It Disaster Recovery Plan Template
It Disaster Recovery Plan Template
INTERNET CORP
An
information
technology
(IT)
disaster
recovery
(DR)
plan
provides
a
structured
approach
for
responding
to
unplanned
incidents
that
threaten
an
IT
infrastructure,
which
includes
hardware,
software,
networks,
processes
and
people.
Protecting
your
firm's
investment
in
its
technology
infrastructure,
and
protecting
your
firm's
ability
to
conduct
business
are
the
key
reasons
for
implementing
an
IT
disaster
recovery
plan.
IT
Disaster
Recovery
Plan
Template
Revision
History
REVISION
DATE
NAME
DESCRIPTION
Original
1.0
!
IT
Disaster
Recovery
Plan
Template
Table of Contents
!
IT
Disaster
Recovery
Plan
Template
Disaster Recovery Plan for Local Area Network (LAN) ................................................... 27
Disaster Recovery Plan for Wide Area Network (WAN) .................................................. 30
Disaster Recovery Plan for Remote Connectivity ............................................................. 33
Disaster Recovery Plan for Voice Communications ......................................................... 36
Appendix B – Suggested Forms .......................................................................................... 39
Damage Assessment Form .................................................................................................. 39
Management of DR Activities Form .................................................................................... 40
Disaster Recovery Event Recording Form ......................................................................... 41
Disaster Recovery Activity Report Form ............................................................................ 42
Mobilizing the Disaster Recovery Team Form .................................................................. 43
Mobilizing the Business Recovery Team Form ................................................................. 44
Monitoring Business Recovery Task Progress Form ....................................................... 45
Preparing the Business Recovery Report Form................................................................ 46
Communications Form .......................................................................................................... 47
Returning Recovered Business Operations to Business Unit Leadership .................... 48
Business Process/Function Recovery Completion Form ................................................ 49
!
IT
Disaster
Recovery
Plan
Template
This document delineates our policies and procedures for technology disaster recovery, as well as our
process-level plans for recovering critical technology platforms and the telecommunications
infrastructure. This document summarizes our recommended procedures. In the event of an actual
emergency situation, modifications to this document may be made to ensure physical safety of our people,
our systems, and our data.
Our mission is to ensure information system uptime, data integrity and availability, and business
continuity.
Policy Statement
Objectives
The principal objective of the disaster recovery program is to develop, test and document a well-
structured and easily understood plan which will help the company recover as quickly and effectively as
possible from an unforeseen disaster or emergency which interrupts information systems and business
operations. Additional objectives include the following:
• The need to ensure that all employees fully understand their duties in implementing such a plan
• The need to ensure that operational policies are adhered to within all planned activities
• The need to ensure that proposed contingency arrangements are cost-effective
• The need to consider implications on other company sites
• Disaster recovery capabilities as applicable to key customers, vendors and others
!
IT
Disaster
Recovery
Plan
Template
Work
Alternate
Mobile
Home
Email Address
Alternate Email
Work
Alternate
Mobile
Home
Email Address
Alternate Email
Work
Alternate
Mobile
Home
Email Address
Alternate Email
Work
Alternate
!
IT
Disaster
Recovery
Plan
Template
Name, Title Contact Option Contact Number
Mobile
Home
Email Address
Alternate Email
Work
Alternate
Mobile
Home
Email Address
Alternate Email
Work
Alternate
Mobile
Home
Email Address
Alternate Email
!
IT
Disaster
Recovery
Plan
Template
Person
Identifying
Incident
!
IT
Disaster
Recovery
Plan
Template
External Contacts
Work
Mobile
Home
Email Address
Power Company
Mobile
Home
Email Address
Telecom Carrier 1
Mobile
Fax
Home
Email Address
Telecom Carrier 2
Mobile
Home
!
IT
Disaster
Recovery
Plan
Template
Name, Title Contact Option Contact Number
Email Address
Hardware Supplier 1
Mobile
Emergency Reporting
Email Address
Server Supplier 1
Mobile
Fax
Email Address
Workstation Supplier 1
Mobile
Home
Email Address
Office Supplies 1
Mobile
Home
Email Address
Insurance – Name
!
IT
Disaster
Recovery
Plan
Template
Name, Title Contact Option Contact Number
Mobile
Home
Email Address
Site Security –
Mobile
Home
Email Address
Off-Site Storage 1
Mobile
Home
Email Address
Off-Site Storage 2
Password
Home
Email Address
HVAC –
Mobile
!"
