Information Technology Reference
In-Depth Information
The disadvantage of mobile sites is the cost of maintaining the contract. The contract will
include the cost to maintain the equipment, software, and deployment of systems during a
disaster. Since these mobile facilities are dedicated to a particular enterprise, the contract
would include fees for maintenance staff and running costs.
Reciprocal arrangement
- This is where an organization enters into an agreement with
another enterprise with similar computing facilities to process data on their behalf. The en-
terprises should each have spare processing capacity, and in the event of a disaster, either
enterprise can have their data processed by the other enterprise. In such a situation, either
enterprise can reciprocate. The main requirement is that IT systems between the two enter-
prises should be similar so that only data is transferred to the other enterprise for process-
ing.
The benefit of having reciprocal arrangements is that enterprises do not need to invest in
extra facilities such as hot or warm sites. They also have available at their disposal systems
which are similar to the ones they are using. Enterprises may charge a fee for use of the
extra capacity.
The disadvantage of reciprocal arrangements is that enterprises need extra processing capa-
city to accommodate the other enterprise in the event of a disaster and this capacity might
be idle most of the time. The other challenge is finding similar systems to the ones in use,
especially in terms of software which has similar configuration.
Testing the Disaster Recovery Plan
The IS auditor is required to test the disaster recovery plan that it is effective and can be
relied upon in the event of a disaster. The IS auditor will be required to collect evidence on
how the DRP is being implemented.
One of the documents the IS auditor will need to review is the disaster recovery plan. The
plan needs to be updated regularly to ensure that it's current and that it can be used when
a disaster is declared. A plan which is outdated may be difficult to implement as some of
the information contained in the plan may mislead the team. It is important that as the team
meets at its regular meetings, any important change should be updated on the DRP docu-
ment.
The composition of the DRP team is critical to the success of the plan and its implement-
ation. It is expected that all critical areas covered in the plan should have representation
from functional departments. The IT function should be represented at a high level in order
to ensure that the plan is implemented with sufficient resources. Equally the line business
managers should have representation on the DRP team.
Procedures for declaring a disaster should be clearly explained to all those involved in ex-
ecuting a recovery plan. A consistent approach by all involved is vital for the success of the
Search WWH ::
Custom Search