COURSE OVERVIEW
4 Days 32 CPE Credits $2,500
When a business is hit by a natural disaster, cyber crime or any other
disruptive tragedy, how should it react? What if the office IT infrastructure is
taken down? Will the business be able to continue operations? How much
will it cost if the business is down during repairs?
The answer lies in the training of the Certified Disaster Recovery Engineer
course. Disaster recovery and business continuity planning is the process
of having a professional work with a business to prepare processes,
poli-cies and procedures to follow in the event of a disruption. The goal is to
keep a businesses’ critical operations running, which today heavily relies
on its IT infrastructure.
Students who take this course will be prepared to work with businesses to
create and implement disaster recovery and business continuity plans.
UPON COMPLETION
Students will:
Understand the principles of business continuity and disaster recovery planning.
Have a first draft of their own business continuity and disaster recovery plan.
Be ready to sit for the C)DRE exam.
COURSE CONTENT
ACCREDITORS
C)DRE TRACK
Professional Roles:
Business Continuity Disaster RecoverySystem Admin
Prerequisites:
C)SS: Security Sentinel Or equivalent experienceC)DRE Exam:
2 Hours 100 Questions $300 USD Purchase on mile2.comCNSS Accreditation:
CNSSI-4016: National mation Assurance Training Standards for Risk Analysis
Module 1: Introduction
Module 2: Business Impact Analysis
Module 3: Threat & Risk Analysis
Module 4: BDP Strategies
Module 5: IT Recovery Strategies
Module 6: Implementation Phase
Module 7: Testing and Exercise
Module 8: Maintenance and Updating
Module 9: Execution Phase
Module 10: Cyber Attacks
Module 11: Pandemics
Review & Exam
NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY NATIONAL INITIATIVE FOR CYBER
SECURITY CAREERS AND STUDIES COMMITTEE ON NATIONAL
ABOUT THE AUTHOR
John Glover - CISSP, CISA, CISSO, CMC, I.T.C.P.
John has been a certified management consultant (CMC) since 1985 working with national and international
consulting firms. From 1985 to 1992 John was a senior consultant with DMR Group Ltd. executing
assign-ments across North America. Most of these assignassign-ments were related to the design and development of
tele-communications networks and delivery services.
In 1992 John left DMR for a two-year assignment in Manila, Philippines on a Canadian International
Develop-ment Agency (CIDA) and World Bank Telecommunications deployDevelop-ment project for the Philippine governDevelop-ment.
Upon his return to Canada in 1995 John specialized in the design, development and implementation of voice
and data networks to support enterprise-wide business systems in the public and private sectors of British
Columbia.
Recent projects have included migration from legacy systems to client/server environments, major retrofitting
of corporate telecommunications and systems infrastructures and deployment of corporate information
securi-ty systems for a BC Insurance provider.
Since 1999, John has provided Lead Instructor learning services to a variety of organizations and government
departments. To date, from 1999 through 2013 John has been delivered over 250 Common Body of
Knowledge (CBK) review seminars throughout North America (including Mexico), Australia, Asia and Europe.
These seminar sessions, of between 5 – 8 days duration, provided guidance and mentoring support for an
average of 15-20 candidates in support of their certification process.
EXAM INFORMATION
The Certified Disaster Recovery Engineer exam is taken online through Mile2’s
Assessment and Certification System (“MACS”), which is accessible on your
mile2.com account. The exam will take 2 hours and consist of 100 multiple
choice questions. The cost is $300 USD and must be purchased from
Mile2.com.
Module 1 - Welcome to Disaster Recovery
mile2 Class Training - Overview mile2 Course Road Map mile2 Brochure
CDRE Agenda Schedule
The CDRE Exam Introductions
Introduction to Business Continuity Planning What is a Disaster?
What is a Critical Business Function? Business Continuity Planning (BCP) Importance of BCP
Disaster Recovery Planning (DRP) Emergency Response BC/DR Trends Purpose of BC/DR Program BCP Overview Challenges to Effective BCP BCP Planning Phases
Where does Project Initiation fit into the Process? Project Initiation Phase
BC/DR Program Life Cycle Summary
Module 2 – Business Impact Analysis
BCP Planning Model BCP Planning Phases
Where does BIA fit into the Process? What is a BIA?
