210 likes | 366 Views
IT Disaster Preparedness. The Academic Perspective Joy Summers-Ables, University of Oklahoma Health Sciences Center. OUHSC Library IT Disaster Plan. Where in the world is Waldo?. The Broader Perspective. Institutional Identity Where does the library fit on campus
E N D
IT Disaster Preparedness The Academic Perspective Joy Summers-Ables, University of Oklahoma Health Sciences Center
OUHSC Library IT Disaster Plan Where in the world is Waldo?
The Broader Perspective Institutional Identity • Where does the library fit on campus • Where does it fit in terms of IT • What relationships have been established Familiar Terms • Disaster planning • Disaster recovery
IT Disaster Planning • Before the Disaster • Disaster Recovery Coordinator • Maintenance/Approval of disaster plan • Understand roles and responsibilities • Train employees in emergency preparedness • Test disaster recovery plan • Insurance • Funding
Observations Back up your contingency plan • Disaster Recovery Plan • Key personnel and contact information • Inventory of • Critical Systems – specific details • Hardware, software • Non-critical systems
Preparing a Disaster Plan • Baltimore Academic Libraries Consortium – Disaster Preparedness Planhttp://matrix.msu.edu/~disaster/balcplan.php#Resources • Books • Web sites • Local Resources
Preparing a Disaster Plan • Emergency Response and Salvage Wheelshttp://www.heritagepreservation.org/catalog/wheel1.htm • Federal Emergency Management Agency http://www.fema.gov/ehp/ers_wl2.shtm • Northeast Document Conservation Center http://www.nedcc.org/welcome/disaster.htm
The Broader Perspective Beyond the Disaster • What’s at risk • Continue to offer services • Business impact New Terms • Business Impact Analysis • Risk assessment • Business Continuity
Business Impact Analysis • What is the exposure to loss from various risks that can be identified? • What is the magnitude of physical and operational risk exposure? • How extensive are the risks relative to loss of productivity, revenue and reputation? • What can be done to mitigate the risk? • What are the costs of mitigating the risk? • What is the cost/benefit of the various mitigation measures that can be implemented?
Risk Assessment Natural Risks • Flooding (either natural, or due to roof leaks, broken, frozen, or clogged pipes, seepage) • Fire (fire, smoke, and water hose damage) • Snow/ice storm (broken windows, dampness) • Vermin/insects • Humidity (lack of environmental control (i.e. no air conditioning) in the space) • Mold
Risk Assessment Technical Risks • Power Failure • HVAC failure • Malfunction or failure of CPU • Server failure • Failure of system software • Telecommunications failure • Loss of physical access to resources • Electromagnetic interference
Risk Assessment Human Risks • Improper handling of sensitive data • Unauthorized access • Malicious damage or destruction of data • Theft • Civil disorder • Vandalism • Sabotage
Risk Assessment • Harvard University Library – Disaster Prevention and Recovery http://hul.harvard.edu/rmo/resources_02.shtml • Risk Assessment Instructions • Risk Assessment Worksheet
Business Continuity Planning • Step 1 – Project Initiation • Step 2 – Functional Requirements • Step 3 – Design and Development • Step 4 – Implementation • Step 5 – Testing and Exercising • Step 6 – Maintenance and Updating If a Disaster Occurs • Step 7 – Execution
Business Continuity • ISACA - Information Systems Audit and Control Association http://www.isaca.org/Content/ContentGroups/Journal1/20023/Business_Continuity_A_Business_Survival_Strategy.htm • IT governance serving a variety of professional IT-related positions • DRI – Institute for Continuity Management http://www.drii.org/DRII/ • Planning model
Best Resource - People • People with previous experience • Other knowledgeable individuals • IT personnel
Contact Information • Joy Summers-Ables University of Oklahoma Health Sciences Center Robert M Bird Health Sciences Library 405-271-2285, opt.5 joy-summers@oushc.edu
Webliography • Disaster Recovery Planfor TheAustralian National Herbarium http://www.anbg.gov.au/cpbr/disaster-plan/ • llinois State University Libraries Disaster Plan http://palimpsest.stanford.edu/bytopic/disasters/plans/isudis.html • Library of Congress – Emergency Preparedness and Response http://www.loc.gov/preserv/pubsemer.html
Webliography – p.2 • National Library of Australia – Collection Disaster Plan http://www.nla.gov.au/policy/disaster/ • New York University Library http://library.nyu.edu/preservation/disaster/toc.htm • Syracuse University Library Disaster Manual http://library.syr.edu/information/preservation/manual.htm