90 likes | 107 Views
Business Continuity A matter of survival Session 4 Defining a recovery strategy. Stage 2 - review recovery options. Review existing controls - disaster prevention measures backup, recovery and storage Research system recovery options - non-technical options technical options
E N D
Business ContinuityA matter of survivalSession 4Defining a recovery strategy
Stage 2 - review recovery options • Review existing controls - • disaster prevention measures • backup, recovery and storage • Research system recovery options - • non-technical options • technical options • Report to management
Phase 1 : disaster prevention • Object - to reduce likelihood of having to invoke the plan • Basic disaster prevention controls - • security awareness campaign • physical access controls • intruder detection • fire prevention, detection and suppression • personnel - key staff/dismissal procedures • backing up computer software & data
Backup, recovery and storage • No amount of continuity planning will replace lost data!
Backing up requirements • Need to back up - • data • applications software • operating system • manuals/system configuration • Secure storage - • on-site • off-site • Periodically test system recovery
Phase 2 - recovery options • Non-technical options- • “do nothing” • clerical backup • insurance • leasing • multi-location • outsourcing
Recovery options (cont’d) • Technical options - • mirrored systems • hot/warm/cold start • mobile • reciprocal agreement • fortress aproach • Build or buy?
Phase 3 - report to management • Recovery strategies : comparative costs - • immediate - • accommodation, software, equipment • develop plan, training & testing • life-time - • licenses & subscriptions • change control implications • awareness training • updating, testing and reviewing • Recommendation • Plans and resources for next stage
Summary • Reduce liklihood of a disaster • Backup, recovery and media storage • Testing system recovery • Disaster recovery strategy - • non-technical options • technical options • Report to management - • costed alternatives • recommended disaster recovery strategy