need PPT
Suma
DisasterRecoveryPlan.docxRunning Head: Disaster Recovery Plan 1
Disaster Recovery Plan 10
Disaster Recovery Plan
Student’s Name:Suma Vangury
Institution: Campbellsville University, Louisville-KY
Date:02/26/2019
Introduction
Disaster recovery plan is a laid procedure required which is necessary in protecting company’s infrastructure in case of any disaster occurrence. It involves procedural measures which are carried out in an organization which only aims at returning the business in its normal operations in case of any disaster occurrence. The main goal of disaster recovery plan is to protect an organization by coming up with good plans and strategies which minimizes the disruption of their operations (Baham, Hirschheim, Calderon & Kisekka, 2017). This is mainly achieved by ensuring that the stability of an organization is maintained immediately after occurrence of the disaster.
Purpose of Disaster Recovery Plan (DRP)
In any company, one has to ensure that his or her business is surrounded by an appropriate disaster recovery system which is well planned for the purpose of ensuring continuity of business in case of any disaster occurrence. Therefore, there a need to build a good disaster recovery plan which fulfils all the required elements.
Disaster Recovery Plan for Acme National Bank of America.
Acme National Bank of America is one of the United States financial institution which operates for the services of the people in America. The main objective of developing a disaster recovery plan for this institution is to find ways and alternatives of mitigating any disaster occurrence in the institution. Also, it involves coming up with suggestions and ways of solving certain problems which may occur in an organization. Like any other company, it is important for the company to come up with a disaster recovery plan in order for it to be able to withstand any natural disaster which may occur within their operations. Calamities and disaster in an organization may be caused by natural calamities or things which are man driven. Occurrence of these calamities affect the efficiency and operation of services being offered by the National Bank. Since disasters and calamities are prone to happen in any organization, it is important for organization to come up with a plan of mitigating the disaster (Song, Li, Olshansky, Zhang & Xiao, 2017). When a company develop a good disaster recovery plan, every single infrastructure of the company and also including the people under the premises are well protected and secured.
Abstract
The main goal of this strategy is coming up with the best and effective mitigating strategy which will in turn solve problem which occurs due to occurrence of a calamity which may interfere with the operation of the National Bank of America (Song, Li, Olshansky, Zhang & Xiao, 2017). Therefore, this will entails highlighting the main objectives of disaster recovery plans, highlighting the likely causes of the disaster, coming up with the best suggestions and mitigation measures on how to solve the issues immediately after occurrence.
The suggestions and mitigation measures highlighted should be clear on how it will solve the problem when it occurs in an organization. Detailed information about the plan should be written down in a systematic manner which in turn will solve the issue that has occurred or which may occur in an organization.
There is a procedure which is involved in disaster recovery plan in an organization which has to be followed while developing an effective disaster recovery system. The steps which are required are clearly outlined by the DRP basing on how and what kind of disaster has occurred in an organization. Different opinions and ideas are incorporated in the recovery system which saves the data and other important elements of an organization.
Additionally, as a way of managing the occurrence of disaster, it is important for a company to do an analysis on the cases of likelihood occurrence of disaster, how the company will be affected, the people in the company who will be affected, the strategies put in place to solve the issue, likely causes of the risk and also the mitigation measures put in place to curb the problem. Also, the company should always avoid any cause of the disaster occurrence. For instance, the company should have a backup plan and system strategy that is put in place to recover any data of the company which is lost in occurrence of disaster.
The nature of disaster should be in a such a point whereby it has mitigation measures which are put in place. It should be something which is realistic and sensible in nature such that it has possible solution when it occurs. As everyone knows, disasters have been happening in various companies and institution and therefore it is a responsibility of every single disaster recovery team to be aware of measures that ought to be put in place in order solve the disaster which occurs. The Acme National Bank of America has highlighted all suggestions and mitigation measures which need to be put in place in case of any occurrence of disaster in the company. This will in turn ensure that the operation of the company continues as normal (Smith, Martin & Wenger, 2018). Moreover, it has also listed some of the strategies which the company has put in place in order to handle disasters in the company.
Introduction
Disaster recovery plan in layman language can be described as that strategy or methodology put in place in a company in order to mitigate risk which occurs. This may be solved by managing, securing and recovering all infrastructures which are owned by a company when disaster happens. The aim of having disaster recovery plan in an organization is to protect the company infrastructure in case of any risk occurrence and in that any disruption within the organization are minimized. For the sake of Acme National Bank of America, it is important to incorporate good arrangements and evaluations which include an alternative internet site which will back up the information data lost by the company once disaster occurs. This backup system should be designed in a such a way that in case of any disaster occurrence in an organization, every single data and confidential information of the company is securely saved within the cloud storage of the site. This will be important for the company as all the client’s information which is stored in a database will be secured.
