The document discusses disaster recovery planning and business continuity. It outlines a 5-step risk management approach to assess assets, vulnerabilities, potential losses, protection options, and perform cost-benefit analyses to select effective controls. Regular backups using continuous, full, or mirror methods are important to ensure data is not lost. Disaster recovery concepts like using external hotsite or coldsite vendors can help organizations instantly swap or temporarily relocate operations in an emergency. The document provides guidance on developing a disaster recovery plan to minimize disruptions through preparedness and risk assessment.

1. DISASTER
RECOVERY PLAN
MANAGING INFORMATION SYSTEMS IN ORGANIZATIONS
Prepared by: Jan Wong Download at: www.slideshare.net/janwong

2. DISASTER RECOVERY
IS A CHALLENGE FOR
ORGANIZATIONS.
BUSINESS CONTINUITY IS AT STAKE.

3. IT IS NOT POSSIBLE
TO PROTECT AGAINST
EVERY RISK!

4. IT IS NOT POSSIBLE
TO PROTECT AGAINST
EVERY RISK!
THAT’S WHY COMPANIES USES A RISK MANAGEMENT
APPROACH

5. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis

6. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis
• It helps to identify threats.
• It helps to select cost-
effective controls via a cost
benefit analysis.
• Formulates a business
continuity plan to recover
from a major disaster.
5-STEP RISK
MANAGEMENT
APPROACH

7. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis
STEP 1
Determine the value and
importance of assets such as
data, hardware, software and
networks.
“List down all assets and its
value including even staff,
facilities, business information,
cost of replacement and loss
of use.”

8. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis
STEP 2
Recorded the weaknesses in
the current protection system
in view of all potential threats.
“List down all potential threats
that can happen to the assets
by reviewing current systems.”

9. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis
STEP 3
Assess the probability of
damage and specify the
tangible and intangible losses
that may result.
“List down the cost of damage
to the assets.”

10. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis
STEP 4
Provide a description of
available controls that should
be considered, their probability
of successful defence and
costs.
“List down all assets and its
value.”

11. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis
STEP 5
Compare cost and benefits.
Consider the likelihood of
damage occurring and the
successful protection from that
damage. Finally, decide which
controls to install.
“Compare the cost required
and the benefits to decide.”

12. Step 1: Assessment of Assets
Step 2: Vulnerability of Assets
Step 3: Loss Analysis
Step 4: Protection Analysis
Step 5: Cost-Benefit Analysis

13. IF YOU CAN’T
CONTROL THEM,
BACK UP!
SYSTEM FAILURE CAN CAUSE MINOR IRRITATIONS TO
BUSINESS CLOSEDOWN.

14. TYPES OF
BACKUP
METHODS
TO ENSURE BUSINESS CONTINUITY
3

15. TYPES OF BACKUP METHODS
3
1. CONTINUOUS BACKUP
• Periodic in partial data increments
• Can be local / remote
2. FULL BACKUP
• Periodic in complete data copy
• Can be local / remote
3. MIRROR BACKUP
• Instant replica of data
• Can be local / remote

16. DISASTER
RECOVERY
CONCEPTS
TO ENSURE BUSINESS CONTINUITY
2

17. DISASTER RECOVERY CONCEPTS
2
1. HOTSITE VENDORS
• External vendors that provides
access to a fully configured
backup centre.
• Able to instantly ‘hot swap’.
2. COLDSITE VENDORS
• Provide empty space with
special flooring, ventilation and
facilities.
• In emergency, companies move
to the coldsite.

18. Questions, anyone?