130 likes | 214 Views
Establishing the IT Disaster Recovery Planning Construct. Christopher Kadlec Georgia Southern University ckadlec@georgiasouthern.edu. Jordan Shropshire Georgia Southern University jshropshire@georgiasouthern.edu. Agenda. Motivation What ITDRP is and is not Methods Definition
E N D
Establishing the IT Disaster Recovery Planning Construct Christopher Kadlec Georgia Southern University ckadlec@georgiasouthern.edu Jordan Shropshire Georgia Southern University jshropshire@georgiasouthern.edu
Agenda • Motivation • What ITDRP is and is not • Methods • Definition • Dimensions and Sub-Dimensions • Implications
Motivation • I’ve been caught unprepared – without a plan • Complexity of IT systems are increasing • Little guidance from IS/IT literature • Vague guidance from practitioner literature
What ITDRP is and is not IT disaster recovery planning and business continuity are different but related processes (Harney, 2004). • Business continuity plans are holistic strategies for keeping businesses operational following disaster (Anderson, 2008; Crowe, 2007). • IT disaster recovery plans are aimed specifically at restarting IT services.
What ITDRP is and is not IT disaster recovery planning should be focused on restoring services and not specific systems.
What ITDRP is and is not IT disaster recovery planning should not be an exercise in simplification or discontinuance of IT services (McLaughlin, 2008).
What ITDRP is and is not When damage is such that it is no longer possible to provide an IT service, then an IT disaster is said to have occurred (Lohrman, 2008). • Natural disaster (hurricane, tornado, earth quake, flood) • Accident (fire, file deletion, mechanical failure) • Intentional (war, logic bombs, virus)
Methods • Content analysis – qualitative method where inferences can be drawn from text (Weber, 1985) • Used to establish concepts and frameworks where little research exists. • Sample was from a Pro-Quest search with keywords such as “IT”, “Disaster Recovery” and “Plan”. 121 articles were identified: 39 unrelated, 10 had no useable recommendations, 72 were used for this study.
Methods • 572 recording units, an instance of recommendations for ITDRP, were identified in the sample individually by the two investigators. • An iterative process of identification / classification of the recording units and reconciliation between the two investigators was followed yielding 30 elements. • These 30 elements were then organized into 7 dimensions and 16 sub-dimensions. • These dimensions and sub-dimensions were then presented to a group of practitioners and academics to be refined.
Definition The set of actions (IT disaster identification and notification, preparing organizational members, IT services analysis, recovery process, backup procedures, offsite storage, and maintenance) which an organization follows in order to improve its ability to resume IT services following a disaster.
Implications Practice – a holistic guide to IT disaster recovery planning Research – multi-dimensional construct from which an instrument can be developed to study IT disaster recovery planning