Memahami peran TI dan manajemen jaringan dalam pemulihan bencana

MEMAHAMI TENTANG DR DENGAN--

  Mengembangkan flosof pemulihan bencana Jelaskan prinsip-prinsip dasar perencanaan pemulihan bencana Jelaskan dan membangun kesinambungan bisnis dan pemulihan bencana fungsi Memahami langkah-langkah perencanaan pemulihan bencana Memahami peran TI dan manajemen jaringan dalam pemulihan bencana

BENCANA DAN PEMULIHAN BENCANA

  Bencana pemogokan Kehidupan sehari-hari dipenuhi dengan insiden yang dapat mengganggu bisnis Sebuah rencana pemulihan bencana memungkinkan untuk:

  Kelangsungan bisnis saat bencana Pemulihan operasi yang normal

  MENGEMBANGKAN FILSAFAT DISASTER RECOVERY ? Sebuah flosof pemulihan bencana berakar pada:o  Keinginan organisasi untuk melindungi dan melestarikan citra publik positif

   Aset fsik organisasi  Kehidupan para karyawan organisasi Gambar mencakup:o  Tingginya kadar kepuasan pelanggan  Iman pemegang saham  Pemangku kepentingan lainnya untuk sebuah organisasi

ORGANIZATIONS AND DISASTERS

  Many organizations have sufered through a disaster The ones that have not are not immune

Out of 250 organizations surveyed,

three of every 10 organizations

surveyed for this book have been through a disaster

DISASTER RECOVERY PLANNING

  Proses menilai risiko bahwa organisasi menghadapi : Mengembangkan, mendokumentasikan, menerapkan, menguji, dan memelihara prosedur Meminimalkan kerugian setelah bencana STATUS OF DISASTER RECOVERY PLANNING Nearly three of every four organizations have a disaster recovery plan in place Disaster recovery planning is still a new process in many organizations

DISASTER RECOVERING PLANNING PROCESS

  Too many people consider disaster recovery planning a mechanical process There are certainly tedious and laborious aspects to developing a plan Organizations have cultures, spirits, and images that permeate relationships with

   The organization Customers

    Business partners The public at large

  

  CUSTOMERS A customer’s view of an organization is crucial to the organization’s success Marketing managers hope customers see products as high quality and a good value New customers are difcult and costly to gain Less costly to keep current customers satisfed Customer satisfaction is a prime marketing tool A good public image is an asset that takes years to achieve and considerable diligence to maintain

STOCKHOLDER AND INVESTOR RELATIONS

  Maintaining investor faith is extremely important Institutional investor confdence is important Considerable efort is exerted to develop the faith and trust of investors Eforts to maintain faith are less expensive than those required to regain lost faith Organizations want to be viewed in the most positive light possible Backup computers, emergency networks, and temporary quarters are only tools

DISASTER RECOVERY PLANNING

  Intensifed since September 2001 Three of every 10 organizations surveyed report that their spending for disaster recovery planning has increased One of every 10 organizations reports that spending has increased dramatically S U M B E R K E P U S T A K A A N :

DISASTER RECOVERY PLANNING

PLANNING PRINCIPLES

  A solid plan requires the support and participation of

   Upper-level management

   All business unit managers

   Legal counsel

   Directors of all functional departments such as Human Resources, Facilities Management, IT, and Corporate security Assessing risk requires time consuming, detailed analysis

PLANNING PRINCIPLES

  All policies and procedures must

   Support the critical needs of business operations

   Comply with all relevant laws and regulations

   Be understood by the parties responsible for implementing hem

   Be approved by upper management The plan must clearly delineate and document chain of command of the

managers responsible for declaring,

responding to, and recovering from a disaster

PLANNING PRINCIPLES

  The disaster recovery system must facilitate and allow control of communications among

   Managers

  Decision makers

   Staf

    External support organizations

   Law enforcement Emergency services

   Media

   All policies and procedures must be available to all departments, managers, and staf during response and recovery

PLANNING PRINCIPLES

  All employees involved in disaster response and recovery must be trained to

   Address unanticipated problems

  Implement documented procedures

   Procedures must be tested and rehearsed Planners must continually evaluate new threats and business conditions as they develop During disaster response and recovery, the organization must

   Monitor the physical safety and mental health of employees 

  Evaluate the efectiveness of its procedures

PROCESS OF DISASTER RECOVERY PLANNING

  Implementing the plan and responding to disaster is an organization-wide efort Plan development requires many types of knowledge and skills Every organization-wide efort is laden with social and political obstacles that need to be addressed Each step of planning is interrelated and builds upon the others The disaster recovery planning team is responsible for developing the plan ESTABLISHING CONTINUITY AND RECOVERY FUNCTION Disaster recovery function consists of the people, departments, and support organizations that implement the plan and facilitate disaster recovery How this function is organized depends on

   The geographical dispersal of facilities within an organization

   The type of facilities occupied

   The number of employees

   Other factors STAFF OF AN ORGANIZATION’S DISASTER RECOVERY FUNCTION A centralized authority or group

  

Coordinates the development of disaster recovery

plans

   Plays a role in disaster response and recovery Managers and staf in functional departments have enterprise-wide roles in disaster response and recovery Department managers and

representatives from business units

have roles in disaster response and UNDERSTANDING THE STEPS OF DISASTER RECOVERY PLANNING Disaster recovery planning consists of eight major steps Smaller organizations may be able to develop and document a plan in a few months