Some of the calamities which are beyond human understanding may include natural disasters like the case of hurricanes and wind storms. Human caused disaster incidences may include incidences like fire breaks or theft cases. However, the nature of calamity will in one point or the other determine the type of recovery system which should be implemented.
The main objectives of disaster recovery plan include the following:
· It minimizes the economic impact of interruption
· To brings business to its normal operations
· To come up with an alternative way of dealing with calamities
· To limit the extend of disruption in an organization
· To ensure there is immediate response in case of occurrence of disaster.
There several ways in which Acme National Bank of America can use in order to reduce cases of risks in an organization. Disaster recovery plan has various stages which are incorporated in order to come up with the best system strategy ever.
A good coordinated disaster recovery plan should incorporate the following ten steps:
1. Acquisition of management commitment
The management of the bank should be in the forefront in implementing and coming up with the disaster recovery plan for the safety of their daily operation. They have the responsibility of managing and supervising the operation which are planned in the company. The board committee of the company should table important strategies of curbing disaster occurrence. Also, they should come up with disaster recovery team which who are professionally qualified in DRP. Additionally, the management should present the required resources which need to be put in place in implementing the disaster plan (Wold, Geoffrey, 2013). There should be good governance which will in turn ensure that every suggestion by the board members is put in consideration without biasness.
2. Establishment of planning panel
When disaster recovery plan has been drafted, the bank need to appoint the board of trustees within the company who will in turn oversee all the operations which are carried out within the organization. These trustees should work hand in hand with the board of directors in order to ensure that the system recovery plan put in place has functioned in a right manner (Wold, Geoffrey, 2013). It is a responsibility of the trustees and management to ensure that insurance cover of each and every worker within the company is assured.
3. Carry out risk assessment
Carrying out a risk assessment analysis is one of the plan which is incorporated in disaster recovery process development. This analysis should contain possible analysis of disasters for natural, technical and human threats. Every analysis should be carried out and check on possible effects which may occur on occurrence of the disaster. For instance, fire is always considered as the most dangerous calamity which occurs in most of the companies (Ghannam, 2017). Once it occurs, there should be a developed disaster recovery system which in turn will mitigate on the issue.
4. Establishment of alternative operation processes
There should be equipment and machines which are set aside and are used in recovering the daily operations of the company. Every department should be equipped with the best alternative equipment which are stored in other premises to be used in case of occurrence of disaster (Ghannam, 2017). In the bank, the disaster recovery team should identify the key and functional equipment which are core operation in the company and establish way of mitigating any risk occurrence.
5. Determination of Recovery Strategies
For a bank like National bank of American to determine the most suitable recovery strategies, it must consider facilities within the company like in the case of hardware, communication gadgets, software, user interface systems, data files stored and also the processing operation of the organization. It is very essential for the bank to consider its computer function (Song, Li, Olshansky, Zhang & Xiao, 2017). Hot sites, cold sites, warm sites are key computer functions which the bank should consider when developing a good system recovery plan.
6. Data collection performance
Data should be carefully collected in a manner such that all the listing of important information is available. This may include communication channels, distribution register, software data files, material and documentation. This information is very important as it helps much in gathering of important information within the bank.
7. Organizing a written plan
The plan should be written is a standard form immediately after drafting it. This is very important as it ensures that there is continuous maintenance of safety in an organization. Also it helps much in updating the required procedures which are needed in the company.
8. Developing testing criteria and procedures
The disaster plan need to be tested in a frequent manner in order to identify areas which requires modification and update. This is very essential as it assist much the disaster recovery team to determine the compatibility of their backup systems (Wold, Geoffrey, 2013). It is also important in ensuring good training of staff is done to always keep them alert in case of any disaster occurrence.
9. Testing the plan
Immediately after finishing the testing criteria plan, the bank management take an initiative of testing the disaster recovery plan. For a good disaster recovery plan, final testing does not necessarily prove that it is the best as continuous improvement and modifications are done. For the sake of small banks there is low frequency of testing done as compared to large banks which requires high frequency testing (Ghannam, 2017). The types of testing done may include checklist testing, parallel testing, simulation and full interruption testing.
Simulation: this is testing which is done as though it is doing the actual process of disaster recovery plan in a company. It is done on the required systems and no services of the company are interrupted at whatever circumstances.
Checklist testing: this involves testing by ensuring all the recommended procedures and equipment are available in the checklist. It ensures that no inaccuracy in performance.
Parallel testing: this involves running the procedures required along the actual system to check whether it is operating well.
Full interruption testing: this involves stopping the daily operation of the company to check if the backup system is functioning in a better manner.
