Part one explained the importance of a business continuity plan (BCP) and a disaster recovery plan (DRP). Part two provided detailed information to consider when writing a BCP and part three and included information for a DRP for your business. Part four is a checklist of the DRP items used during an actual disaster or event causing down time for the company.
Each state and local government has a disaster recovery plan (DRP) as a part of a public service organization. The California Office of Information Security has a review checklist as a part of an internal plan to assist state agencies in the event of a disaster.
Since every company provides different products and services, from a nursing home facility, a day care, web hosting, auto parts and/or repair, manufacturer for a General Electric part, distributor, mechanical services, plumber, or any other type of industry, the questions should be fine-tuned to meet each business’s needs.
The answers for each question should be one of the following:
- Has the step has been full addressed: yes or no
- Has the step been partially addressed but more development needed: yes or no
- Has the step not addressed yet more development needed: yes or now
Included a section for additional comments or questions and also include: the date completed
and page number referenced.
The DRP checklist includes:
- Does our company have a current business continuity plan (BCP)? If yes when was it last updated?
- Are critical processes documented and included in this DRP?
- Is a communication plan included?
- Are several communication channels included?
- Are call trees and lists, staff names, and recovery procedures documents automated or manual?
- Are there layers of contingencies such as IT or manual workarounds documented?
- Does the DRP require an alternate site for recovery?
- Does the DRP specify the level of service (which the business owner has agreed to be acceptable) to be provided while in recovery mode?
- Does the DRP have distinct management and staff assignment of responsibilities immediately following a disaster and continuing through the period of re-establishment of normal operations?
- Does the facilities section have predetermined contacts to recover facilities and/or rebuild plans for critical equipment?
- Are the operational procedures documented in a systematic fashion that will allow recovery to be achieved in a timely and orderly way?
- Does the DRP identify hardware and software critical to recovery?
- Does the DRP provide for print to mail services to be forwarded to the alternate facility?
- Does the DRP identify necessary support equipment (forms, spare parts, office equipment, etc.) to recover the mission critical business and/or functions?
- Do we have an UNINTERRUPTIBLE PWER SUPPLY (UPS) for critical systems and/or business area workstations?
- Do we have a back-up generator? If so, how much time can it run supporting critical systems, technical staff and business area workstations?
- Do we have a hot/cold site vendor on contract? If so, does the vendor have UPS and generator back-up?
- Is a current copy of the DRP maintained off-site?
- When was the off-site last updated?
- Do all users of the DRP have ready access to a current copy at all times?
- Do all employees responsible for the execution of the DRP receive training?
- Is all important data required to support the DRP backed-up?
- If back-ups are performed, are they stored in a protected location off-site?
- How often and what method(s) are used to test the DRP?
Disaster recovery is the process of resuming operations after a disaster. Many businesses are prone to ignoring disaster recoveries because a disaster may seem unlikely. Consider these unexpected disasters:
- The BP oil spill of 2010
- Hurricane Katrina
- The northeast blackout in 2003
The checklist is a reminder of the steps needed in order to overcome any disaster. Part five will cover the critical points to be considered when creating a BCP and DRP for your company.