Disaster Recovery Plan.docx

Disaster Recovery Plan.docx

《Disaster Recovery Plan.docx》由会员分享，可在线阅读，更多相关《Disaster Recovery Plan.docx（45页珍藏版）》请在冰点文库上搜索。

DisasterRecoveryPlan

DisasterRecoveryPlan

RevisionHistory

revision

date

name

description

Original1.0

04-06-2014

Mr.Gabuji

EstablishDocument

TableofContents

InformationTechnologyStatementofIntent

Thisdocumentdelineatesourpoliciesandproceduresfortechnologydisasterrecovery,aswellasourprocess-levelplansforrecoveringcriticaltechnologyplatformsandthetelecommunicationsinfrastructure.Thisdocumentsummarizesourrecommendedprocedures.Intheeventofanactualemergencysituation,modificationstothisdocumentmaybemadetoensurephysicalsafetyofourpeople,oursystems,andourdata.

Ourmissionistoensureinformationsystemuptime,dataintegrityandavailability,andbusinesscontinuity.

PolicyStatement

Corporatemanagementhasapprovedthefollowingpolicystatement:

∙ThecompanyshalldevelopacomprehensiveITdisasterrecoveryplan.

∙Aformalriskassessmentshallbeundertakentodeterminetherequirementsforthedisasterrecoveryplan.

∙Thedisasterrecoveryplanshouldcoverallessentialandcriticalinfrastructureelements,systemsandnetworks,inaccordancewithkeybusinessactivities.

∙Thedisasterrecoveryplanshouldbeperiodicallytestedinasimulatedenvironmenttoensurethatitcanbeimplementedinemergencysituationsandthatthemanagementandstaffunderstandhowitistobeexecuted.

∙Allstaffmustbemadeawareofthedisasterrecoveryplanandtheirownrespectiveroles.

∙Thedisasterrecoveryplanistobekeptuptodatetotakeintoaccountchangingcircumstances.

Objectives

Theprincipalobjectiveofthedisasterrecoveryprogramistodevelop,testanddocumentawell-structuredandeasilyunderstoodplanwhichwillhelpthecompanyrecoverasquicklyandeffectivelyaspossiblefromanunforeseendisasteroremergencywhichinterruptsinformationsystemsandbusinessoperations.Additionalobjectivesincludethefollowing:

•Theneedtoensurethatallemployeesfullyunderstandtheirdutiesinimplementingsuchaplan