IT
Disaster
Recovery
Plan
Template
Name, Title Contact Option Contact Number
Home
Email Address
Power Generator –
Mobile
Home
Email Address
Other –
Mobile
Home
Email Address
!!
IT
Disaster
Recovery
Plan
Template
External Contacts Calling Tree
!"
IT
Disaster
Recovery
Plan
Template
1 Plan Overview
1.1 Plan Updating
It is necessary for the DRP updating process to be properly structured and controlled. Whenever changes
are made to the plan they are to be fully tested and appropriate amendments should be made to the
training materials. This will involve the use of formalized change control procedures under the control of
the IT Director.
!"
IT
Disaster
Recovery
Plan
Template
Testing Fully Mirrored Recovery site - Fully mirrored recovery site
Tornado 5
Electrical storms 5
Act of terrorism 5
Act of sabotage 5
Probability: 1=Very High, 5=Very Low Impact: 1=Total destruction, 5=Minor annoyance
!"
IT
Disaster
Recovery
Plan
Template
2 Emergency Response
2.1 Alert, escalation and plan invocation
• Establish facilities for an emergency level of service within 2.0 business hours;
• Restore key services within 4.0 business hours of the incident;
• Recover to business as usual within 8.0 to 24.0 hours after the incident;
• Coordinate activities with disaster recovery team, first responders, etc.
• Report to the emergency response team.
!"
IT
Disaster
Recovery
Plan
Template
The DR plan will rely principally on key members of management and staff who will provide the
technical and management skills necessary to achieve a smooth technology and business recovery.
Suppliers of critical goods and services will continue to support recovery of business operations as the
company returns to normal operating mode.
• _________
• _________
• _________
• _________
• _________
The Emergency Response Team (ERT) is responsible for activating the DRP for disasters identified in
this plan, as well as in the event of any other occurrence that affects the company’s capability to perform
normally.
One of the tasks during the early stages of the emergency is to notify the Disaster Recovery Team (DRT)
that an emergency has occurred. The notification will request DRT members to assemble at the site of the
problem and will involve sufficient information to have this request effectively communicated. The
Business Recovery Team (BRT) will consist of senior representatives from the main business
departments. The BRT Leader will be a senior member of the company's management team, and will be
responsible for taking overall charge of the process and ensuring that the company returns to normal
working operations as early as possible.
!"
IT
Disaster
Recovery
Plan
Template
2.3.4
Backup
Staff
If a manager or staff member designated to contact other staff members is unavailable or incapacitated,
the designated backup staff member will perform notification duties.
3 Media
!"
IT
Disaster
Recovery
Plan
Template
4 Insurance
As part of the company’s disaster recovery and business continuity strategies a number of insurance
policies have been put in place. These include errors and omissions, directors & officers liability, general
liability, and business interruption insurance.
If insurance-related assistance is required following an emergency out of normal business hours, please
contact: ____________________________________________
Person
Next Renewal
Coverage Coverage Amount Of Responsible
Policy Name
Type Period Coverage
Date
For Coverage
!"
IT
Disaster
Recovery
Plan
Template
6 DRP Exercising
Disaster recovery plan exercises are an essential part of the plan development process. In a DRP exercise
no one passes or fails; everyone who participates learns from exercises – what needs to be improved, and
how the improvements can be implemented. Plan exercising ensures that emergency teams are familiar
with their assignments and, more importantly, are confident in their capabilities.
Successful DR plans launch into action smoothly and effectively when they are needed. This will only
happen if everyone with a role to play in the plan has rehearsed the role one or more times. The plan
should also be validated by simulating the circumstances within which it has to work and seeing what
happens.
!"
IT
Disaster
Recovery
Plan
Template
Appendix A – Technology Disaster Recovery Plan Templates
OVERVIEW
Location:
PRODUCTION SERVER Server Model:
Operating System:
CPUs:
Memory:
Total Disk:
System Handle:
System Serial #:
DNS Entry:
IP Address:
Other:
Provide details
HOT SITE SERVER
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS
KEY CONTACTS
Hardware Vendor Provide
details
!"
IT
Disaster
Recovery
Plan
Template
Software Vendors Provide details
SYSTEM ONE
DISASTER RECOVERY
PROCEDURE
Provide details
Scenario 1
Provide details
Scenario 2
Total Loss of HW
!"
IT
Disaster
Recovery
Plan
Template
ADDENDUM
CONTACTS
<Provide details>
Minimal file systems to
be created and restored
from backup:
<List>
!!
IT
Disaster
Recovery
Plan
Template
!"
