Business Continuity A matter of survival Session 4 Defining a recovery strategy

1. Business ContinuityA matter of survivalSession 4Defining a recovery strategy

2. Stage 2 - review recovery options • Review existing controls - • disaster prevention measures • backup, recovery and storage • Research system recovery options - • non-technical options • technical options • Report to management

3. Phase 1 : disaster prevention • Object - to reduce likelihood of having to invoke the plan • Basic disaster prevention controls - • security awareness campaign • physical access controls • intruder detection • fire prevention, detection and suppression • personnel - key staff/dismissal procedures • backing up computer software & data

4. Backup, recovery and storage • No amount of continuity planning will replace lost data!

5. Backing up requirements • Need to back up - • data • applications software • operating system • manuals/system configuration • Secure storage - • on-site • off-site • Periodically test system recovery

6. Phase 2 - recovery options • Non-technical options- • “do nothing” • clerical backup • insurance • leasing • multi-location • outsourcing

7. Recovery options (cont’d) • Technical options - • mirrored systems • hot/warm/cold start • mobile • reciprocal agreement • fortress aproach • Build or buy?

8. Phase 3 - report to management • Recovery strategies : comparative costs - • immediate - • accommodation, software, equipment • develop plan, training & testing • life-time - • licenses & subscriptions • change control implications • awareness training • updating, testing and reviewing • Recommendation • Plans and resources for next stage

9. Summary • Reduce liklihood of a disaster • Backup, recovery and media storage • Testing system recovery • Disaster recovery strategy - • non-technical options • technical options • Report to management - • costed alternatives • recommended disaster recovery strategy