Company Name Here Disaster Recovery Plan Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010 Do not distribute without written permission. 1 NOTICE This document contains confidential information, which is proprietary to Tom’s Manufacturing. No part of its contents may be used, copied, disclosed or conveyed to any party in any manner whatsoever without prior written permission from Tom’s Manufacturing. TOM’S MANUFACTURING 13 MAPLE ST., INDIANAPOLIS, IN 888 - 888 - 8888 TOM SMITH PRESIDENT & CEO Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010 Do not distribute without written permission. 2 Objectives of Tom’s Manufacturing Disaster Recovery Plan The overall objectives of the Tom’s Manufacturing Disaster Recovery Plan (“the Plan” or “DRP”) are to protect customers, resources, and employees, to safeguard the organization’s vital records and data, and to ensure the ability of the company to function effectively in the event of a severe disruption to normal operating procedures. The primary role of the DRP is to document the plan of Tom’s Manufacturing for response, recovery, resumption, restoration, and return after severe disruption. A disaster is defined as the occurrence of any event that causes a significant disruption in the company’s capabilities. The central theme of the Plan is to minimize the effect a disaster will have upon on-going operations. The Plan is a systematic guide from disaster to recovery. The basic approach, general assumptions, and sequence of events that need to be followed will be stated in clearly in the documentation that follows. While using the plan during a severe disruption, it may be in the best interest of the company to modify directions for many reasons. All alternative actions should be documented, and as soon as appropriate the plan should be resumed and revisions made as appropriate. The Plan will be distributed to all key personnel, and they will receive periodic updates. The general approach is to make the plan as threat-independent as possible. This means that it should be functional regardless of what type of disaster occurs. All leaders should remember that the major objective in invoking this plan is to minimize the disruption of services to the customers of the Tom’s Manufacturing. The primary objective is to ensure that Tom’s Manufacturing services and product remain operational so that the company issue does not become our customers’ issue. All procedures and instructions in this document are designed to provide for as smooth a transition to emergency mode as possible, and to insulate Tom’s Manufacturing customers from the impact of the disruption as much as possible in the event of anything short of total catastrophe. Please read and follow this plan with this objective in mind, and during the entire emergency phase of Tom’s Manufacturing operations. Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010 Do not distribute without written permission. 3 Roles, Responsibilities, and Authority The detection of an event which could result in a disaster affecting any business units and information systems at Tom’s Manufacturing is the responsibility of the Disaster Recovery Management Team or whoever first discovers or receives information about an emergency situation. As soon as a situation occurs that could result in a severe disruption to service, the on-site personnel should contact the appropriate manager and then take the necessary steps to minimize property damage and injury to people in the vicinity. The Disaster Recovery Management Team Name Phone Person or Description Emails Tom Smith 999 -999 - 9999 President & CEO tom@tomsmanufac.com tom@gmail.com Larry Jones 777-777-7777 Chief Operations Officer larry@tomsmanufac.com larry@gmail.com Janet Edwards 222-222-2222 Chief Financial Officer janet@tomsmanufac.com janet@gmail.com Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010 Do not distribute without written permission. 4 After all the Disaster Recovery Management Team is alerted, those primary contacts have a responsibility to alert their designated secondary contact: Name of Primary Emergency Contact Designated Secondary Emergency Contact Tom Smith Mark White mark@tomsmanufac.com 333-333-3333 Larry Jones Sue Holland sue@tomsmanufac.com 555-555-5555 Janet Edwards Julie Mathews julie@tomsmanufac.com 999-999-9999 Critical Systems The following critical systems have been identified at Tom’s Manufacturing that would be negatively impacted by a disaster. These systems are: Telecommunications – This includes the phone system and network connectivity to the Tom’s Manufacturing main office Email Services – Microsoft Outlook Financial System – Quickbooks Business Function Impact Tom’s Manufacturing uses several systems to support critical business functions and operations. In the event of an emergency, these systems remain operational as they are hosted by the providers in a non-Tom’s Manufacturing environment. These business functions have been identified and are listed below: 1. Data Backup and Recovery – supported by Indianapolis IT Services 2. Outlook Web Access These systems can function in a mostly normal manner in the event of anything but catastrophic conditions. The only impact to these units is confined to the company’s internal Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010 Do not distribute without written permission. 5 communications systems. When invoking the Disaster Recovery Plan instructions, alternative procedures will be communicated and followed to ensure the smooth transition to emergency communications procedures and systems to prevent, as much as possible, disruption of services to other business functions and to customers. Procedures for Recovering Lost or Damaged Data Tom’s Manufacturing uses Back IT Up to backup all normal corporate data. In the event of lost or damaged internal data, any internal Tom’s Manufacturing server’s data can be recovered by using the Back IT Up. The backup schedules and set definitions for each individual system that is covered are kept by the Indianapolis IT Services. In the event that data needs to be recovered from backup, the Indianapolis IT Services will be responsible for locating the correct Backup Set for the identified equipment and subsystem and performing the restoration procedure to recover the data and make the system or subsystem operational to the last known good state. Backup procedures are the responsibility of the Indianapolis IT Services outside the scope of this document. The Indianapolis IT Services should always ensure that critical systems and systems data is covered by the appropriate backup procedures and regularly verified and tested as part of their standard operating procedures. This document and its procedures depend on having appropriate and complete systems backup information in the event that it is required. Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010 Do not distribute without written permission. 6