DISASTER RECOVERY

1
DISASTER RECOVERY BUSINESS CONTINUITY PLAN

• PRESENTATION BY
• S YADAV
• MOF, CAB, RBI, PUNE
• 8 May, 2008

2
WHAT IS A DISASTER

• A SUDDEN UNEXPECTED EVENT THAT WILL
  SIGNIFICANTLY AND NEGATIVELY AFFECT AN
  INSTITUTIONS OPERATIONS

3
TYPES OF DISASTER

• LOCAL
• REGIONAL
• NATIONAL

• TRADITIONAL (FIRE, FLOOD, EARTHQUAKE)
• NON TRADITIONAL (POWER FAILURE, STRIKE,
  ARSON, TERRORISM)

4
DIFFERENCE BETWEEN DISASTER BREAKDOWN

• BREAKDOWN CAUSES SMALL DISRUPTIONS WHICH CAN
  BE RECTIFIED WITHIN A PREDICTABLE TIME FRAME

• DISASTER HAS MUCH LARGER REMIFICATIONS AND
  TIME FOR RECOVERY TAKES LONGER TIME

5
BCP/DRP

• DRP
• Plan to recover out from a Disaster
• BCP
• Plan for Business Continuity
• In case of Disasters/ Non Disasters

6
Objectives OF DISASTER RECOVERY BCP

• TO REDUCE INJURY/ LOSS TO HUMAN LIFE ,
  DAMAGE TO FACILITIES ETC.
• TO INVOKE EMERGENCY PROVISIONS TO STABILISE
  THE EFFECTS OF DISASTER
• TO IMPLEMENT PROCEDURE CONTAINED IN THE D.R.P.

7
Cost of absence of DRP/BCP
8
Cost with DRP/BCP
9
Objectives OF DISASTER RECOVERY BCP

• minimizing interruptions in operations
• resuming critical operations within a specified
  time after a disaster
• minimizing financial loss
• assuring clients, customers, community,
  suppliers, employees and share holders and
  stakeholders that their interests are protected
  and
• maintaining a positive public image of the
  organization

10
BCP for Banks Ensuring That,

• Bank can provide continuous service to the
  customers,
• Without seriously affecting the back end
  operations of the bank

11
DRP/BCP - Risks in Banks

• Customer impact financial and services losses
• Hold over causing delayed processing
• Time frame lag
• Resource shortage staff, skill, equipment,
  stationery / stores
• Third party suppliers non-provision of services
• Denial of access to alternate processing site(s)
• Internal / External communication
• Incompatible Information Technology

12
BUSINESS CONTINUITY

• Why is it the responsibility of Senior
  Management?
• What are the components of Business Continuity
  Plan?
• Senior Management
• User Management
• User Data Processing Procedures
• Personnel who must respond to Disaster Scenarios
  are most important

13
Key Decision Making Personnel

• Team Leaders
• Equipment and S/w Vendors
• Recovery Site Representatives
• Network Re-routing Services
• Offsite Media Custodians
• Insurance Agents
• Contract Services

14
Procedures

• Emergency Action Procedure
• Notification Procedure
• Disaster Declaration
• Systems Recovery
• Network Recovery
• User Recovery (Manual Procedures)
• Salvage Operations

15
DRP SHOULD CONTAIN

• INSTITUTIONS PHILOSOPHY MISSION REGARDING
  D.M. RECOVERY
• D.M. EXECUTIVE COMMITTEE
• GUIDELINES FOR RECOVERY EFFORTS

16
DRP SHOULD CONTAIN contd

• CLEARLY DEFINED DUTIES, AUTHORITY,
  RESPONSIBILITIES - TO MANAGE CRITICAL
  FUNCTIONS
• OPERATIONAL MANUAL
• DESIGNATED EQUIPPED SITES FOR RECOVERY

17
Computer Hardware Alternatives

• Hot Sites
• Ready to Operate Within Several Hours
• Not for long term extended use
• Network Component
• Warm Sites
• Partially Configured with network connections
• Without Main Computer
• Cold Sites
• Site with only basic environment

18
BACKUP

• FOR CONTINUED AVAILABILITY OF CRITICAL
  RESOURCES, PROCESSES SERVICES

19
BACKUP SHOULD BE

• BACKUP OF DATA
• BACKUP OF SYSTEM SOFTWARE
• SECURED / SAFE
• ENCRYPTED
• ON REMOVAL MEDIA

20
BACK-UP STRATEGY 3 TYPES

• COMPLETE- ENTIRE DISK DRIVE
• PARTIAL- BACKUP ONLY SELECTED DIRECTORIES OR
  FILES OR DATABASES
• INCREMENTAL BACK-UP - BACKING UP ONLY THOSE
  FILES THAT HAVE BEEN CHANGED SINCE LAST
  BACKUP

21
STORAGE OF BACK-UP

• IN THE SAME ROOM
• IN THE SAME BUILDING
• OFF-SITE

22
Off-Site Facilities

• Security and Control of Off-Site Facilities
• Physical Access Controls
• Environmental Monitoring Control
• Media and Documentation Backup
• Periodic Backup Procedures
• Frequency of Rotation
• Inventory (list) must be maintained
• Automated Tape Management System

23
OPERATIONAL ISSUES

• PRESCRIBED PROCEDURE TO STORE RETRIEVE
• TRAINING
• PROPER LABELING
• SECURED LOCATION
• TESTING

24
OPERATIONAL ISSUES - DRP Testing

• Types of test
• Modular tests
• Test a set of procedures
• Strategy tests
• Validate entire strategy
• Determine implementation times of plan strategies
• Parallel tests
• Validation of recovery strategys capability to
  handle the anticipated workload
• Establishing shift schedules for recovery
  operations
• Mock disasters
• A disaster scenario is articulated and recovery
  teams step through procedures to cope with the
  interruption

25
OPERATIONAL ISSUES contd

• BACK-UP SCHEDULE ( FREQUENCY)
• VENDOR SUPPORT
• PROPER DOCUMENTATION
• MAXIMUM TIME
• CONTINGENCY PLAN
• PRIORITY DELIVERY BY MANUFACTURER
• LOGISTICS
• RESPONSIBILITIES

26
OPERATIONAL ISSUES contd.

• ENCRYPTION ( KEY TO BE KEPT AT SECURED PLACE)
• VERIFICATION
• AVOID OVER BACK-UP
• PROPER RECORD OF ALL MOVEMENTS OF COMPUTER
  TAPES/DISCS

27
THANK YOU