CIMA Conference 2005

1
CIMA Conference - 2005
TwoSeven, Inc. presents Testing (?) Your Disaster
Recovery Strategy
holder
2
Discussion Points

• Types of Exercises
• Exercise Objectives
• Scenario Design
• Script Design
• Evaluation Metrics
• Supporting Documentation
• Exercise Project Plan
• Pre-Exercise Review

3
Types of ExercisesASIS International Guidelines
4
Types of ExercisesASIS International Guidelines
5
Exercise Objectives

• What is the Purpose of the Exercise?
• Plan Validation
• Audit Requirement
• Strategy Validation Technology and Business
• Recovery Team Practice
• What will be evaluated?
• Plan Structure
• Vendor Contract(s)
• Recovery Time Objectives
• Team Preparedness

6
Scenario Design

• Scenario Options
• Realistic and Believable
• Testable
• Flexible
• Review Vendor Contracts
• Parameters of contracts
• Timeframe of services
• Expectations

7
Script Design

• Create components of exercise script
• Definitive beginning and end
• Chronological time elapse with matching scenario
  details
• Expected actions/Actions Taken
• Comments from Proctors/Auditors
• Determine Roles and Responsibilities of
  participants
• Based on scenario
• Reasonable to ensure exercise can be completed
• Include external as well as internal
• Determine Exercise Ground Rules

8
Script Design
9
Evaluation Metrics

• Develop evaluation criteria to match objectives
• Numeric, Alphabetical, Weighted
• Clearly defined
• Consistent among proctors
• Evaluation Process
• When does evaluation begin and end
• Who has input authority

10
Evaluation Metrics
11
Supporting Documentation

• What will be included?
• Proctor/Evaluator Notes
• Evaluation Forms DR vendor and Business Units
• Exercise Set who gets what pieces
• Objectives, scenario/script, evaluation forms
• Debrief Notes
• Exercise Results and Assessment
• Who gets them?
• Recovery Team
• Executive Management
• Department Managers
• Vendors

12
Exercise Project Plan

• Project Plan Design
• Reverse Calendar
• Establish date of exercise
• Check with DR vendor for available dates
• Task Definition
• Detail
• Responsibility
• Timeframes
• Schedule/Project Impacts
• Review Task
• Determine potential impacts (brainstorm!)
• Devise solutions/course correction

13
Exercise Project Plan
14
Pre-Exercise Review

• Review Exercise Artifacts
• Exercise Objectives
• Review/Revise as necessary
• Scenario Design
• Still Valid and Viable?
• Script Contents
• Adjust/Revise as necessary
• Evaluation Metrics
• RTOs the same?
• Measurement
• Adjust/Revise as necessary
• Supporting Documents
• Adjust/Revise as necessary
• Project Plan
• Adjust/Revise as necessary

15
Quick Review and Questions

• Types of Exercises
• Exercise Objectives
• Scenario Design
• Script Design
• Evaluation Metrics
• Supporting Documentation
• Exercise Project Plan
• Pre-Exercise Review

16
TwoSeven, Inc.

• Thanks for your time