As always, you never know when a disaster will strike, so better to have a checklist on hand so that panic doesn’t set in when the network goes down.
Creating a plan
Cloud services company Evolve IP has created a list of suggestions for executives to evaluate their current disaster avoidance plans or, should a plan not exist, provide directional measures to protect their information and communications systems.
Establish a disaster recovery functional team
Elect one spokesperson from the group for communication. In the event of a multi-location organization each location should have a core team or representative that works with the corporate entity.
Identify risks in the following areas:
Information – What information and information systems are most vital to continue to run the business at an acceptable level?
Communication Infrastructure – What communications (email, toll free lines, call centers, VPNs, Terminal Services) are most vital to continue to run the business at an acceptable level?
Access and Authorization – Who needs to access the above systems and in what secure manner (VPN, SSL, DR Site) in the event of a disaster?
Physical Work Environment – What is necessary to conduct business in an emergency should the affected location not be available?
Internal and External Communication – Who do we need to contact in the event of an emergency and with what information?
Cloud-based data centers and applications
Create a written recovery plan that is hosted remotely in a secure and redundant data center. Schedule and test your plan at least once per year or in accordance with regulatory/compliance requirements. Ensure employees can access the hosted environment (both from within the business confines and remotely) during fail-over mode from the designated locations.
Premise-based data centers
Produce a written recovery plan that is stored remotely. Identify water entry areas throughout the building and have sandbags available. Install VESDA smoke detection and thermal detectors. Have a fail-safe alarm system. Place high-temperature sensors on fire sprinkler heads if non-water based fire-suppression is unavailable. Keep your data center above street level. If you are in a single-floor building, raise your racks from the floor. Employ multiple Internet service/data providers and test for failover regularly.
Tape back-ups should be removed daily and stored in a secure, easily accessed public building with at least 2-3 individuals having keys to the location. Back-up data to a geographically distant location, either electronically, or ensure physical media is in a diverse location.
Hosted telephony systems
Employ multiple Internet providers and test for failover regularly. Verify that critical phone numbers have the ability to call forward in an unreachable condition.
Identify key business applications required and how call center staff will access these applications from alternative locations. Identify critical call types that must be answered and determine mechanism to segregate those calls. Identify alternative locations to house the staff with the appropriate systems, phones, and work environment. Ensure administrative staff has the ability to remotely change call routing, messaging, and related call center functionality.