Disaster Recovery Plan Template
Business Continuity Planning
Sarbanes - Oxley, ISO 27000 (27001 & 27002)
PCI, & HIPAA Compliant
This Disaster Recovery Plan and Business Continuity Template can be used for any size of enterprise. The Disaster Recovery Planning template and supporting material have been updated to be Sarbanes-Oxley and HIPAA compliant. The DRP Template comes as a Word document and includes:
- Disaster Recovery Plan and Business Continuity Template
- Business and IT Impact Analysis Questionnaire
- Work Plan
- Disaster Recovery / Business Continuity Audit Program
- Pandemic Planning Check List
New are:
- Compliance with the new ISO 27000 (27001 and 27002), Sarbanes-Oxley, PCI-DSS and HIPAA standards
- Web Site Disaster Recovery Planning Form
- Department Disaster Recovery Activation Workbook
- Quick Reference Guide
- Team Alert List (Form)
- Disaster Recovery Plan and Business Continuity Team Responsibilities
- Disaster Recovery Plan and Business Continuity Team Checklist
- Critical Functions Definition
- Normal Business Hour Response Procedures
- After Hours Response Procedures
- Disaster Recovery Plan and Business Continuity Location(s) Definition
- Disaster Recovery Plan and Business Continuity Recovery Procedures
- Notification Procedures
- Notification Call List (Form)
- Updated Business and IT Impact Analysis Questionnaire
- Vendor Disaster Recovery Questionnaire
- Vendor Phone List Form Updated
- Key Customer Notification Form
- Critical Resources to be Retrieved Form
- Business Continuity Off-Site Materials Form
- Chief Information Officer
- Chief Security Officer
- Chief Compliance Officer
- VP Strategy and Architecture
- Director Disaster Recovery and Business Continuity
- Director e-Commerce
- Manager Disaster Recovery
- Manager Disaster Recovery and Business Continuity
- Disaster Recovery Coordinator
- Disaster Recovery - Special Projects Supervisor
- Manager Database
- Capacity Planning Supervisor
- Manager Media Library Support
- Manager Site Management
- Pandemic Coordinator
The DRP template is over 200 pages and includes everything needed to customize the Disaster Recovery Plan to fit your specific requirement. The electronic document includes proven written text and examples for the following major sections of a disaster recovery plan:
- Plan Introduction
- Business Impact Analysis - including a sample impact matrix
- DRP Organization Responsibilities pre and post disaster - drp checklist
- Backup Strategy for Data Centers, Departmental File Servers, Wireless Network servers, Data at Outsourced Sites, Desktops (In office and "at home"), Laptops and PDA's.
- Recovery Strategy including approach, escalation plan process and decision points
- Disaster Recovery Procedures in a check list format
- Plan Administration Process
- Technical Appendix including definition of necessary phone numbers and contact points
- Job Descriptions (each 3 pages long) for:
- Disaster Recovery Manager
- Manager Disaster Recovery and Business Continuity
- Pandemic Coordinator
- Work Plan to modify and implement the template. Included is a list of deliverables for each task. (Risk Assessment and Vulnerability Assessment)
There is a extensive section that show how a full test of the DRP can be conducted. It includes
- Disaster Recovery Manager Responsibilities
- Distribution of the Disaster Recovery Plan
- Maintenance of the Business Impact Analysis
- Training of the Disaster Recovery Team
- Testing of the Disaster Recovery Plan
- Evaluation of the Disaster Recovery Plan Tests
- Maintenance of the Disaster Recovery Plan
Click on the link below to get the Disaster Recovery Plan and Business Continuity sample pages now and make it a part of your disaster recovery toolkit.
This template is
not for resale or re-distribution
Disaster Planning - Business Continuity News
Learn more about Computer Liquidators.
Disaster Recovery Business Continuity for Remote Offices
Data residing outside the data center at remote and branch offices (ROBOs) accounts for a significant portion of an enterprise's information store, yet it often either is protected with inefficient backup processes or is not protected at all -- leaving companies at risk on many fronts.
