For Review 2009 2011 The Task Force shall meet at least quarterly; The Task Force shall cease to exist by December 31, 2010

13. Methods to initiate campus-wide emergency notification (%)

14. Need a continuity of operations plan

15. Step One: Policy • Without policy, having technology in place is pointless • What policies are needed? • Campus emergency response plan • Information Technology emergency response plan • Departmental emergency response plan

17. Campus Emergency Response Plan • Public document usually maintained by Campus Police/Public Safety/Security department • Includes public versions of all departmental and administration wide disaster recovery plans • Details the following, at a minimum: • Definition of “major” and “minor” emergencies and “disaster” • Roles of all of the major players • Emergency response command center • Who is authorized to respond to news media • How rebuilding after an emergency/disaster will be handled • Training and rehearsal • Reviewed annually

21. What is Data? • Paper records • Digital records • All that stuff you have in your head but never put on paper • How is it stored? • Filing cabinets, cardboard boxes, under the coffee cup • CD/DVD • Hard drive • Network storage • “The Cloud”

22. Replication of data to an off-site location, which overcomes the need to restore the data (only the systems then need to be restored or synchronized). This generally makes use of network attached storage (NAS) or storage area network (SAN) technology Replication of data to an off-site location, which overcomes the need to restore the data (only the systems then need to be restored or synchronized). This generally makes use of storage area network (SAN) technology

23. NAS vs. SAN • NAS = Network Attached Storage • External hard drive connected to a network • Small hard drive array connected to a network • Accessed via a network drive icon on the computer • NOT an enterprise level solution • SAN = Storage Area Network • Large storage array • Used by servers • Users don’t even know it’s there • Very expensive, massive storage capacity

24. Cloud Storage High availability systems which keep both the data and system replicated off-site, enabling continuous access to systems and data Online backup systems are typically built around a client software program running a schedule, typically once a day, and usually at night. The program collects, compresses, encrypts, and transfers the data to the remote backup service provider's servers

25. “The Cloud”

26. Phase I – Analysis and Evaluation Include timeline, resources, and expected output Risk Assessment and Business Impact Analysis Onsite and Offsite Backup and Recovery Procedures Alternate site location selection Phase II – Plan Development and Testing Development of Disaster Recovery Plan Testing the plan Implementation of the DRP Phase III – Monitoring and Maintenance Maintenance of the Plan through updates and review Periodic inspection of DRP Documentation

28. Immediate Reaction for the Office  Evacuation of the Facility  Secure critical data  Gather all work in process and all unprocessed work Key personnel to assist in evacuation  List of disabled, pregnant, individuals or those who have medical problems  Gather at a Pre-Determined location  Department head counts  Notification of missing staff  Remain in location until called upon for disaster relief or released

29. Recovering from a Disaster A. People always come first Are you safe Is your family safe Are your co-workers safe B. Place Is your home safe/stable Do you have transportation Is your campus accessible Is your office accessible C. Infrastructure Is there power Do the phones work Is there Internet Did IT survive D. Systems Procure replacement hardware Install hardware/software Recover data from backup Test and return to service