BTEC DIT Disaster Recovery Plan

​BTEC DIT Disaster Recovery Plan

By Ryan Mordey

This policy sets out how an organisation will respond to various types of disasters so staff can return to normal as quickly as possible.

Many organisations rely on digital devices and use of data to operate, if they do not prepare it will take longer to get back to work therefore losing them money.

​

Disaster Recovery Plan

The policy will cover what to do in the following disasters:

​

​Disasters

• Natural disasters including fires, floods, earthquakes which could damage equipment.

• Equipment failure, where back up devices are needed

• Data loss, Accidental or deliberate

• Terrorist action, targeted attacks

• Cyber attacks, Malware of DDOS

Multiple Choice

What is the purpose of a disaster recovery policy?

• Outlines who is responsible and what should be done in case of a disaster to recover quickly.

• To outline the company's marketing strategy during a crisis, what should they say to their customers.

• To define employee roles in daily operations, so employees know how to complete the jobs they are expected to do.

• To establish guidelines for product development and innovation ensuring a company is always improving.

Match

Connect the description to the disaster it would be classified as.

• Massive amounts of rainfall has led to a flood in the server room.

• The older computers within the office have suddenly stopped switching on meaning staff cannot do their work.

• A new employee has accidentally deleted all the solicitors evidence to help their clients.

• 9/11 Twin towers in New York were targeted by a group with an agenda impacting digital systems on a scale never seen before.

• A group of hackers have used a botnet virus which creates a range of computers trying to flood servers so people can no longer access their servers.

Natural Disaster

Equipment Failure

Data Loss

Terrorist Action

Cyber Attack

• Natural Disaster

• Equipment Failure

• Data Loss

• Terrorist Action

• Cyber Attack

Disaster Recovery Plan

A disaster recovery policy plan will set out:

• Back up process: How often data is backed up, what data should be backed up, where should data be backed up

• Where the organisation will operate: If the premises and equipment is destroyed staff will need to move to another location, replacement hardware and software would be needed.

• Project Plan: Outlines the tasks that needed to be completed and who is responsible for each task. There will also be a timeline that sets out the order of each task to be completed.

This policy will identify systems that are critical to operation of the business and less important elements, allowing them to prioritise what to do in the recovery plan.

Staff may need to investigate, or shut down existing systems in case of an attack. They might also need to delete files in case of a data breach or be in chare of finding a new location.

​

Critical Systems

Multiple Choice

Why will a disaster recovery policy outline critical systems?

• To ensure all systems are treated equally during recovery.
• To identify systems that can be ignored in recovery efforts.
• To create a detailed inventory of all hardware components.
• To prioritize recovery efforts and minimize downtime.

Categorize

Options (10)

Back up Process

Project Plan

Alternative Building to work in

Replacement Hardware

Replacement Software

How to use software

How to set strong passwords

How to dispose of equipment

How to use your personal smartphone

How staff should behave

What should be included in a disaster recovery policy, and what should be in other policies?

Disaster Recovery Policy

Other Policy

Cyber Attack Recovery Plan

Following a cyber attack an organisation will follow this process:

1. Investigate: Identify the type of attack, when did it start, however severe is the attack and what has been affected

2. Response: Relevant stakeholders are informed including customers, information commissioner, authorities like the police if its a crime.

Cyber Attack Recovery Plan

3. Manage: Contain the attack, disconnect or shut down affected systems to prevent further damage, keep evidence for analysis.

4. Recovery: Disinfect digital systems, restore data from backup and return systems to full working order.

5. Analyse: Identify the source of the attack, how were hackers able to access systems, modify policies, security and staff training to prevent in future.

Reorder

Reorder the following steps in that would normally be found in a disaster recovery policy following a cyber attack:

• Investigate

• Respond

• Manage

• Recover

• Analyse

1

2

3

4

5

• 1
• 2
• 3
• 4
• 5

Match

Connect the characteristics to the stage of the cyber recovery plan that would be in a disaster recovery plan.

• What type of attack?

  How severe is the attack?

  Which systems are affected?

• Inform customers

  Inform data commissioner

  Inform police

• Contain the attack

  Disconnect the systems

  Shut down systems

  Keep evidence

• Disinfect digital systems

  Restore data from backups

  Return systems to working order

• Identify the source of the attack.

  How did they gain access?

  Modify security, updates and train staff to prevent future issues.

Investigate

Respond

Manage

Recover

Analyse

• Investigate

• Respond

• Manage

• Recover

• Analyse

Main Task

Create a visual diagram that shows the stage in a cyber attack recovery plan found in a disaster recovery plan.

This can be done using smart art in MS PPT. You should then expand each section in a new slide explaining the processes that happen in each stage.

Computer Task

Complete the worksheet, answer ALL questions.