Chapter 6: Business Continuity and Disaster Recovery Planning Flashcards
Business Continuity Plan (BCP)
describes the critical processes, procedures, and personnel that need to be protected in case of an emergency
Disaster Recovery Plan (DRP)
Describes in exacting detail the procedures that must be followed to recover critical systems in order to get up and running again
Business Impact Assessment
Measures the operating and financial loss to an organization from a disruption to critical functions
Business Impact Analysis
1, Prioritize the business processes and assign a value
2. Determine how much time each item can afford to be none functional
3. Identify the resources required to support the most critical systems or operations
DRP Goals
- Keep the computers running
- Meeting SLAs with clients/customers
- Maintaining a proactive rather than reactive stance
Shared Site Agreements
Allows two companies to agree to back each other up in case of disaster, therefore reducing cost and time to get a company back up and running; generally requires a preexisting business agreement, such as a subsidiary structure, in order to work effectively
Alternate Sites
Using a third party service to back up business operations in case of an event
Hot Site
A complete back up (including environmental controls, printers, and other lower tier employee needs) site that exists mirrored or shard in such a way that operations can resume very quickly. Expensive and opens data to a third party, but the quickest to get back up and running on. Military bases serving specific missions might be considered hot sites.
Cold Site
Is a facility that has power, water, etc, but none of the technological architecture in place; the customer is responsible for supplying all of that. Runs into trouble when the equipment must be intact and transported, and can be damaged in transit
Warm Site
In the middle; provides the building and some of the “bigger picture” network needs, but not work stations. Applications and data are maintained in a backup state to allow a reload of critical programs, etc, but must be reloaded and coordinated by the client.
DRP: Multiple centers
multiple sites do the processing so that if one goes down, others can fill in the gap. Generally decentralized to minimize the impact of a component or center going down.
DRP: Service bureau
Third party processors that can step in in case of DRP plan activation; they tend to do processing on payroll, etc and can be leaned on in some cases to do more in case of disaster
DRP: Mobile Units
Data center services on wheels that can be driven to a site as needed
DRP: Cloud storage
Keeps everything available for immediate reactivation by the customer as needed; useful when customer doesn’t have money for a true DRP site
