Disaster Recovery Objectives At the end of the lesson, students should be able to Explain the seven tiers of disaster recovery solutions. Explain the phases of disaster recovery planning Describe business continuity planning and threat analysis Overview Seven tiers of Disaster Recovery Solutions Phases of disaster recovery planning Business continuity planning Threat analysis Disaster Recovery Procedures Overview of disaster recovery solutions. Tier 0: No off-site data Tier 2: Data backup with a hot site Tier 3: Electronic vaulting Tier 4: Point-in-time copies Tier 5: Transaction integrity Tier 6: Zero or near-Zero data loss Tier 7: Highly automated, business integrated solution Disaster Recovery Plan (DRP) Phase I – Data Collection Phase II – Plan Development and Testing Phase III – Monitoring and Maintenance Phase 1 – Data Collection Project should be organized with timeline, resources, and expected output Business impact analysis should be conducted at regular intervals Risk assessment should be conducted regularly Onsite and Offsite Backup and Recovery procedures should be reviewed Alternate site location must be selected and ready for use urvivability and securability Phase 2 – Plan Development and Testing Development of Disaster Recovery Plan Testing the plan Project should be organized with timeline, resources, and expected output Phase 3 – Monitoring and Maintenance Maintenance of the Plan through updates and review Periodic inspection of DRP Documentation of changes Phase 3 – Monitoring and Maintenance Threat Analysis Disease Earthquake Fire Flood Cyber attack Sabotage Hurricane Utility outage Terrorism Disaster Recovery Procedures (DRP) Objectives of disaster recovery planning include: • Providing a sense of security • Minimizing risk of delays • Guaranteeing the reliability of standby systems • Providing a standard for testing the plan. • Minimizing decision-making during a disaster Methodology 1. Obtain Top Management Commitment 2. Establish a planning committee 3. Perform a risk assessment 4. Establish priorities for processing and operations 5. Determine Recovery Strategies 6. Perform Data Collection 7. Organize and document a written plan 8. Develop testing criteria and procedures 9. Test the Plan 10. Approve the plan