IT
Disaster
Recovery
Plan
Template
Disaster Recovery Plan for <System Two>
SYSTEM
OVERVIEW
Location:
PRODUCTION SERVER Server Model:
Operating System:
CPUs:
Memory:
Total Disk:
System Handle:
System Serial #:
DNS Entry:
IP Address:
Other:
Provide details
HOT SITE SERVER
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS
KEY CONTACTS
Hardware Vendor Provide
details
!"
IT
Disaster
Recovery
Plan
Template
SYSTEM TWO
DISASTER RECOVERY
PROCEDURE
Provide details
Scenario 1
Provide details
Scenario 2
Total Loss of HW
!"
IT
Disaster
Recovery
Plan
Template
ADDENDUM
CONTACTS
<Provide details>
Minimal file systems to
be created and restored
from backup:
<List>
!"
IT
Disaster
Recovery
Plan
Template
Disaster Recovery Plan for Local Area Network (LAN)
SYSTEM
OVERVIEW
Location:
SERVER Server Model:
Operating System:
CPUs:
Memory:
Total Disk:
System Handle:
System Serial #:
DNS Entry:
IP Address:
Other:
Provide details
HOT SITE SERVER
APPLICATIONS
(Use bold for Hot Site)
ASSOCIATED SERVERS
KEY CONTACTS
Hardware Vendor Provide
details
!"
IT
Disaster
Recovery
Plan
Template
SYSTEM TWO
DISASTER RECOVERY
PROCEDURE
Provide details
Scenario 1
Provide details
Scenario 2
Total Loss of HW
!"
IT
Disaster
Recovery
Plan
Template
ADDENDUM
CONTACTS
<Provide details>
Minimal file systems to
be created and restored
from backup:
<List>
!"
IT
Disaster
Recovery
Plan
Template
Disaster Recovery Plan for Wide Area Network (WAN)
SYSTEM
OVERVIEW
Location:
EQUIPMENT Device Type:
Model No.:
Technical Specifications:
Network Interfaces:
Power Requirements;
System Serial #:
DNS Entry:
IP Address:
Other:
Provide details
HOT SITE EQUIPMENT
SPECIAL APPLICATIONS
ASSOCIATED DEVICES
KEY CONTACTS
Hardware Vendor Provide
details
!"
IT
Disaster
Recovery
Plan
Template
SYSTEM TWO
DISASTER RECOVERY
PROCEDURE
Provide details
Scenario 1
Provide details
Scenario 2
Total Loss of HW
!"
IT
Disaster
Recovery
Plan
Template
ADDENDUM
CONTACTS
!"
IT
Disaster
Recovery
Plan
Template
Disaster Recovery Plan for Remote Connectivity
SYSTEM
OVERVIEW
Location:
EQUIPMENT Device Type:
Model No.:
Technical Specifications:
Network Interfaces:
Power Requirements;
System Serial #:
DNS Entry:
IP Address:
Other:
Provide details
HOT SITE EQUIPMENT
SPECIAL APPLICATIONS
ASSOCIATED DEVICES
KEY CONTACTS
Hardware Vendor Provide
details
!!
IT
Disaster
Recovery
Plan
Template
SYSTEM TWO
DISASTER RECOVERY
PROCEDURE
Provide details
Scenario 1
Provide details
Scenario 2
Total Loss of HW
!"
IT
Disaster
Recovery
Plan
Template
ADDENDUM
CONTACTS
!"
IT
Disaster
Recovery
Plan
Template
Disaster Recovery Plan for Voice Communications
SYSTEM
OVERVIEW
Location:
EQUIPMENT Device Type:
Model No.:
Technical Specifications:
Network Interfaces:
Power Requirements;
System Serial #:
DNS Entry:
IP Address:
Other:
Provide details
HOT SITE EQUIPMENT
SPECIAL APPLICATIONS
ASSOCIATED DEVICES
KEY CONTACTS
Hardware Vendor Provide
details
!"
IT
Disaster
Recovery
Plan
Template
SYSTEM TWO
DISASTER RECOVERY
PROCEDURE
Provide details
Scenario 1
Provide details
Scenario 2
!"
IT
Disaster
Recovery
Plan
Template
ADDENDUM
CONTACTS
!"
IT
Disaster
Recovery
Plan
Template
Appendix B – Suggested Forms
Key Business
Description Of Problem Extent Of Damage
Process Affected
_____________
!"
IT
Disaster
Recovery
Plan
Template
Management of DR Activities Form
• During the disaster recovery process all activities will be determined using a standard structure;
• Where practical, this plan will need to be updated on a regular basis throughout the disaster recovery
period;
• All actions that occur during this phase will need to be recorded.