In larger organizations, initial planning

can take many months and sometimes years

  

Management and all other members of

the planning team need to understand

STEP ONE

  The frst step is organizing the disaster recovery planning team The team must be a well-rounded group that represents all the functions of an organization Requires a high-level manager as a champion Ideally, the champion should be the CEO or a high-level manager designated by the CEO

STEP ONE

  The team must also have a designated leader, or two people who act as co-leaders Each participating department should assign a primary representative and an alternate to the team for continuity The team should be trained in disaster recovery planning Once in place, it should establish a schedule of activities, including meeting times and dates for completing the eight steps of planning There should be an awareness campaign about disaster recovery planning within the organization

STEP TWO

  Assessing the risk that an enterprise faces is the next step A business impact analysis is a method of assessing risks and determining the potential economic loss that could occur as a result of these risks

   All business processes must be identifed and analyzed The planning team should review legal and contractual

   requirements to determine the consequences of business disruption The results help guide disaster recovery planning and help

   the team develop procedures for recovering from various types of incidents

WORST DISASTERS

STEP THREE

  The third step is establishing the roles that each department, business partner, and outside service organization plays in disaster recovery The planning team determines the contribution that each department can make to the plan and disaster recovery Organization with multiple locations must

identify local departments and employees who

can participate in disaster recovery planning

  The planning team also determines the role that other organizations should play in the plan

STEP FOUR

  Developing actual disaster recovery policies and procedures is the next step Disaster recovery policies are the guidelines that govern the development of disaster recovery procedures Disaster recovery procedures are step-by-step methods designed to restore an organizational function or business process Developing policies and procedures to recover from disasters requires attention to detail and thorough analysis Procedures must be established for each step of disaster recovery and response

STEP FIVE

  The ffth step of the disaster recovery plan is to document the policies and procedures developed in the previous step Part of this documentation is done in conjunction with drafting, reviewing, and approving policies and procedures The approved documentation is included in the actual disaster recovery plan A group must be established to manage documentation and the cycles of reviews, approvals, and updates The document must include all contact information

STEP SIX

  Implementing the disaster recovery plan is next During this step

   organizations, and employees involved in disaster response and recovery The planning team begins to intensify the internal and

  The fnal plan is distributed to all of the departments,

  

external awareness programs to ensure that all parties know

about the plan Executives are briefed on the plan and their roles in disaster

   response and recovery Staf in all departments are trained on general and

   department specifc procedures Any outside services or equipment is purchased or

   contracted

STEP SEVEN

  The next step is to test and rehearse parts of the plan, and eventually to run a live simulation of a disaster A disaster recovery rehearsal is a live simulation in which all departments and support organizations run through the entire disaster recovery process, just as they would during an actual disaster Managers in eight of every 10 organizations surveyed think that testing and rehearsing disaster recovery plans is benefcial

PLAN TESTING AND REHEARSAL

STEP EIGHT

  The fnal step is often called the maintenance phase Once the plan is developed and tested, the planning team must continually Assess the emergence of new threats

    Adjust for changes in organizational structure Determine the impact of new technology on recovery procedures

   In many industries, planning teams may also need to monitor changes in laws and regulations that may afect their disaster recovery requirements When procedures are changed and documentation is updated, training requirements and staf skills must be updated as well

FREQUENCY OF PLAN UPDATES

  ROLE OF IT AND NETWORK MANAGEMENT IN DISASTER RECOVERY

Most organizations rely heavily on their

computer systems and communications networks The IT and network management in every organization have essential roles in disaster recovery planning and response Knowledgeable representatives from IT

and network management need to be

assigned to the team

IT REPRESENTATION

  At least one representative is needed for each of the following functions:o

   Data center operations

   Network management

   Desktop computing

   Voice communications

  At least one person is needed for each major

  IT application, including

    Supply chain systems

  Financial management support

   Enterprise resource planning (ERP)

   Human resources support

IT REPRESENTATION

  During risk assessment and business impact analysis, IT and network managers need to Help the team answer critical questions about the

   potential consequences of system downtime

   Assist in developing and documenting procedures for end-user departments and the IT departments that facilitate disaster response and recovery

IT REPRESENTATION

  During risk assessment and business impact analysis, IT and network managers need to

   Help develop and deliver training to department managers and employees who will assist in recovery procedures for computer systems and networks

   Help test and rehearse procedures to ensure that their organization can efectively recover from a disaster

IT MANAGERS ROLE

  IT and network managers have a key

role in supporting and managing the

ongoing disaster recovery plan

  Plans and procedures must be updated

  IT and network managers must determine

   How each new upgrade or additional application afects these plans and procedures, then

   Inform the staf who maintain disaster recovery documents of the necessary changes to keep the plan current

   Develop new training materials as needed

CHAPTER SUMMARY

  Disaster recovery planning is the process of assessing risks that an organization faces, then developing procedures to return to normal operations quickly No of-the-shelf disaster recovery plan can possibly meet the needs of all organizations Understanding the basic principles of disaster recovery planning can keep team members from getting lost in the long process

CHAPTER SUMMARY

  The disaster recovery function consists of the people, departments, and support organizations that implement the disaster recovery plan and facilitate recovery There are eight steps in the process of developing a disaster recovery plan Most organizations rely heavily on computer systems and communication