top of page
Search
aladibmidnire

Security Planning And Disaster Recovery: A Comprehensive Resource for Data Managers and Practitioner



The National Disaster Recovery Framework (NDRF) enables effective recovery support to disaster-impacted states, tribes, territorial and local jurisdictions. It provides a flexible structure that enables disaster recovery managers to operate in a unified and collaborative manner. The NDRF focuses on how best to restore, redevelop and revitalize the health, social, economic, natural and environmental fabric of the community and build a more resilient nation.


During steady-state planning and when activated post-disaster, RSFs identify recovery challenges, contribute resources and solutions, facilitate local stakeholder participation, and promote intergovernmental and public-private partnerships.




Security Planning And Disaster Recovery Download Pdf



The Recovery Support Function Leadership Group (RSFLG) allows federal agencies to coordinate disaster recovery work under the National Disaster Recovery Framework (NDRF) across the six Recovery Support Functions in order to provide communities with unified federal assistance as quickly and effectively as possible.


Building on the principles and concepts outlined in the NRDF, Effective Coordination of Recovery Resources for State, Tribal, Territorial and Local Incidents is designed to be applied after an incident, either in concert with existing pre-incident recovery plans or to enhance post-incident planning efforts.


The Private-Public Partnerships (P3) Guide and supplemental documents provide jurisdictions with best practices to establish and maintain a private-public partnership to help coordinate mitigation, response & recovery planning and preparedness, and increase community resilience.


Identifies the capabilities and activities necessary to prepare and successfully implement disaster financial management while maintaining fiscal responsibility throughout response and recovery operations.


This guide is designed to help local governments prepare for recovery from future disasters offering tools for public engagement, whole-community recovery, identification of existing recovery resources, and identifying outside partnerships that can help local governments build resilience.


This guide helps states and territories prepare for recovery by developing pre-disaster recovery plans that follow a process to engage members of the whole community, develop recovery capabilities across government and nongovernmental partners and create an organizational framework for comprehensive recovery efforts.


This fact sheet provides recommendations and resources for jurisdictions to conduct disaster resource identification, includes recovery resources, guidance for how to search for disaster recovery resources, and recommendations for disaster resource management.


A disaster recovery plan defines instructions that standardize how a particular organization responds to disruptive events, such as cyber attacks, natural disasters, and power outages. A disruptive event may result in loss of brand authority, loss of customer trust, or financial loss.


Disaster recovery plan examples can be very useful when developing your own disaster recovery plan. We collected several examples of plans created by leading organizations, and a checklist of items that are essential to include in your new plan.


A key element of a disaster recovery plan is a documented procedure for responding to a catastrophic event. The first few hours of an event are critical, and staff should know exactly what to do to minimize damage to organizational systems, and recover systems to resume normal operations.


A disaster recovery plan must identify how this sensitive data is securely backed, and who should have access to the original copy and the backups, both during normal operations and in the event of a disaster.


Alternatively, you can use a hybrid cloud setup. Backup data to a local Cloudian appliance, and configure it to replicate all data to the cloud. This allows you to access data locally for quick recovery, while keeping a copy of data on the cloud in case a disaster affects the on-premise data center.


If you are new to recovery planning, make sure that you research the subject thoroughly before embarking on a disaster recovery project plan. Consider engaging a consultant (internal or external to your organization) to help you in your project planning effort. Disaster recovery planning is not a two-month project, neither is it a project that once completed, you can forget about. An effective recovery plan is a live recovery plan. The plan must be maintained current and tested/exercised regularly.


During this phase a Steering Committee should be established. The committee should have the overall responsibility for providing direction and guidance to the Project Team. The committee should also make all decisions related to the recovery planning effort. The Project Manager should work with the Steering Committee in finalizing the detailed work plan and developing interview schedules for conducting the Security Assessment and the Business Impact Analysis.


The primary objective of recovery planning is to enable an organization to survive a disaster and to continue normal business operations. In order to survive, the organization must assure that critical operations can resume/continue normal processing. Throughout the recovery effort, the plan establishes clear lines of authority and prioritizes work efforts. The key objectives of the contingency plan should be to:


Although statistically the probability of a major disaster is remote, the consequences of an occurrence could be catastrophic, both in terms of operational impact and public image. Management appreciates the implications of an occurrence, therefore, it should assign on-going responsibility for recovery planning to an employee dedicated to this essential service.


The project team organization is designed to maximize the flexibility needed to deal with the implementation of a plan in the most efficient manner possible. As explained earlier in this document, disaster recovery and business resumption planning is a complex and labour intensive program. A key factor in the successful development and implementation of recovery and resumption programs in other organizations is the dedication of a full-time resource to recovery/business continuity planning.


The composition of the Project Team may vary depending on the environments and business units for which plans are developed. It is important to note that the managers of environments and business units for which plans are developed will be responsible for the maintenance and testing of their respective plans. However, the Person/unit responsible for recovery/continuity planning should retain the role of co-ordinator of testing activities, major plan revisions and maintainer of the Master Plan.


Organization who have tried to develop disaster and business resumption plans without dedicating the required resources to the effort have been largely unsuccessful in implementing effective recovery plans. Some organizations, after spending time and money developing recovery plans, have failed in maintaining their recovery capability. This is mostly due to a lack of commitment to keep their plans current or to do regular testing of recovery capabilities.


This publication assists organizations in understanding the purpose, process, and format of information system contingency planning development through practical, real-world guidelines. This guidance document provides background information on interrelationships between information system contingency planning and other types of security and emergency management-related contingency plans, organizational resiliency, and the system development life cycle. This document provides guidance to help personnel evaluate information systems and operations to determine contingency planning requirements and priorities.


Purpose: To establish national emergency preparedness requirements to ensure adequate planning for both natural and man-made disasters, and coordination with federal, state, tribal, regional and local emergency preparedness systems. The following information will apply upon publication of the final rule: 2ff7e9595c


0 views0 comments

Recent Posts

See All

Comments


bottom of page