Information Technology Reference
In-Depth Information
not go back and make offsite backups of critical data after the airplanes
struck. Wide-scale losses of power and sudden emergencies have been
headline news many times over the past decade. This chapter will address
what to do before and after the next event.
Continuity of Operations Versus Disaster Recovery
When a disaster strikes, the foremost concern is preventing loss of life.
Following this is retaining organizational value, which includes both
tangible assets as well as intangibles such as client loyalty and trust. An
alternate site or redundant data center can keep an organizational website
up and taking orders even while the data center resembles a tumbled pile
of rubble and EMS is still treating people in the area. Communications
between clients and organizational staff may be somewhat delayed, but a
virtual answering service and mobile computing systems can allow indi-
vidual knowledge workers and staff members to address client require-
ments from a nearby coffee shop or from home until new office space is
available. In some cases, a geographically distant website might serve as
the initial contact point between staff members forced to evacuate ahead
of a crisis.
Continuity of Operations (COO)
Organizational planning intended to address requirements for ongoing
operations during and following a disaster will focus on the continuity
of service and operations. These plans are immediately activated at the
time of the event and continue until terminated or no longer needed.
Redundant servers providing functions such as DNS and authentication
services might keep workstations and SCADA controls in operation even
in the event of primary data center loss. Offsite hosting of a Web portal or
e-business site might allow customers to continue placing orders, even as
the sales office is flooded and under water. Mobile communications and
remote desktop access might allow normal business to be conducted even
after a toxic spill in the headquarters lobby.
Planning for continuity of operations should identify and prioritize
services that are necessary to allow continued operations, even if at a
reduced level of availability or responsiveness. These plans should start
