This document is a sample only

advertisement
Company Name Here
Disaster Recovery Plan
Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010
Do not distribute without written permission.
1
NOTICE
This document contains confidential information, which is proprietary to Tom’s Manufacturing.
No part of its contents may be used, copied, disclosed or conveyed to any party in any manner
whatsoever without prior written permission from Tom’s Manufacturing.
TOM’S MANUFACTURING
13 MAPLE ST., INDIANAPOLIS, IN
888 - 888 - 8888
TOM SMITH
PRESIDENT & CEO
Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010
Do not distribute without written permission.
2
Objectives of Tom’s Manufacturing Disaster Recovery Plan
The overall objectives of the Tom’s Manufacturing Disaster Recovery Plan (“the Plan” or “DRP”)
are to protect customers, resources, and employees, to safeguard the organization’s vital
records and data, and to ensure the ability of the company to function effectively in the event
of a severe disruption to normal operating procedures. The primary role of the DRP is to
document the plan of Tom’s Manufacturing for response, recovery, resumption, restoration,
and return after severe disruption.
A disaster is defined as the occurrence of any event that causes a significant disruption in the
company’s capabilities. The central theme of the Plan is to minimize the effect a disaster will
have upon on-going operations.
The Plan is a systematic guide from disaster to recovery. The basic approach, general
assumptions, and sequence of events that need to be followed will be stated in clearly in the
documentation that follows. While using the plan during a severe disruption, it may be in the
best interest of the company to modify directions for many reasons. All alternative actions
should be documented, and as soon as appropriate the plan should be resumed and revisions
made as appropriate. The Plan will be distributed to all key personnel, and they will receive
periodic updates. The general approach is to make the plan as threat-independent as possible.
This means that it should be functional regardless of what type of disaster occurs.
All leaders should remember that the major objective in invoking this plan is to minimize the
disruption of services to the customers of the Tom’s Manufacturing. The primary objective is to
ensure that Tom’s Manufacturing services and product remain operational so that the company
issue does not become our customers’ issue.
All procedures and instructions in this document are designed to provide for as smooth a
transition to emergency mode as possible, and to insulate Tom’s Manufacturing customers
from the impact of the disruption as much as possible in the event of anything short of total
catastrophe. Please read and follow this plan with this objective in mind, and during the entire
emergency phase of Tom’s Manufacturing operations.
Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010
Do not distribute without written permission.
3
Roles, Responsibilities, and Authority
The detection of an event which could result in a disaster affecting any business units and
information systems at Tom’s Manufacturing is the responsibility of the Disaster Recovery
Management Team or whoever first discovers or receives information about an emergency
situation.
As soon as a situation occurs that could result in a severe disruption to service, the on-site
personnel should contact the appropriate manager and then take the necessary steps to
minimize property damage and injury to people in the vicinity.
The Disaster Recovery Management Team
Name
Phone
Person or Description
Emails
Tom Smith
999 -999 - 9999
President & CEO
tom@tomsmanufac.com
tom@gmail.com
Larry Jones
777-777-7777
Chief Operations Officer
larry@tomsmanufac.com
larry@gmail.com
Janet Edwards
222-222-2222
Chief Financial Officer
janet@tomsmanufac.com
janet@gmail.com
Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010
Do not distribute without written permission.
4
After all the Disaster Recovery Management Team is alerted, those primary contacts have a
responsibility to alert their designated secondary contact:
Name of Primary Emergency Contact
Designated Secondary Emergency Contact
Tom Smith
Mark White
mark@tomsmanufac.com
333-333-3333
Larry Jones
Sue Holland
sue@tomsmanufac.com
555-555-5555
Janet Edwards
Julie Mathews
julie@tomsmanufac.com
999-999-9999
Critical Systems
The following critical systems have been identified at Tom’s Manufacturing that would be
negatively impacted by a disaster. These systems are:



Telecommunications – This includes the phone system and network connectivity to the
Tom’s Manufacturing main office
Email Services – Microsoft Outlook
Financial System – Quickbooks
Business Function Impact
Tom’s Manufacturing uses several systems to support critical business functions and
operations. In the event of an emergency, these systems remain operational as they are hosted
by the providers in a non-Tom’s Manufacturing environment. These business functions have
been identified and are listed below:
1. Data Backup and Recovery – supported by Indianapolis IT Services
2. Outlook Web Access
These systems can function in a mostly normal manner in the event of anything but
catastrophic conditions. The only impact to these units is confined to the company’s internal
Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010
Do not distribute without written permission.
5
communications systems. When invoking the Disaster Recovery Plan instructions, alternative
procedures will be communicated and followed to ensure the smooth transition to emergency
communications procedures and systems to prevent, as much as possible, disruption of services
to other business functions and to customers.
Procedures for Recovering Lost or Damaged Data
Tom’s Manufacturing uses Back IT Up to backup all normal corporate data. In the event of lost
or damaged internal data, any internal Tom’s Manufacturing server’s data can be recovered by
using the Back IT Up.
The backup schedules and set definitions for each individual system that is covered are kept by
the Indianapolis IT Services. In the event that data needs to be recovered from backup, the
Indianapolis IT Services will be responsible for locating the correct Backup Set for the identified
equipment and subsystem and performing the restoration procedure to recover the data and
make the system or subsystem operational to the last known good state.
Backup procedures are the responsibility of the Indianapolis IT Services outside the scope of
this document. The Indianapolis IT Services should always ensure that critical systems and
systems data is covered by the appropriate backup procedures and regularly verified and tested
as part of their standard operating procedures. This document and its procedures depend on
having appropriate and complete systems backup information in the event that it is required.
Confidential and Proprietary information of Tom’s Manufacturing © Copyright 2010
Do not distribute without written permission.
6
Download