10. Approval of the plan
After the disaster recovery plan has written and tested, the top management takes an initiative of approving the disaster recovery plan. They have the responsibilities of establishing the required policies which are relevant and comprehensive to contingency planning (Song, Li, Olshansky, Zhang & Xiao, 2017). The contingency plan is approved by the management who takes all responsibilities of assigning relevant people who will monitor the system.
Some of Other Important Details About Disaster Recovery Plan
Disaster detection and determination
In a case where disaster has occurred in an organization, the team responsible in disaster recovery do some evaluation on the cause of occurrence of the risk which has interrupted the operation of the company. The disaster may be caused by seismic tremors or any other natural catastrophe.
Disaster notification
The people in the organization are then notified about the occurrence of the risk which has facilitated interruption of their operations. This may be done by use of alarms or the sirens.
Communication plan and role assignment
Communication is very important in case of any disaster occurrence in a company. This will safes the live of each and every single individual working within the company premises. Also, the organization should have all the contact information of specialist who works in disaster recovery.
Business impact analysis
This is one of the most important aspect in disaster recovery system. It entails the system of bringing business to its operation form immediately after occurrence of disaster. Recoverability is the aim of business impact analysis in disaster recovery system.
Backup phase
If in a case whereby an organization like financial institution has lost information in the case of disaster occurrence in its premises, backup system of the company which was put in place will recover the data which was lost. This backup system should be scientifically stored in a cloud storage which cannot be assessed by anyone.
Internal, external and environmental risks
For a good risk evaluation in disaster recovery plan, internal and external dangers should be considered. They help much in avoiding troublesome occasion which organization may be faced with. External risks may include natural physical disasters like severe climatic conditions, earth tremors or vandalism in an organization. Internal risks may include internet hackers who may have an attempt of hacking the website of the company.
Disaster recovery strategies
The organization should be aware of any risk occurrence and come up with ways of mitigating the situation. It should be aware of computer functionalities which are of benefit to their operations.
Therefore, in their disaster recovery strategy, there should be at least one hot site which is available in their operation which in turn enables normal operations of the company processes. For instance, the Acme National Bank of America should backup all their system servers which enables their operations (Alawanthan, Dorasamy & Raman, 2017). Additionally, there should be backup generator which would be used in case of power failure so that their systems operation as normal.
Conclusion
Disaster recovery systems plan should always be incorporated in any business activities and their management of various companies should be at their forefront in ensuring that adequate methodologies have been implemented to curb any disaster occurrence in a company. This is mainly because there are various advantages which arises from having disaster recovery plan in a company. Due to development of various financial institutions across the world, technology has facilitated much in banking sector and therefore adoption of disaster recovery plan will be important as it plays a critical role in a company.
Alawanthan, D., Dorasamy, M., & Raman, M. (2017). Information Technology Disaster Recovery process improvement in organization.
Baham, C., Hirschheim, R., Calderon, A. A., & Kisekka, V. (2017). An Agile Methodology for the Disaster Recovery of Information Systems Under Catastrophic Scenarios.
Bronner, Robert F. (2013). "Banking Industry and Disaster Recovery Planning. Wikimedia Foundation.
Devlen, A. (2003). 12 Key Elements of an Enterprise-Wide Disaster Recovery Plan. IT Management News, (), Retrieved from http://archive.itmanagementnews.com/articles/0310ad.html
Disaster Recovery Plan. (2017) " Wikipedia. Wikimedia Foundation, December 2017.
Ghannam, M. Z. (2017). Challenges and Opportunities of Having an IT Disaster Recovery Plan.
Gsoedl, J. (2009). Disaster Recovery Site Option: Hot, warm and cold sites
http://www.litcom.ca/organization-disaster-recovery-plan/
http://www.reliaquest.com/disaster-recovery-plans-prepare-for-the-unexpected/
Mohd, R., Abu Bakar, N., Hassan, S., & Hussain, A. H. (2017). Sustainable Post-Disaster Recovery Plan for Flood Victims in Gua Musang and Kuala Krai, Kelantan. Pertanika Journal of Social Sciences & Humanities.
Sans (2002). Introduction to Business Continuity Planning.
Smith, G., Martin, A., & Wenger, D. E. (2018). Disaster Recovery in an Era of Climate Change: The Unrealized Promise of Institutional Resilience. In Handbook of Disaster Research (pp. 595-619). Springer, Cham.
Song, Y., Li, C., Olshansky, R., Zhang, Y., & Xiao, Y. (2017). Are we planning for sustainable disaster recovery? Evaluating recovery plans after the Wenchuan earthquake. Journal of Environmental Planning and Management.
The McGraw-Hill Companies. (2006). Network Disaster Recovery. Retrieved August 31, 2014, from The McGraw-Hill Companies, Week Seven, IT 230.
Wold, Geoffrey H. (2013). "Disaster Recovery Planning Process Part 1 of 3." Oxford Press. London.
