Disaster Recovery Plan Template
Business Continuity Planning
ISO 27000 - ISO 27001 - ISO 27002 - ISO 27031
Sarbanes - Oxley - PCI-DSS - HIPAA Compliant
8
This Disaster Recovery Planning (DRP) template can be used by any size enterprise. The template and supporting material have been updated to be ISO 27031 and Sarbanes-Oxley compliant. The Disaster Recovery Planning Documentation comes as a Word document and includes:
- Disaster Recovery Plan Template
- Business and IT Impact Analysis Questionnaire
- Work Plan
- Disaster Recovery & Business Continuity Audit Program
- Incident Communication Plan and Policy
- Social Networking Checklist
Included in the template is Business Impact Questionnaire as well as a full Job Description for the Disaster Recovery Manager. The premium edition contains 15 full job descriptions.
New with version (version history) are (HIPAA, ISO 27000 Series, PCI, and Sarbanes Oxley Compliant):
- Web Site Disaster Recovery Planning Form
-
Department Disaster Recovery Activation Workbook
- Quick Reference Guide
- Team Alert List (Form)
- DRP Team Responsibilities
- DRP Team Checklist
- Critical Function(s) Definition
- Normal Business Hour Response Procedures
- After Hours Response Procedures
- DRP Location(s) Definition
- DRP Recovery Procedures
- Notification Procedures
- Notification Call List (Form)
- Vendor Disaster Recovery Questionnaire
- Vendor Phone List Form Updated
- Key Customer Notification Form
- Critical Resources to be Retrieved Form
- Business Continuity Off-Site Materials Form
Clients can also subscribe to Janco's DRP update service and receive all updates to the DRP Template for 18 months* from the date of purchase.
The DRP template is over 200 pages and includes everything needed to customize the Disaster Recovery Plan to fit your specific requirement. The electronic document includes proven written text and examples for the following major sections of a disaster recovery plan:
- Plan Introduction
- Business Impact Analysis - including a sample impact matrix
- DRP Organization Responsibilities pre and post disaster - drp checklist
- Backup Strategy for Data Centers, Departmental File Servers, Wireless Network servers, Data at Outsourced Sites, Desktops (In office and "at home"), Laptops and PDA's.
- Recovery Strategy including approach, escalation plan process and decision points
- Disaster Recovery Procedures in a check list format
- Plan Administration Process
- Technical Appendix including definition of necessary phone numbers and contact points
- Job Description for Disaster Recovery Manager (3 pages long) - entire disaster recovery team job descriptions are available.
- Work Plan to modify and implement the template. Included is a list of deliverables for each task.
There is a extensive section that show how a full test of the DRP can be conducted. It includes
- Disaster Recovery Manager Responsibilities
- Distribution of the Disaster Recovery Plan
- Maintenance of the Business Impact Analysis
- Training of the Disaster Recovery Team
- Testing of the Disaster Recovery Plan
- Evaluation of the Disaster Recovery Plan Tests
- Maintenance of the Disaster Recovery Plan
Dave Baker - City of Hamilton - I have found the DRP template invaluable
Testimonial - Bob Rifenbury -MCSE/CCNA Lauch Testing Lab - The DRP Template saved me about 6 months of work!
Testimonial - Kelly Keeler - Martin's Point Health Care - I have received and I began using the template immediately. IT IS GREAT! Made this process a snap for me. Cut my documentation time down from. weeks to hours! This document has made, what began to be an overwhelming process turn into a snap!
Testimonial - Juan Stamos - Mexico City Corporation - We had a DRP in place, but needed a more user friendly structure. The Disaster Recovery Template (Gold edition) has that structure. It was very easy to quickly move our DRP into Janco's DRP Template -- a real added value.
This template is
not for resale or re-distribution - Disaster Recovery Planning Template, Disaster Recovery
Template, Disaster Recovery
Business Continuity News
Can you use the cloud for Disaster Recovery and Business Continuity?
02/02/2012
In December 2010 Google launched Message Continuity, a new cloud-based disaster recovery and business continuity service for Microsoft Exchange. A year later, Google has announced the end of that service, leaving many organizations with the task of finding an alternative Microsoft Exchange business continuity service.
While the vendor said that existing contracts will continue to be serviced until their renewal date, for some early adopters of this service will only have a few weeks, or even days, to find an alternative solution.
This raises a warning flag about the wisdom of relying on the public cloud companies for any services which may be critical to your day-to-day activities; or for business continuity.
The cloud brings many new solutions for disaster recovery and business continuity: but buyer beware has never been more crucial. Service level agreements only apply if your supplier is in business; and there is certainly no requirement for suppliers to provide any support or service once a contract expires.
After this termination of service can you trust Google or any other vendor to host a mission-critical service?
- more info
Core disaster recovery planning questions
01/20/2012Whether your business is a one-man operation or it employs a thousand people, the starting point is the same: identify the processes critical to your success. To do this, you should first define what critical means in your business. Rank each process according to that definition, and then ask how long can your business survive without it, who performs it, and what IT resources support it.
Questions you can ask:
- more info
- Can you simply not survive without this process? This should be your primary priority. Your business continuity plan must protect all primary priorities when a disaster strikes.
- Can you survive only a day or two without it? This should be a secondary priority. Your business continuity plan should address all secondary priorities after primary priorities are handled.
- Can you survive a week or more without it? Add it to your list of low priorities.
Maximum Tolerable Period of Disruption
01/07/2012- more info
BS 25999 defines the maximum tolerable period of disruption (MTPD) as :the duration after which an organization's viability will be irreparably damaged if delivery of a particular product or service cannot be resumed". It advises companies to " assess over time the impacts if the activity is disrupted" and " establish the MTPD of each activity". It instructs us to identify the latest time by which an activity must be resumed, establish the minimum level to which resumption must be achieved, and set the time within which normal activity levels must be restored. It says companies should " identify any inter-dependent activities, assets, supporting infrastructure or resources that also have to be maintained"
Disaster Preparedness equals risk, resilience and effective disaster recovery planning
12/14/2011Most people who are involved in emergency management are aware of the four primary phases of emergency management: prevention/mitigation, preparedness, response and recovery.
Recovery includes short-term measures taken to restore essential functions and systems, as well as longer-term activities intended to facilitate a return to pre-emergency conditions, or ideally to improve conditions through mitigation measures.
- more info
Importance of data recovery for mid-sized companies
11/05/2011
Identifying the right tools for data recovery in the disaster recovery and business continuity processes is extremely important to the success and continuity of middle‐sized organizations. These tools need to be integrated without requiring an expensive and disruptive overhaul of existing IT infrastructure, and without adding to or demanding more of IT staff.
One key to this is to build on existing data storage and protection equipment. Tape is the best option when expanding on existing processes, because tape is a medium that is affordable.
- more info
