[ITAL] Disaster Recovery Management

[ITAL] Disaster Recovery Management

​

Objectives

• describe disaster recovery management (including: risk analysis, perpetrator analysis, risk testing, quantifying the risk, securing the risk, software protection, password controls, recovery management)

Disaster Recovery management

• Disaster may occurs and needs to be identified

• Disaster recovery plan (DRP) is needed to minimize disruption when disaster did occurs

Risk assessment

• Identifying potential risks

• Analyze potential impact and likelihood of them

• Business impact analysis (BIA) is created to quantifies the impact of a disaster - financial and non-financial

Open Ended

Suggest 3 potential hazards that might occur to an IT project.

Some potential hazards in an organization

• Loss of key personnel

• Natural Disaster - Fire, flood

• Malware

• Hacking

• Corruption of data

• Power cut

• ...

Risk analysis Matrix, higher score -> higher risk

Steps in Risk Analysis

• Identify hazards that might occur

• Identify the likelihood of the hazard

• Identify the impact to project / business

• Risk = Likelihood x Impact

Perpetrators

• People who deliberately cause problems (illegally)

• e.g. Hackers, Stealing or leaking business secrets etc.

• 
  

• 
  

Open Ended

Read the article about breaching customer info. List the impacts that such an hazard can leads to the Company.

Impacts to business

• Loss of revenue

• Penalty fees

• Cost of recovery

• Damage to organization's reputation

Securing the risk

• Measures needed to protect against those risks

• Base on the risk ranking identified

• Impacts from Loss of personnel can be reduced by:

• Require documentation of procedures

• Have at least two people able to operate key component of the system

Recovery Management

• Plans are needed for recovery from disaster, including:

• Restoration of backup, hardware replacement, software setup, replacement of key personnel and emergency relocation

• Required resources, people, data etc. must be identified and planned

• The time required for recovery is also planned

• 
  

Open Ended

School Fire Evacuation Plan is also a type of recovery management system (to protect personnel). Identify what kind of resources are included in the planning of the fire evacuation plan.

Recovery Testing

• Disaster recovery plans also needs to be tested, to check if it works as planned

• especially data restoration should be tested periodically

• e.g. Backup data usually tested immediately to check for integrity

•