Disaster Recovery: Helping Non-Profits to Plan, Prepare & Recover By: Lynn Do Prepare to Ensure Business Continuity It is… • A way of doing business and continuing to stay in business in the event of a disaster • A plan to ensure business processes —including supporting your customers, employees and suppliers—are always available to meet critical needs It is not • A specifc product or technology or service • A “project” with a beginning and an end • Just disaster recovery or high availability The Business Continuance Challenge Over 50% of businesses that experience a major data loss ultimately go out of business forever. ¾This percentage goes up to 93% if the outage lasts more than 10 days. IT infrastructures hold critical data on the customers, products, services and processes that fuel business success. If this information is breeched, corrupted or lost, many businesses would be brought to a halt. Non-Profit Organization Protection Gap Non-profits hold off on business protection spending because they: ¾ Don’t see themselves as targets ¾ Underestimate the risk of possible breaches and failures ¾ Underestimate the price they’d pay in the event a breach occurs ¾ Take a reactive approach Even when non-profits move past complacency they: ¾ Don’t take action because they are confused about business protection solutions ¾ Feel uncertain because solutions are too often complex and expensive What Are the Alternatives? Local Backup Solutions Offsite Storage Solutions Managed IT Solutions What Are the Alternatives? Local Backup Solutions Storage Media includes: ¾ Solid State Storage – (flash memory, thumb drives, USB Flash Drives, Compact Flash, Smart Media, Memory Stick, Secure Digital cards) ¾ Magnetic Tape ¾ Optical Disks (recordable CD’s, RW-DVDs) ¾ Hard Drives (External Hard Drive - USB, Internal RAID failover/mirroring) ¾ Network Attached Storage (NAS Docking Station, NAS Media Vault) ¾ Storage Area Network (Storage devices attached to servers) What Are the Alternatives? Off-Site Data Protection ¾ Remote Backup Service via the internet (Electronic Vaulting) ¾ ¾ Data stored on local media transported off site ¾ ¾ ¾ ¾ Such as RenovoData, Mozy, Carbonite, etc. 3rd party Data Vault Store off-site at another office location Safe Deposit Box Back up data on a second PC, stored at off site location What Are the Alternatives? Managed IT solutions ¾ Outsource data backup to the experts ¾ ¾ ¾ Onsite support – setup, determine your needs Offsite Vaulting – protect data offsite in secure environment Local IT Service Providers ¾ ¾ ¾ Greatly reduces staffing costs Eliminates the need to purchase costly back-up solutions Let’s you focus on your business, not on managing your data! What Can You Start Doing Today to Keep Your Business Safe? • Identify Business Critical Files Plan today for the unexpected • Determine your technology needs • Investigate technology partner options • Develop internal and external communications • Write and communicate your disaster recovery plan - and practice it! • Protect against viruses, hackers, disasters, lost or stolen data, human error What Can You Start Doing Today to Keep Your Business Safe? • Designate personnel for getting back up and running Prepare to ensure business continuity • Train staff on your disaster recovery processes • Minimize risks by backing-up & protecting business critical files • Keep some spare PCs at an offsite location “just in case” • Secure your livelihood by securing your back office “remotely” • Use digital cameras to take photos for insurance needs What Can You Start Doing Today to Keep Your Business Safe? • Have the technology (remote/mobile) to quickly restore data If disaster strikes, recover your data • Develop external communications plan • Use mobile devices so your employees can keep working remotely and keep communicating Self - Assessment 1. Are you concerned that your normal business operations might be interrupted by a natural or humanYes No Unsure caused disaster? 2. Have you determined what parts of your business need to be operational as soon as possible following a disaster, and planned how to resume those Yes No Unsure operations? 3. Do you and your employees have a disaster response plan in place to help assure your safety and to take care of yourselves until help can arrive? Yes No Unsure 4. Could you communicate with your employees if a disaster happened during work hours or after work hours? Yes No Unsure 5. Can your building withstand the impact of a natural disaster, and are your contents and inventory sufficiently protected so they will not be damaged? Yes No Unsure Self - Assessment 6. Are your vital records protected from the harm that could caused by a disaster? Yes No Unsure 7. Are you prepared to stay open for business, even if you cannot stay in or reach your place of business? Yes No Unsure 8. Do you have plans to stay open for business, even if you cannot stay in or reach your place of business? Yes No Unsure 9. Have you worked with your community – public officials and other businesses – to promote disaster preparedness and plan for community recovery? Yes No Unsure 10. Have you consulted with an insurance professional to determine if your insurance coverage is adequate to help you get back in business following a disaster? Yes No Unsure Self- Assessment Results Your score indicates how well prepared you are for the disruption caused by a natural or human-caused disaster. 7-10 Yes = You are well on your way. 4-6 Yes = You have lots of work to do. 1-3 Yes = You should get started immediately. Developing Your Business Continuity Plan Before you start, gather the information you will need to complete the individual records for each form. You will start by recording the following: • • • Employees (including owner) Suppliers/ Vendors Key Contacts You will then identify: • • Critical Business Functions Recovery Location Developing Your Business Continuity Plan Capture Essential Business Functions: • Vital Records • Critical Telephone Numbers • Supplies • Equipment / Machinery/ Vehicles Capture Vital Communication and Data: • Computer Equipment and Software • Voice / Data Communications • Miscellaneous Resources Dealing with D-Day: • Disaster Response Checklist Additional Resources Nonprofit and Professional Associations: •American Red Cross. http://www.redcross.org •Institute for Business & Home Safety. http://www.ibhs.org •National Emergency Management Association. http://www.nemaweb.org •National Fire Protection Association. http://www.firewise.org •Public Entity Risk Institute. http://www.riskinstitute.org •U.S. Chamber of Commerce. http://www.uschamber.com Government Resources: •Federal Emergency Management Agency. http://www.fema.gov •Federal Emergency Management Agency Publication Center. 1-800-480-2520 •U.S. Department of Homeland Security. http://www.dhs.gov •U.S. Small Business Administration. http://www.sba.gov Additional Resources Business Continuity Planning Organization websites: •Association of Contingency Planners. http://www.acp-international.com •Disaster Recovery Institute International. http://www.drii.org •Global Partnership for Preparedness. http://www.globalpreparedness.org •The Business Continuity Institute. http://www.thebci.org Business Continuity Planning Publication websites: •Contingency Planning & Management. http://www.contingencyplanning.com •Disaster Recovery Journal. http://www.drj.com •Disaster Resource Guide. http://www.Disaster-Resource.com •Disaster Recovery Yellow Pages. http://www.TheDRYP.com Act Now!