In a recent research report, high priority projects for ROBOs included improving information security measures; ensuring compliance with government, industry or corporate governance mandates; and improving Disaster Recovery Business Continuity processes.
- more infoDRP and Security Plans key to compliance
Preparing for a disaster requires detailed planning, preparation and testing. Knowing what IT assets need to be recovered, where to recover them and how to recover them are the essence of IT Disaster Recovery. The most difficult challenge is mapping the prioritized business requirements to the IT assets so that recovery can be staged. The recovery strategy then evolves based on the available options which support the required recovery objectives. The resulting Disaster Recovery plans contain all of the information detailing where to go, who is to do what and the information required to rebuild servers, restore applications and data as well as restart and synchronization procedures. - more info
DRP Template
If you are new to recovery planning, make sure that you research the subject thoroughly before embarking on a disaster recovery project. Consider engaging a consultant (internal or external to your organization) to help you in your project planning effort. Disaster recovery planning is not a two-month project, neither is it a project that once completed, you can forget about. An effective recovery plan is a live recovery plan. The plan must be maintained current and tested/exercised regularly.
The primary objective of a Business Resumption Plan is to enable an organization to survive a disaster and to reestablish normal business operations. In order to survive, the organization must assure that critical operations can resume normal processing within a reasonable time frame. Therefore, the goals of the Business Resumption Plan should be to:
- Identify weaknesses and implement a disaster prevention program;
- minimize the duration of a serious disruption to business operations;
- facilitate effective co-ordination of recovery tasks; and
- reduce the complexity of the recovery effort.
Why is diaster and business continuity planning important
Federal, State and Local Governments are chartered to mitigate and control the event, provide life and safety measures, and then restore infrastructures. The Red Cross provides emergency relief in the form of food, health and shelter. If insured, an insurance company will settle damage claims and provide monetary relief. However, none of these organizations will, or can, recover your business. Your companys recovery is strictly up to you, and it commences with a solid business continuity/disaster recovery plan.
Should your company experience a disaster, the first 72 hours following the incident will be the most critical in your recovery efforts. How you respond during that period will determine if your business will survive or not. Furthermore, the most important hour is the one immediately following the event. If ever required, your Business continuity plan will enable you to respond in a systematic and organized fashion. It will guide your organization, step-by-step, from responding to the actual event all the way through to full occupancy of your repaired facility.
- more infoSimple Disaster Planning Activities
Creating a disaster recovery plan is a complex task; however there are a number of basic steps that you can follow to start thre process
- Prepare your systems, processes, and people for an organized response to disaster when it strikes.
- Identify critical IT systems and develop a long-range strategy.
- Select and train your disaster recovery team.
- Conduct a Business Impact Analysis.
- Determine risks to your business from natural or human-made causes.
- Get management support.
- Create appropriate plan documents.
- Test your plan.
Disaster Plan & Business Continuity Infrastructure
The key technology
elements of a Disaster Recovery Plan and Business Continuity Plan (DRP/BCP)
infrastructure are the primary data center, a remote site that duplicates the
resources in that primary location and the method used to get files (master and
transaction) between the two sites - such as high-bandwidth network
connections. The best DRP/BCP strategies follow a "redundant every-thing"
philosophy throughout the data center. Multiple mainframes and servers should
run in the production and backup data facilities. Then, if a component in the
production system encounters problems, it immediately fails over to the local
backup as a first line of defense.
Power supplies and communication links are one of the most critical components in a DRP/BCP strategy.
White House email system down for a day
High tech White House falls down when its email disaster plan does not work.
The White House Press Secretary Robert Gibbs announced at a 1:45 p.m. press briefing that he was unable to send out the customary week-ahead memo as the White House e-mail system was "not working so well." D.C. reporters got their next e-mail from the White House around 8:30 the following morning indicating that the outage lasted most of a day.
- more info