10/11/2007 1

Business Continuity and Disaster Recovery Planning

CMPE296T Fall 2007CMPE296T Fall 2007

Final ProjectFinal Project

Professor Richard SinnProfessor Richard Sinn

Team MembersLi YangLi Yang

Smita UniyalSmita Uniyal

10/11/2007 2

Agenda

Introduction Examples of Threats Objective Of DRP Business Continuity Planning Business Impact Analysis Disaster Recovery Plan Testing and Simulation Globalization Conclusion

10/11/2007 3

Introduction

What is business continuity and disaster recovery? An organizational effort to respond to potential

threats that may render critical resources useless Disaster recovery and business continuity

planning are processes that help organizations prepare for disruptive events.

10/11/2007 4

Examples of Threats

Technological Computer crashes, network failure, malware

infections, data theft

Human Terrorism, theft, vandalism, political unrest

Natural Fires, floods, earthquakes, storms, disease

Objective of DRP

Minimizes system downtime and recovery time. Minimizes the risk of permanent loss of core

assets or the entire organization. Minimizes confusion during a disaster. Minimizes decision-making during a high-stress

time when emotions will be running high. Provides a platform in which to simulate various

disaster recovery scenarios.

10/11/2007 5

Business Continuity Planning

Allocate available budget for essential organization functions.

Plan a failover mechanism. Prepare a Disaster Recovery Plan Prepare a Business Resumption Plan Prepare a Business Recovery Plan Prepare a Contingency Plan

10/11/2007 6

10/11/2007 7

Business Impact Analysis

Procedure to gather information on crucial systems and processes

Basic areas to cover Contingency plan for absence of key personnel Simulate emergency scenarios Develop crisis communications with employees,

customers, suppliers, outside world For partnership with local police, firefighters, etc. Continuously assess and improve performance

10/11/2007 8

Disaster Recovery Plan

Addresses 3 key areas Prevention: pre-disaster Continuity: during a disaster Recovery: post-disaster

10/11/2007 9

Disaster Recovery Plan

Consists of Clear concise procedures listed chronologically Don’t assume people carrying out procedures are

those who wrote them Maintain up-to-date contact list Specify time it takes to carry out procedures Update DR plan on a regular basis

Testing and Simulation

No amount of pre-planning can realistically prepare for the actual disaster itself

Testing and simulation are useful methods to verify the effectiveness of DR plans

10/11/2007 11

Globalization

A global workforce and supply chain forces corporations to monitor many sources of threats

Example Floods in India SARS epidemic in China

Solutions Technology Insurance

10/11/2007 12

Conclusion

Disasters are always on the horizon; therefore every organization must have a plan to deal with it

Globalization makes DR planning more critical Organizations must consider all aspects of business

– especially personnel Good DR and BC planning does make a difference!

10/11/2007 13

[1] http://www.scotland.gov.uk/Resource/Img/94471/0023282.gif [2] Chin, P. (2005). Introduction to Disaster Recovery Planning.

Retrieved November 23, 2007, from http://www.intranetjournal.com/articles/200503/ij_03_24_05a.html

[3] http://searchstorage.techtarget.com/sDefinition/0,,sid5_gci801381,00.html

[4] Mitchell, R. L. (2007). Four Disaster Survival Tips from Northrop Grumman. Retrieved November 25, 2007, from http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9030438&intsrc=cs_li_latest

[5] Michael, G. (2006). Bombings, Floods, Plagues – Nothing slows India’s Outsourcing Boom. Retrieved November 26, 2007 from http://geekwhisperer.wordpress.com/2006/09/14/bombings-floods-plague-%E2%80%93-nothing-slows-india%E2%80%99s-outsourcing-boom/

References