Objectives

• describe disaster recovery management (including: risk analysis, perpetrator analysis, risk testing, quantifying the risk, securing the risk, software protection, password controls, recovery management)

Disaster Recovery management

• Disaster may occurs and needs to be identified

• Disaster recovery plan (DRP) is needed to minimize disruption when disaster did occurs

Risk assessment

• Identifying potential risks

• Analyze potential impact and likelihood of them

• Business impact analysis (BIA) is created to quantifies the impact of a disaster - financial and non-financial

Some potential hazards in an organization

• Loss of key personnel

• Natural Disaster - Fire, flood

• Malware

• Hacking

• Corruption of data

• Power cut

• ...

Risk analysis Matrix, higher score -> higher risk

Steps in Risk Analysis

• Identify hazards that might occur

• Identify the likelihood of the hazard

• Identify the impact to project / business

• Risk = Likelihood x Impact

Perpetrators

• People who deliberately cause problems (illegally)

• e.g. Hackers, Stealing or leaking business secrets etc.

• 
  

• 
  

Impacts to business

• Loss of revenue

• Penalty fees

• Cost of recovery

• Damage to organization's reputation

Securing the risk

• Measures needed to protect against those risks

• Base on the risk ranking identified

• Impacts from Loss of personnel can be reduced by:

• Require documentation of procedures

• Have at least two people able to operate key component of the system

Recovery Management

• Plans are needed for recovery from disaster, including:

• Restoration of backup, hardware replacement, software setup, replacement of key personnel and emergency relocation

• Required resources, people, data etc. must be identified and planned

• The time required for recovery is also planned

• 
  

Recovery Testing

• Disaster recovery plans also needs to be tested, to check if it works as planned

• especially data restoration should be tested periodically

• e.g. Backup data usually tested immediately to check for integrity

•