Information Technology Reference
In-Depth Information
Lessons learned during simulations and tests should be used as feed-
back for an update to the plan. Once the plan has been finalized and
approved, it should communicated to responsible parties, made available
for review, tested regularly, and remain a living document to be updated
to address changes in business process, organizational structure, person-
nel, or technology.
Technology in Recovery Planning
Because many business processes rely on technology, the CIO or IT lead
will typically play a significant role in planning and implementing COO/
DR planning activities. Technology is often fundamental to communica-
tion strategies, requiring special attention to recovery of authentication,
e-mail and website capabilities early in the recovery process.
Alternate Data Center
Disasters may prevent normal use of the data center due to disruption of
utilities (power, chilled water, and networking are all common require-
ments for data center operations) or outright destruction of the facility. In
either case, an alternative site for data center operations may be required
for COO/DR operations. Depending on the organization, the recovery
site may need nontechnical elements such as food, water, and sleeping
accommodations for personnel displaced over a large geographic distance
due to a large-scale event such as a hurricane or earthquake.
The type of alternative data center needed depends on recovery objec-
tives identified as a result of the BIA, and might include:
•
Hot site
—The most expensive alternative, with the fastest recovery
time. Hot backup sites have redundant hardware and software found
in the primary data center, and may include continuous-backup and
multiple-location clustering of servers and files stores so that the total
loss of a primary data center is transparent to users, whose systems
simply switch to the hot failover services automatically.
•
Wa rm site
—Less expensive than a hot site, with a longer recovery
time. Warm sites include hardware, software, and utilities necessary
for data center operations recovery but require details such as system
