Disaster Recovery

Disaster Recovery

1. Why is it needed?

   • Ensure organisation can continue operating after disaster
   • Ensure critical data has been identified
   • Ensure key functions identified
   • Ensure key personnel have been identified and will have access to computer system after disaster
   • Alternative location established where operation can continue until after threat

2. What should a good security plan contain?

   • List of most critical business functions
   • List of facilities, hardware, software, data, personnel and other equipment needed to support those functions
   • Method for security access to resources
   • Method in getting in touch with personnel
   • Step-by-step instructions to implement plan
   • Details of staff training
   • Details of regular drills to test the effectiveness
   • Details of back-up facilities
     • Company owned backup facility
     • Reciprocal agreement with company running compatible computer system
     • Subscription to disaster recovery service

3. Common Back-Up and Recovery Strategies

   • Batch Processing System
     • Back-Up
       • Complete backup
       • Incremental back up suitable
         • Only changed data
       • Master data copied
         • Stored on portable medium and away from system
       • Transactions copied
     • Recovery
       • Master data restored
       • Batch of transactions should be processed again
   • Real Time/ Online Processing System
     • Back-Up
       • Exact copy (mirror image)
       • All transactions stored on both systems simultaneously
       • copied kept in separate location
     • Recovery
       • If live system fails then instant switch to back up system