Exercising Disaster Recovery.pptVIP

Exercising Disaster Recovery OHECC 4/20/2006 Exercising the Disaster Recovery Plan John Kinne / Miami University Information Technology Services Exercising Disaster Recovery  The plan is no better than the exercise program. Miami University Information Technology Services has committed to exercising and testing its disaster-recovery plan at least twice a year. Techniques for developing and evaluating tabletop and drill exercises will be presented. Who is JdK? I am an IT Guy! Decades of experience Systems Programming. Information Technology Infrastructure Library (ITIL) Certificate of Competency Certified Business Continuity Professional – Disaster Recovery Institute International. Systems Integration Now pursuing PMP… With good relations with the business side of the university. KinneJd@MUOhio.Edu Overview What we want from Exercising What we did What we got What does Miami wants from a Disaster Recovery Exercise? Preparation Training Relationship building Publicity Evaluation Improvement (maybe have a little bit of fun) What does Miami wants from a Disaster Recovery Exercise? For a Financial Services exercise: Pay Payroll Pay Vendors Manage Cash Maintain information What We Did Types of Exercises Project methodology An Example Types of Disaster Recovery Exercises Walk Through Tabletop Drill (Operational)  Format: 1 hour meeting with a few staff; walk through a specific DR Procedure Participants: facilitator and trainees Purpose: train staff to use DR Procedures evaluate procedures Preparation: Distribute procedure before meeting Facilitator should have understand DR procedure  Format: 4 hour meeting: exercise debriefing Talk through a specific disaster scenario Participants: Players, Evaluators, Observers, Controllers From multiple departments Purpose: Preparation, Training, … Evaluation, Improvement Preparation: Objectives Scenario Evaluation Criteria People  Format: All day: exercise debriefing Work through a spec