•Theneedtoensurethatoperationalpoliciesareadheredtowithinallplannedactivities

•Theneedtoensurethatproposedcontingencyarrangementsarecost-effective

•Theneedtoconsiderimplicationsonothercompanysites

•Disasterrecoverycapabilitiesasapplicabletokeycustomers,vendorsandothers

KeyPersonnelContactInfo

Name,Title

ContactOption

ContactNumber

KhalifGafoor（ExecutiveDirector）

Work

（852）3791-2051

Alternate

Mobile

Home

EmailAddress

kgafoor@

AlternateEmail

DavidDoo（CFO

Work

（852）3791-2054

Alternate

Mobile

Home

EmailAddress

ddoo@

AlternateEmail

SadatGafoor（Operations Manager）

Work

（852）3791-2051

Alternate

Mobile

Home

EmailAddress

sadat@

AlternateEmail

WingChan（Accountant）

Work

（852）3791-2051

Alternate

Mobile

Home

EmailAddress

wingchan@

AlternateEmail

KeithCheung（Accounting Assistant ）

Work

（852）3791-2051

Alternate

Mobile

Home

EmailAddress

keith@

AlternateEmail

MikeZhang（ProductEngineer）

Work

（852）3791-2051

Alternate

Mobile

Home

EmailAddress

mikezhang@

AlternateEmail

NotificationCallingTree

ExternalContacts

Name,Title

ContactOption

ContactNumber

Landlord/PropertyManager

RealifInsurance（CindyKwok,Admin）

Work

（852）2783-6327

Mobile

Home

EmailAddress

PowerCompany

CLP（Miss.Chan,TechnicalSupport）

Work

（852）2678-6368

Mobile

Home

EmailAddress

TelecomCarrier1

WharfT&T（SueLam,TechnicalSupport）

Work

（852）121-000

Mobile

Fax

Home

EmailAddress

TelecomCarrier2

N/A

Work

Mobile

Home

EmailAddress

HardwareSupplier1

Avaya（EricWong,TechnicalSupport）

Work

（852）2131-2131

Mobile

Home

EmailAddress

ServerSupplier1

DrayTek（DanielTsui,TechnicalSupport）

Work

（852）3197-0130

Mobile

Fax

EmailAddress

WorkstationSupplier1

VictoryFurn（MissCheung,Admin）

Work

（852）2408-9328

Mobile

Home

EmailAddress

OfficeSupplies1

Shop248（LilyChan,Admin）

Work

（852）3114-9855

Mobile

Home

EmailAddress

Insurance–Name

Principal（JodyIp,TechnicalSupport）

Work

（852）2263-0329

Mobile

Home

EmailAddress

SiteSecurity–

NewEastOceanCentreManagementLtd（Mr.Chan,Manager）

Work

（852）2367-7118

Mobile

Home

EmailAddress

Off-SiteStorage1

（Herman,Admin）

Work

（852）2601-1131

Mobile

Home

EmailAddress

Off-SiteStorage2

N/A

UserID

Password

Home

EmailAddress

HVAC–

NewEastOceanCentreManagementLtd（Mr.Chan,Manager）

Work

（852）2367-7118

Mobile

Home

EmailAddress

PowerGenerator–

CLP（Miss.Chan,TechnicalSupport）

Work

（852）2678-6368

Mobile

Home

EmailAddress

Other–

N/A

Work

Mobile

Home

EmailAddress

ExternalContactsCallingTree

1PlanOverview

1.1PlanUpdating

ItisnecessaryfortheDRPupdatingprocesstobeproperlystructuredandcontrolled.Wheneverchangesaremadetotheplantheyaretobefullytestedandappropriateamendmentsshouldbemadetothetrainingmaterials.ThiswillinvolvetheuseofformalizedchangecontrolproceduresunderthecontroloftheITDirector.

1.2PlanDocumentationStorage

CopiesofthisPlan,CD,andhardcopieswillbestoredinsecurelocationstobedefinedbythecompany.EachmemberofseniormanagementwillbeissuedaCDandhardcopyofthisplantobefiledathome.EachmemberoftheDisasterRecoveryTeamandtheBusinessRecoveryTeamwillbeissuedaCDandhardcopyofthisplan.Amasterprotectedcopywillbestoredonspecificresourcesestablishedforthispurpose.

1.3BackupStrategy

Keybusinessprocessesandtheagreedbackupstrategyforeacharelistedbelow.Thestrategychosenisforafullymirroredrecoverysiteatthecompany’sofficesin307NewEastOceanCentreNo.9ScienceMuseumRdTsimShaTsuiKowloonHongKong.Thisstrategyentailsthemaintenanceofafullymirroredduplicatesitewhichwillenableinstantaneousswitchingbetweenthelivesite（headquarters）andthebackupsite.

KEYBUSINESSPROCESS

BACKUPSTRATEGY

ITOperations

Fullymirroredrecoverysite

TechSupport-Hardware

Fullymirroredrecoverysite

TechSupport-Software

Fullymirroredrecoverysite

FacilitiesManagement

Fullymirroredrecoverysite

Email

Fullymirroredrecoverysite

Purchasing

Fullymirroredrecoverysite

DisasterRecovery

Fullymirroredrecoverysite

Finance

Fullymirroredrecoverysite

ContractsAdmin

Fullymirroredrecoverysite

Warehouse&Inventory

Fullymirroredrecoverysite

ProductSales

Fullymirroredrecoverysite

MaintenanceSales

Fullymirroredrecoverysite

HumanResources

Off-sitedatastoragefacility

TestingFullyMirroredRecoverysite-

Fullymirroredrecoverysite

WorkshopFullyMirroredRecoverysite-

Fullymirroredrecoverysite

CallCenter

Fullymirroredrecoverysite

WebSite

Fullymirroredrecoverysite

1.4RiskManagement

Therearemanypotentialdisruptivethreatswhichcanoccuratanytimeandaffectthenormalbusinessprocess.Wehaveconsideredawiderangeofpotentialthreatsandtheresultsofourdeliberationsareincludedinthissection.Eachpotentialenvironmentaldisasteroremergencysituationhasbeenexamined.Thefocushereisonthelevelofbusinessdisruptionwhichcouldarisefromeachtypeofdisaster.

Potentialdisastershavebeenassessedasfollows:

PotentialDisaster

ProbabilityRating

ImpactRating

BriefDescriptionOfPotentialConsequences&RemedialActions

Flood

3

5

Allcriticalequipmentislocatedon3rdFloor

Fire

3

4

FM200suppressionsysteminstalledinmaincomputercenters.Fireandsmokedetectorsonallfloors.

Tornado

5

Electricalstorms

5

Actofterrorism

5

Actofsabotage

5

Electricalpower

failure

3

4

RedundantUPSarraytogetherwithautostandbygeneratorthatistestedweekly&remotelymonitored24/7.UPSsalsoremotelymonitored.

Lossofcommunicationsnetworkservices

4

4

TwodiverselyroutedT1trunksintobuilding.WANredundancy,voicenetworkresilience

Probability:

1=VeryHigh,5=VeryLowImpact:

1=Totaldestruction,5=Minorannoyance

2EmergencyResponse

2.1Alert,escalationandplaninvocation

2.1.1PlanTriggeringEvents

KeytriggerissuesatheadquartersthatwouldleadtoactivationoftheDRPare:

•Totallossofallcommunications

•Totallossofpower

•Floodingofthepremises

•Lossofthebuilding

2.1.2AssemblyPoints

Wherethepremisesneedtobeevacuated,theDRPinvocationplanidentifiestwoevacuationassemblypoints:

•Primary–Farendofmainparkinglot;

•Alternate–Parkinglotofcompanyacrossthestreet

2.1.3ActivationofEmergencyResponseTeam

WhenanincidentoccurstheEmergencyResponseTeam（ERT）mustbeactivated.TheERTwillthendecidetheextenttowhichtheDRPmustbeinvoked.AllemployeesmustbeissuedaQuickReferencecardcontainingERTcontactdetailstobeusedintheeventofadisaster.ResponsibilitiesoftheERTareto:

•Respondimmediatelytoapotentialdisasterandcallemergencyservices;

•Assesstheextentofthedisasteranditsimpactonthebusiness,datacenter,etc.;

•DecidewhichelementsoftheDRPlan