Purpose: Current State of Disaster Recovery Efforts
Update on Disaster Recovery Task Force Efforts June 4, 2007 Contributors: CNIC Disaster Recovery Task Force State Data Center
All SDC-based Agencies will have developed, maintained, and tested plans by June 2009 to restore and recover their agency critical business functions/applications in the event of a disaster. (per DAS Statewide Business Continuity Planning Policy 107- 001-010 -- http://egov.oregon.gov/DAS/OP/docs/pdf/107001010.pdf )
The CNIC CIO’s formed a CNIC Disaster Recovery Task force to examine and propose DR solutions for systems and services managed by the State Data Center.
The Sungard DR service contract was extended through October 2007, while requirements for a new RFP and service contract can be gathered and awarded.
Disaster Recovery Plan : Steps taken to restore specified infrastructure requirements in support of key Business Functions such as Information Systems, business equipment environments, internal and external network connections, and data structures utilizing alternate resources for hardware, software, data, and networks. - Hardware - System Software - Data and Data Structures - Applications - Network Connectivity - Desktop Services - Production Support DRP Business Continuity Plan : Steps taken to restore alternate business processes in the event that automated processes or business infrastructures are unavailable, employing documented workaround and/or manual procedures and alternate resources. - Relocation of Personnel - Availability of remote support services - Contingency office space - Process workarounds BCP Components of the Business Continuity Plan
Complete DR plans for IT infrastructure that support the Agency critical business functions .
Track and manage the BCP/DR planning effort by the use of a Scorecard which includes the DR tasks, milestone dates, and detailed template worksheets.
Assure all IT application and systems information is gathered and loaded in the eBRP Agency instance tool. Assumption: For disaster recovery, the SDC is to be given access to each Agency’s eBRP instance.
Develop DR operational guidelines, ala a Concept of Operations.
Collaborate with the SDC to issue an RFP for recovery service contract pricing and selection of a recovery vendor.
Issue a disaster recovery service contract that:
Will provide recovery for SDC-managed critical business services.
Can adopt recovery services for other SDC customers and/or out-of-scope services.
DR Task Force Issues and Proposed Mitigation Action
All SDC-Based Agencies to validate their Business Critical Functions annually!
Action: - Agencies to commit and actively support resources and time to identify Agency’s key
Business Critical Functions.
- CIO’s to identify which of these functions need to be recovered in the SDC during a disaster.
State to hire limited duration DR Expertise
Action: - Using existing SunGard Contract or an RFP process, DAS to hire full time DR expertise.
- Assign DR expert to SDC or State CIO Office.
State to hire ongoing full time DR Program/Project Manager
Action: - Assign DR Program/Project Manager to SDC or State CIO Office.
Establish Multi-Agency Workgroups to address key DR services
Action: - Establish recovery teams for Roles & Responsibilities, Concept of Operations Declaration,
network services, etc.
- Decide what work can be performed prior to the introduction of a DR Expert.