Disaster Recovery Plan

(1)

Disaster Recovery Plan

Purpose

[ENTER COMPANY] is dedicated to the protection of its employees, facilities, and resources and to ensuring that our company can continue all aspects of its core business processes and safely resume normal operations as quickly as possible after any natural, weather-related, man-made, or technological disaster affecting our facility. We place a high priority on developing, validating, and, if necessary,

implementing our company's Disaster Recovery Plan. If after reading this plan, you find that improvements can be made, please contact [ENTER NAME]. We encourage all suggestions because we are committed to the success of this written plan. Administrative Duties

[ENTER NAME], our Disaster Recovery Plan Administrator, is responsible for

establishing and implementing our written Disaster Recovery Plan. This person has full authority to make necessary decisions to ensure the success of this plan. Copies of this written plan may be obtained from:

[EDIT TABLE BELOW]

Location/Address: Contact Person: Telephone Number: [OPTIONAL SECTION-MAY DELETE]

Core Business Processes

The core business processes to keep functioning during a recovery process include: [EDIT TABLE BELOW]

Business

process: Departments affected: Must be functioning within what timeframe after a disaster: [OPTIONAL SECTION-MAY DELETE]

Disaster Threats

We have identified the following potential disaster threats, their severity, and their probability of occurrence, as well as their risk level:

[EDIT TABLE BELOW]

Disaster threat: Severity: Probability: Risk:

Analyzing the severity and probability, the disaster(s) with the highest risk is/are: [INSERT MOST OBVIOUS THREATS]

(2)

[OPTIONAL SECTION-MAY DELETE] Business Impact Analysis

The level of impact a disaster has on our company, depends on the disaster type. Here is our business impact analysis:

EDIT TABLE BELOW-LIST THREAT, ASSIGN RATING TO HUMAN IMPACT (1 to 5), ASSIGN RATING TO PROPERTY IMPACT (1 to 5), MULTIPLY FOR BUSINESS IMPACT. IF NEEDED, ASSIGN PROBABILITY RATING (1 to 5).

Disaster

threat: Human impact/rating: Property impact/rating: Business impact/rating: Totaling the scores going across the business impact analysis table, the disaster(s) with the worst, combined, possible impact is/are: [LIST GREATEST THREATS]. Factoring in probability with the combined, possible impact, the worst, probable disaster(s) is/are: [LIST GREATEST THREATS].

[OPTIONAL SECTION-MAY DELETE] Risk Reduction and Elimination

While the threats and impacts can be great, our company has established and

implemented the following strategies to reduce or eliminate risks: [ENTER DISASTER MITIGATION SYSTEMS (e.g. system back-ups, emergency response drills, redundant business practices)].

[OPTIONAL SECTION-MAY DELETE] Emergency Plans

[OPTIONAL SECTION-MAY DELETE]

Please refer to the following emergency plan(s), in the event of an emergency: [EDIT TABLE BELOW]

Emergency plan: Location of plan: Plan administrator: Telephone number: [OPTIONAL SECTION-MAY DELETE]

We have posted the following emergency telephone numbers [INSERT LOCATION] for use when telephones serve as a means of reporting emergencies:

[EDIT TABLE BELOW]

(3)

[OPTIONAL SECTION-MAY DELETE] Recovery Goals and Objectives

Based on our business impact analysis, our immediate goals and objectives for disaster recovery include: [INSERT PRIMARY EMERGENCY RESPONSE SYSTEMS TO MITIGATE GREATES THREAT].

Our long-term goals and objectives for disaster recovery include: [INSERT ADDITIONAL PLANS FOR DISASTER RECOVERTY SYSTEM].

[OPTIONAL SECTION-MAY DELETE] Roles and Responsibilities

To achieve our recovery goals and objectives, the following people will have the roles and responsibilities listed below:

[EDIT TABLE BELOW] Individual, team,

department, or agency: Backup individual, team, department, or agency: Role and responsibility [OPTIONAL SECTION-MAY DELETE]

Post-Disaster Assessment

Once a disaster has occurred, we will assess the damage and determine our needs and recovery strategies as follows: [INSERT ADDITIONAL PLANS FOR DAMAGE ASSESSMENT].