Activity Name:
Reference Number:
Brief Description:
Commencement Completion
Resources Involved In Charge
Date/Time Date/Time
__________________
!"
IT
Disaster
Recovery
Plan
Template
• All key events that occur during the disaster recovery phase must be recorded.
• An event log shall be maintained by the disaster recovery team leader.
• This event log should be started at the commencement of the emergency and a copy of the log passed
on to the business recovery team once the initial dangers have been controlled.
• The following event log should be completed by the disaster recovery team leader to record all key
events during disaster recovery, until such time as responsibility is handed over to the business
recovery team.
Description of Disaster:
Commencement Date:
_________________
!"
IT
Disaster
Recovery
Plan
Template
Disaster Recovery Activity Report Form
• On completion of the initial disaster recovery response the DRT leader should prepare a report on the
activities undertaken.
• The report should contain information on the emergency, who was notified and when, action taken by
members of the DRT together with outcomes arising from those actions.
• The report will also contain an assessment of the impact to normal business operations.
• The report should be given to business recovery team leader, with a copy to senior management, as
appropriate.
• A disaster recovery report will be prepared by the DRT leader on completion of the initial disaster
recovery response.
• In addition to the business recovery team leader, the report will be distributed to senior management
!"
IT
Disaster
Recovery
Plan
Template
Mobilizing the Disaster Recovery Team Form
• Following an emergency requiring recovery of technology infrastructure assets, the disaster recovery
team should be notified of the situation and placed on standby.
• The format shown below can be used for recording the activation of the DR team once the work of
the damage assessment and emergency response teams has been completed.
Description of Emergency:
Date Occurred:
___________
!"
IT
Disaster
Recovery
Plan
Template
Mobilizing the Business Recovery Team Form
• Following an emergency requiring activation of the disaster recovery team, the business recovery
team should be notified of the situation and placed on standby.
• The format shown below will be used for recording the activation of the business recovery team once
the work of the disaster recovery team has been completed.
Description of Emergency:
Date Occurred:
____________
!!
IT
Disaster
Recovery
Plan
Template
• The progress of technology and business recovery tasks must be closely monitored during this period
of time.
• Since difficulties experienced by one group could significantly affect other dependent tasks it is
important to ensure that each task is adequately resourced and that the efforts required to restore
normal business operations have not been underestimated.
Note: A priority sequence must be identified although, where possible, activities will be carried out simultaneously.
1.
2.
3.
4.
5.
6.
7.
___________
!"
IT
Disaster
Recovery
Plan
Template
• On completion of business recovery activities the BRT leader should prepare a report on the activities
undertaken and completed.
• The report should contain information on the disruptive event, who was notified and when, action
taken by members of the BRT together with outcomes arising from those actions.
• The report will also contain an assessment of the impact to normal business operations.
• The report should be distributed to senior management, as appropriate.
!"
IT
Disaster
Recovery
Plan
Template
Communications Form
• It is very important during the disaster recovery and business recovery activities that all affected
persons and organizations are kept properly informed.
• The information given to all parties must be accurate and timely.
• In particular, any estimate of the timing to return to normal working operations should be announced
with care.
• It is also very important that only authorized personnel deal with media queries.
Customers
Suppliers
Media
Stakeholders
Others
____________
!"
IT
Disaster
Recovery
Plan
Template
Returning Recovered Business Operations to Business Unit Leadership
• Once normal business operations have been restored it will be necessary to return the responsibility
for specific operations to the appropriate business unit leader.
• This process should be formalized in order to ensure that all parties understand the change in overall
responsibility, and the transition to business-as-usual.
• It is likely that during the recovery process, overall responsibility may have been assigned to the
business recovery process lead.
• It is assumed that business unit management will be fully involved throughout the recovery, but in
order for the recovery process to be fully effective, overall responsibility during the recovery period
should probably be with a business recovery process team.
____________
!"
IT
Disaster
Recovery
Plan
Template
Business Process/Function Recovery Completion Form
The following transition form should be completed and signed by the business recovery team leader and
the responsible business unit leader, for each process recovered.
I confirm that the work of the business recovery team has been completed in accordance with the
disaster recovery plan for the above process, and that normal business operations have been
effectively restored.
Signature: ________________________________________________________________
Date: __________________________
(Any relevant comments by the BRT leader in connection with the return of this business process
should be made here.)
I confirm that above business process is now acceptable for normal working conditions.
Name: ___________________________________________________________________
!"
IT
Disaster
Recovery
Plan
Template
Title: ____________________________________________________________________
Signature: ________________________________________________________________
Date: __________________________
!"