Disaster Recovery Plan

for
Information Technology

Scope of This
Plan
Enables the department to restore
companys core information systems in the
event of a disaster.
Identifies areas of substantial risk and
exposure to disaster.

Practices & Procedures

The fundamental business practice followed by
the IT department is essential to the recovery of
department operations. These key activities
include:
Data backup & restoration
Server & systems administration
System shutdown and startup
Identification of critical Systems

Data Backup & Restoration

Full backups are performed each weekend with
incremental backups occurring each weeknight.
Backup tapes for each week are collected and stored
in the Server Room in a fire-proof safe. Each week
the collection is taken offsite. Long term archives
are removed from the rotation scheme with monthly
backups retained for one year and annual backups
retained for three years. Key servers across all
platforms are included in the backup schedule.
Archival copies of operating system and application
software, detail network documentation and a copy
of this plan are also stored offsite.

Server & System Administration

Current practice for managing servers and desktop
systems across company include:
Ensuring high availability of servers
User support and desktop system support
Server maintenance is scheduled outside of
normal business hours

System Shutdown & Startup

Instructions for shutdown and startup of
critical servers will be located in the Server
Room and attached to this plan. These
procedures cover the equipment in the
Server Room as well as network components
for the WAN/LAN. A copy of these procedures
is also stored offsite.

Critical Systems
ERP System
Windows Server Domain Controllers
Storage and Application Servers
DHCP/WINS/DNS Servers and Print Services
Network Communication components
(i.e. firewalls, routers, wireless access point,
etc)
Voice Communications (PBX)

Recovery Operations
Re-establishing operations after a disaster requires the
following:
A process to follow as a guide for recovery
Identification of the most critical services provided by the
department
Priorities for re-establishing those services
System documentation/configuration information
Preservation of system and data backup tapes
Additional preparatory actions include:
Contact equipment replacement provider to initiate declaration of
disaster and delivery of hardware
Notify hardware maintenance providers of disaster condition and
disposition of affected equipments
Notify software providers of disaster condition and imminent
need of new software keys, as appropriate, upon identification of
serial numbers of replacement equipment
Retrieve most recent backup tapes and transport them the hostsite location

Recovery Process
Initial Reaction phase
The discoverer of a disaster will notify the related parties. Each
party will notify others as appropriate.
Initial organization and preparation for the recovery:
Notify and assemble the recovery staff
Review recovery plan
Organize for damage assessment
Establish communications systems for the staff
Assign duties and responsibilities to the staff
Perform a preliminary damage assessment:
Conduct a site survey of the affected area
Inventory any salvageable or usable equipment
Review the overall damage
Communicate status to executive staff

Recovery Process
Recovery phase
Salvage operations:
Recover all salvageable hardware
Service or refurbish equipment as necessary
Re-establish services in their order of priority
Reconstitution Phase
Restore IT System processing capabilities to normal
operations. Depending upon the amount of damage that
has occurred, the recovery process can be done locally or if
the situation warrants it, the restoration can be done at
other non-affected facility.

Appendix:
Primary and Secondary Facility Contact
Information
System Shutdown & Startup Procedures
Command Center Operations