Auditing Disaster Recovery Management - Auditing Information Systems: Enhancing Performance of the Enterprise - page 129

additional network equipment. The operating system software on servers and workstations
might also require updating to match that which is on the main data centre.
The IS auditor would be required to review readiness of the site just like in the hot site and
that all the required equipment is available and users have been trained to operate from the
site and do regularly rehearse working from the site.
Cold sites - The cold site does not include any hardware and software already set up to
operate. It only has limited facilities, such as electrical equipment and network cabling.
Environmental controls equipment may be available, such as cooling and fire suppression
equipment. The cold site does not include any data which has to be transferred on to the
servers when installed.
The benefits of cold sites are that they have the least cost in terms of setup and a limited
set of equipment is required. In a cold site, the enterprise also does not need to worry about
keeping software up to date as these systems would be purchased at the point of need, such
as when a disaster notice is activated.
The disadvantage of cold sites is that they would require some time to set up to full oper-
ation similar to the main site in the event of a disaster. Servers and workstations have to
be procured from vendors, and this takes some time as many vendors do not keep stock of
server equipment. It is possible that the enterprise can enter into contracts with vendors so
that they can keep spare servers for emergency cases.
The approach the IS auditor would take is similar as indicated in the hot and warm sites.
The level of preparedness in the cold site might be limited as only basic equipment would
have been installed.
Mobile sites - These are sites which can be relocated to a recovery site for use. The mobile
site could be a couple of mobile trucks with all the necessary computing facilities installed
on board and can be moved to the operational centre within a short time to allow business
to continue. Mobile sites are commonly used where an enterprise cannot relocate to a new
site due to the need to have a physical presence in the area of operation.
Mobile sites are fully self-contained with diesel generators for power supply. The enterprise
will have everything it needs to recover and continue with business operations on the mo-
bile sites. The facilities will also have voice and data connectivity, servers, workstations,
printers, and the required environmental controls.
The benefit of mobile sites is that the enterprise will have the ability to resume productivity
following an incident without relocating to a new recovery centre and within a short time.
Some mobile site vendors are able to provide mobile site facilities within an hour of a dis-
aster. The facilities will have all the necessary equipment, software, and data to immedi-
ately commence operations.