[INSERT NAME] will brief [INSERT NAME] on the damage and our needs and strategies.

Recovery Procedures

The procedures provided below assume that the entire facility has been destroyed or is otherwise not operational. If the entire facility is not destroyed or is partially operational, then adjustments to these procedures will be made.

Within 24 Hours

Within 24 hours after a disaster, our company will take the following steps: [INSERT STEPS TO BE TAKEN IN FIRST 24 HOURS]

Step: Action: Who is responsible: Backup person:

(4)

Within 72 Hours

General Procedures

Other ongoing recovery procedures include the following:

[INSERT ADDITIONAL PROCEDURES NOT COVERED IN PRIOR SECTIONS] Action: Who is responsible: Backup person:

[INSERT NAME] will brief [INSERT NAME] on recovery efforts [INSERT ASPECTS OF REPORT].

[OPTIONAL SECTION-MAY DELETE] Disaster Recovery Supplies

For disaster cleanup, we will need the following supplies: [EDIT TABLE BELOW]

Supply item: Model: Supplier: Quantity:

To keep core business processes operational, we will need the following supplies and software:

[EDIT TABLE BELOW]

Supply item: Model: Supplier: Quantity:

Also, to keep core business processes operational, we will need the following backed-up databases and electronic and paper documents:

[EDIT TABLE BELOW]

(5)

location/date: location: it: [OPTIONAL SECTION-MAY DELETE]

Disaster Recovery Services

We have selected the following alternative site(s), in the event it is needed: [ENTER BACK OPERATIONAL LOCATION]. We estimate that in a worst-case scenario we shall occupy this site for [ENTER LIKELIEST RECOVERY TIMETABLE].

To obtain supply items, we have provided a list of supply services below: [EDIT TABLE BELOW]

Supply type: Supplier: Address: Phone/Fax: Other service vendors include:

[EDIT TABLE BELOW]

Service type: Vendor: Address: Phone/Fax: [OPTIONAL SECTION-MAY DELETE]

Training

Due to the complexity of disasters and the recovery process, [INSERT NAME] trains all employees [INSERT COMPANY/DEPARTMENTS/EMPLOYEES] in the following: [INSERT LIST OF TRAINING SUBJECTS].

Our training program includes [INSERT METHODS OF TRAINING INCLUDING CLASSROOM LECTURE, WORKSHOP, ONLINE EDUCATION, DRILLS].

[OPTIONAL SECTION-MAY DELETE]

We perform recovery drills for the following disasters: [ENTER LIST OF DISASTERS THAT ARE DRILLED TO]. We hold these drills at least [ENTER FREQUENCY OF

DRILLS]. After a recovery drill, the Plan Administrator evaluates the effectiveness of the plan and reviews any employee input concerning the drill.

After an actual disaster, further training may be necessary. [OPTIONAL SECTION-MAY DELETE]

Security

To protect the company, property, and employees, certain security measures will be in place during disaster recovery: [INSERT BOTH PHYSICAL AND VIRTUAL SECURITY MEASURE AT TIME OF DISASTER].

(6)

[OPTIONAL SECTION-MAY DELETE] Media Relations

Once briefed on the post-disaster analysis, [INSERT NAME] will prepare a public statement. If necessary, [INSERT NAME] will communicate with and/or escort media, as well as keep records of any information released to the media. Under no

circumstances shall an employee speak to the media unless authorized. [OPTIONAL SECTION-MAY DELETE]

Plan Evaluation

By having [INSERT NAME/COMPANY/PROCEDURE] thoroughly evaluate and, as necessary, revise our plan, we ensure our program's effectiveness and prevent or eliminate any problems. Plan evaluation involves the following: [INSERT STEPS FOR PLAN EVALUATION (ANNUAL, AFTER-ACTION, CHANGES TO PROCESS/FACILITY]. [OPTIONAL SECTION-MAY DELETE]

Appendices

We have attached to this Disaster Recovery Plan, the following documents for reference: [ATTACH ADDITIONAL GUIDANCES THAT ASSISTED IN CREATION OF THIS DOCUMENT].