Notesale: Turn your study into money

Document Preview

Extracts from the notes are below, to see the PDF you'll receive please use the links above

---

Table of Contents
BUSUNESS CONTINUTIY AND DISASTER RECOVERY PLAN REPORT OF ITDEPARMENT
...
2
1
...
2
2
...
3
3
...
3
4
...
4
Load balancing business continuity
...
5
1
...
5
2
...
6
3
...
6
4
...
6
5
...
7
6
...
7
7
...
8
8
...
8
9
...
9
10
...
9

BUSUNESS CONTINUTIY AND DISASTER
RECOVERY PLAN REPORT OF IT-DEPARMENT
In an IT context, business continuity is the capability of your
enterprise to stay online and deliver products and services during
disruptive events, such as natural disasters, cyber-attacks and
communication failures
...


Start with a business continuity plan
Business continuity management starts with planning how to
maintain your critical functions (e
...
, IT, sales and support)
during and after a disruption
...
Threat Analysis
The identification of potential disruptions, along with potential
damage they can cause to affected resources
...
Role assignment
Every organization needs a well-defined chain of command and
substitute plan to deal with absence of staff in a crisis scenario
...

Internal departments (e
...
, marketing, IT, human resources)
should be broken down into teams based on their skills and
responsibilities
...


3
...

Your strategy should include:


Methods of communication (e
...
, phone, email, text messages)




Established points of contact (e
...
, managers, team leaders,
human resources) responsible for communicating with employees
Means of contacting employee family members, media,
government regulators, etc
...
Backups
From electrical power to communications and data, every critical
business component must have an adequate backup plan that
includes:

Data backups to be stored in different locations
...
If necessary, offline copies should be kept as well
...

Backup communications (e
...
, mobile phones and text messaging
to replace land lines) and backup services (e
...
, cloud email
services to replace on-premise servers)
...
This provides redundancy in the event of a server failure,
ensuring continuous application uptime
...
Health monitoring tracks server
availability, ensuring accurate load distribution at all times—
including during disruptive events
...
Despite your best efforts, some
disasters simply cannot be mitigated
...

1
...
Inappropriate data center location
3
...
High costs of DR technology
5
...
Time Do A Thorough IT Assessment and Inventory
7
...
Backup Encryption is a MUST
9
...
Ensure you’re Using Air Gapped Backups

1
...

Downtime results in lost revenue and productivity, so it is in
every business' best interest to maintain peak uptime
...

However, many companies do not fully implement a DR plan
until it is too late – they react to disastrous situations, rather
than plan for them
...
While the direct costs can be
high, the peripheral costs – lost data, reduced productivity and
a sullied reputation – can also take a staggering toll
...
Integrating a DR plan with a cloud
service provider can help optimize recovery planning and
procedures, minimize downtime and help alleviate many of the
additional DR risks that businesses face
...
Inappropriate data center locations
While there is no absolute formula for choosing an optimal
secondary site, geographic diversity is essential
...
Just the research involved in finding the ―ideal‖
location for the secondary site can be staggering – it must be
close enough for employees to travel to for testing and
recovery needs, yet far enough away to avoid being impacted
by the same outage as the production site
...

3
...
However, skilled personnel
are critical to maintaining an effective DR initiative
...
When
resources are stretched, day-to-day work can take precedence
over testing and maintenance, especially when significant
travel time is involved
...
A cloud service provider can supplement a DR plan to
provide onsite experienced staff to test and monitor systems
and react to various risks or outages – freeing internal staff to
conduct their day-to-day business objectives
...
High costs of DR technology

Disaster recovery requires two locations - and the costs of a
secondary site with leading-edge technology and a high level of
redundancy can be exorbitant
...

A cloud service provider providing disaster recovery, or DRaaS,
can offer state-of-the-art technology, redundancy and DR best
practices now and in the future
...

5
...
A cloud service provider can offer onsite, trained staff to quickly respond to and initiate recovery –
minimizing downtime
...

6
...
This will
include on-site hardware and software, and also all the cloudbased systems and services that your business operations rely
on
...

If the DRP assessment is not done or is incomplete, an
organization may find it difficult to recover critical processes or
data in the event of an IT disaster
...

7
...

With disaster recovery planning, the formal strategy generation
process begins when an IT engineer takes the information from
the assessment and examines it to see what tools and tactics
will work best for your scenario and business operations
...

The most cost-effective technology disaster recovery plan
option for a business may be to migrate to the cloud instead of
maintaining physical off-site data centers (known as disaster
recovery sites) for DR plans
...

An internal disaster recovery site might be a better fit for the
recovery strategy when companies have greater information
requirements and aggressive recovery time requirements
...

8
...

When data is encrypted both in transit and at rest it is useless
to a criminal
...

9
...

Each member of the management team and all staff must
understand their role in keeping processes within the umbrella
of protection provided by the IT disaster recovery plan
...

As part of disaster recovery management, an organization
must invest in training employees both in cyber security
awareness and in their individual roles (the steps they should
take) if disaster strikes
...
Ensure you’re Using Air Gapped Backups
In Researching procedures create air-gapped backups, keeping
cybercriminals from jumping laterally from your live systems to
your backups if they enter your network and instigate a
disaster in the active data center
...


This ensures an organization can recover its data within the
range of its RPO

---