BIA Scope, Goal, and Objectives BIA Terminology
Maximum Tolerable Downtime Recovery Point Objective Recovery Time Objective Recovery Time Examples BIA Process
BIA Process- Disaster Mode Staffing
BIA Process - Capacity & Performance Objectives BIA Tools
Kick off Meeting
Preparing for the BIA Interviews Conducting the Interviews Notes on Data Collection Identify Dependencies Finalize Data Analysis BIA Report
Presentation to Senior Management
Module 3 - Risk Analysis
BCP Planning Model BCP Planning Phases
Where does the Risk Analysis fit into the Process? Functional Requirements
Threats to Business Process Causes of Unplanned Downtime Risk Examples
Risk Analysis Terminology Risk Analysis Activities Exposure Inventory
Business Process Inventory Business Process Documentation Statement of Risk
ALE Annualized Loss Expectancy Statement of Risk
Risk Control Definition Identifying Existing Controls Physical Controls
Risk Analysis
Risk Assessment Report
Compiling a Risk Assessment Report Risk Analysis Summary
Module 4 - BCP Design & Development Phase
BCP Planning Model BCP Planning Phases
Where does BCP Strategies fit into the Process? Strategy Process
BCP Strategies Summary
BCP Planning Phases
Where does BIA fit into the Process? Design & Development Phase BCP Design
Emergency Response & Operations Emergency Response Components Develop ER Procedures
ER Sources for Assistance BCP Design
Alternate Recovery Site
Selecting Vendors for DR/BC Services Site Recovery & Resumption
Restoration of Primary Site Return to Primary Site
Continuity Strategy - Insurance Evaluate Insurance Terms BCP Design
Summary
DETAILED MODULE DESCRIPTION
Module 5 - IT Recovery Strategies
BCP Planning Model BCP Planning Phases
Where does IT Strategy fit into the Process? IT Recovery Strategy Process
IT Recovery Strategies Examples of IT Recovery Tape Vault Facilities Disk Backups
Replicated Disk Backups
Deduplicated & Replicated Backups Backups – Replicated & Deduplicated Data Archiving
Systems Replication Application Redundancy Telecommunications Strategies Alternate Recovery Sites
Internal or Vendor BC/DR Services Selecting Vendors for BC/DR Services Evaluating Vendors of DR/BC Resources Critical Factors
IT Recovery Strategies Assessment IT Recovery Strategies
Summary
DR Plan Development DRP Design
DR Plan Development
Module 6 - Implementation Phase
BCP Planning Model BCP Planning Phases
Where does BIA fit into the Process?
Where does Implementation fit into the Process? Implementation of BCP
Responsibility for BCP Implementation Determine Cost Estimates
Management Approval and Funding Install & Configure
Detailed Documentation
Implement Operational Changes Procure Facilities & Services BCP Planning Phases
Where does BIA fit into the Process? Awareness & Training
Awareness Programs Training Programs Summary
Module 7 - Testing and Exercise
BCP Planning Phases
Where does Testing and Drills fit into the Process? Testing & Exercise Phase
Testing & Drills
Progression of Testing Types Testing Participants
Test Script Example Testing Post-Mortem Summary
Module 8 - Maintenance and Updating
BCP Planning Model BCP Planning Phases
Where does Maintenance fit into the Process? Maintenance Policies and Procedures
Plan Maintenance
Maintenance & Schedule Budgets Software Tools for Maintenance Input Criteria for Plan Maintenance Plan Distribution & Security Summary
Module 9 - Execution Phase
BCP Planning Model BCP Planning Phases
Where does the Execution Phase fit into the Process? Execution Phase
Escalation Procedures
Disaster Declaration Procedures Public Relations/Spokesperson Role Typical Audiences
Audience Messages Sources of Information
Incident Command Centre (ICC) ICC Chain of Command
ICC Organization
Be Prepared to Work with Public Authorities Executing the Plan
Summary
Module 10 - Cyber Attacks
Computer Crime & Cyber Attacks Cyber Attack Scenarios
Northeast Cyber Attack Scenario
Economic Impact of Malicious Code Attacks Including Cyber Attacks in Definitions of Terrorism Domestic and International Terrorism
Department of Homeland Security Key Assets Cyberspace Security Strategies
Cyber Attacks Information Warfare
Considerations for Developing Information Warfare Protection Against Cyber Attacks
Cyber Attacks
Evolving Privacy Laws
How Computer Systems are Attacked Types of Computer Attacks
Developing Procedure in the wake of a Security Breach
Cyber Attacks
Developing Procedures for Working with Law Enforcement
Cyber Attacks
Developing Procedures to Determine Economic Losses
Cyber Attacks
Developing Procedures to Ease IT Recovery Types of Systems and Networks
Recovery of Small Computer Systems Recovery of Large Computer Systems Network Recovery
Establishing a Computer Incident Response Team Cyber Attacks
Summary
Module 11 – Pandemics
What is Pandemic Influenza? Pandemics
Quick Facts
Why use BCP/DRP for Pandemic Influenza? Planning Approach
Critical Services
Additional Impacts of Pandemic Areas to Plan for
Pandemics
Planning Issues per Stage Stage 4 Communications HR Policies
Stage 3 HR Travel Policies Stage 3 Government Relations Stage 3 Physical Resources Stage 3 & 4 Physical Resources Stage 4 Physical Resources Pandemics – Work from Home Summary
