130 likes | 264 Views
Disaster and Recovery. Shawn Kirkland. Overview. Business Impact Analysis System Description/Purpose Impact to business if degradation Estimated Downtime Resource Requirements. Business Contingency Plan Incident Response Policy Purpose Identifying and Reporting Incidents
E N D
Shawn Kirkland Overview • Business Impact Analysis • System Description/Purpose • Impact to business if degradation • Estimated Downtime • Resource Requirements. • Business Contingency Plan • Incident Response Policy • Purpose • Identifying and Reporting Incidents • Mitigation and Containment • Questions?
Shawn Kirkland Business Impact Analysis • Purpose • Determine mission/business processes and recovery criticality. • Identify resource requirements. • Identify recovery priorities for system resources. • System Description/Purpose • Impact to business if degradation • Estimated Downtime • Resource Requirements.
Shawn Kirkland System Description • Operating System • Microsoft Windows Server 2008 R2 • Application • Microsoft SQL Server 2008 Enterprise Edition • Hardware • Dell R720 • Location • Server Rack on second floor server room. • Connection • System Administrator connects via local area network. • Other users connect remotely • DR Method • 1 Full backup weekly and dailies every day. • 3 hours after close of business.
Jamarcus White Impact • Impact values • Severe = $100,000 • Moderate = $50,000 • Minimal = $10,000
Jamarcus White Estimated Downtime • MTD • RTO • RPO
Garrett Grey Resource Requirements
Garrett Grey Business Contingency plan • CEO consults department leads to consider time for recovery and determine need for business contingency. • CEO announces business contingency is in effect. • CEO works with local authorities to ensure human safety as needed. • Network managers and technicians move network operations to warm site. • IT managers and technicians assess ability to move existing systems to warm site. • IT managers and technicians requisition new equipment to be delivered to warm site as needed. • Technicians validate warm site's network infrastructure and telecommunications capabilities. • IT managers and technicians install/restore systems at warm site. • Technicians connect systems to warm site network. • Technicians update public domain name records. • Technicians inform customer service representatives of changes to telephone numbers, public IP addresses, etc. • Customer service representatives contact customers with new contact information.
Garrett Grey Incident Response Policy • Purpose • Scope • Definitions
Dallas Jones Purpose • Purpose • Scope • Definitions • Information Systems • Security Incident • Physical Security
Dallas Jones Identifying and Reporting Incidents • Employees • IT Technicians • Severity Levels • Level 1 • Level 2 • Level 3 • Level 4
Dallas Jones Mitigation and Containment • Eradication • Restoration • Log Of Security Incident • Annual Report