7 ways to make your disaster recovery plan a disaster


Every organization or business, regardless of revenue or staff size, needs to understand what is truly critical to keep operations going, and how long the business can function without certain elements, components or dependencies. This includes considering how long the business can survive both financial losses and reputational losses due to negative public perception. Obviously, not having a disaster recovery plan is a recipe for disaster, but just having a plan is not enough. Make sure that your disaster plan avoids certain pitfalls that may complicate disaster recovery and make it more of a disaster.

How-not-to-make-your-disaster-plan-a-disaster.jpg

Consider this list of what not to do including:

  1. Make everything a priority
  2. Have only one way to access the plan
  3. Impose a gage order. Don't communicate.
  4. Don't bother having an extended recovery plan.  Just wing it.
  5. Over complicate & over process the process
  6. Micro-manage the disaster recovery team
  7. Let the disaster recovery plan collect dust on the shelf

1. Make everything a priority

Let’s be real here. It is impossible to recover everything all at once. So it is imperative to establish recovery priorities, and understand their dependencies. Dependencies include any component, element or infrastructure that must be in place for other components of the process to work.

 

2. Have only one way to access the plan

After you write the disaster recovery plan, publish it in varying formats (including hard copy, CD-ROM, USB drives, external secure cloud-based storage, and plain old paper) so that it assessable to your staff, recovery team and emergency responders. Have a means to distribute the plan via multiple vehicles. The goal is to enable the emergency response team to quickly access disaster recovery plans from wherever they are, without having to depend on the same IT systems or other infrastructure that may be impacted in the disaster.

 

3. Impose a gag order. Don’t communicate

Business_Continuity_Communications_Plan.jpg

Have a means to communicate with all of your employees, emergency responders and customers in the event of a disruptive event.

  • Consider mass notification email, SMS text, mobile alerts, social media & even old fashioned phone trees depending on the situation. Make sure the emergency contact list is available in many different forms so that it is accessible during the disaster.
  • Determine a way to allow employees to access incident management plans & procedures remotely. This can be via laptop, mobile device, and yes… paper if need be.
  • Be sure to have a means to communicate your status to customers, students or patients depending on your business type. Social media is great way to send out status updates to a broad audience with minimal effort.

Never underestimate the value of communication.  Even if the news is not optimal, it always pays to communicate the status vs. leaving things open to negative interpretation. Consistent communication of status and recovery objectives helps to reassure, maintain trust and controls the rumor mill.

 

4. Don’t bother having an extended recovery plan – just wing it.

We all know that having a Recovery Time Objective (RTO) and a Recovery Point Objective (RPO) is essential in disaster planning. The RTO establishes a target for the amount of time it will take to go from the point of disaster to the point of recovery For data infrastructure and recovery, the RPO takes into consideration the amount of time between the disaster (disruptive event) and the last complete back-up. The RPO is a measure of how much data is at risk.

That said, even the best laid plan needs to account for additional disruptive events that may occur during recovery efforts that further delay the RTO or RPO. Two aspects or the disaster that should definitely have extended plans include physical plant and data infrastructure. Consider a disaster in which an organization can’t continue operation within its own facility due to physical damage or destruction of the building or, the inability to access the building due to damage to external roads, tunnels, bridges or other public transportation. What do you do if the RTO or RPO is impossible to meet due to additional circumstances beyond your control? It is important to have an extended recovery plan in place.  Have an extended recovery plan in place in case you have to go to “plan B.” Think of it as your disaster plan within the disaster plan.

 

5. Over complicate & over process the process

Don’t you just love it when the process has a process within a process? It can feel like you are trapped within the process of the process and can’t even remember the inception point. Keep the plan simple, logical and straight forward. Try to avoid building a plan that may actually build roadblocks to recovery by demanding to many processes, workflow steps or executive approvals of real-time changes. In a disaster, timing and flexibility are two key elements that you need on your side.

 

6. Micro-manage the disaster recovery team

In an actual disaster, people can be incredibly inventive, which can come in handy when the recovery phase requires real time flexibility. Don’t get stuck on “the plan” or chain of command.  People can be more flexible than systems or processes, especially in emergency situations. Allow some room for adaptability and have plans B,C, etc. ready to go if necessary. Understand that there may be times when recovery teams may have to make autonomous decisions or procedural changes when they are necessary.

7. Let the disaster recovery plan collect dust on a shelf

Review the plan and test it regularly.  It is critical to monitor the plan to ensure its components are implemented effectively and understood by team members. A disaster recovery plan should be viewed as a living, breathing document that should be reviewed and updated frequently, as needed. Additionally, proactive monitoring and testing of processes and infrastructure, can alert the recovery planning team to any gaps or changes that may impact successful recovery. Some business continuity experts believe that having un under-tested plan can often be more of a disaster than having no plan at all.

Every business is vulnerable to experiencing an unexpected event, serious incident or disaster that can prevent it from continuing normal business operations. Having even a basic disaster recovery plan for key assets and operational component can be the difference between recovery and demise.  A well-structured, flexible disaster recovery plan can enable organizations to recover quickly and effectively from an unforeseen disaster or emergency, and take command of business interruption, financial impact or reputational loss.  Keep it simple, logical and reasonable.



CONCLUSION:

Every business is vulnerable to experiencing an unexpected event, serious incident or disaster that can prevent it from continuing normal business operations. Having even a basic disaster recovery plan for key assets and operational component can be the difference between recovery and demise.  A well-structured, flexible disaster recovery plan can enable organizations to recover quickly and effectively from an unforeseen disaster or emergency, and take command of business interruption, financial impact or reputational loss.  Keep it simple, logical and reasonable.

If you want to some quick tips on disaster recovery planning, feel free to schedule a 15 minute meeting with one of our experts.

Schedule a 15 minute meeting.

 



 

Resilience, organizational resilience, business continuity, disaster recovery

Recent Posts

Don't Get Tricked, Beware the Hacker's Playground!

A Hacker's Playground - Public WiFi Hotspots Read More

Ransomware: Will You Be A Victim or Survivor?

Are you prepared for a ransomware attack? Rarely a day goes by that I'm not asked about ransomware or end up in a conversation about ransomware. Questions range from “What is ransomware?” to “How can ... Read More

Meet Virtual Corporation at DRJ Fall in Phoenix!

Virtual Corporation is excited to be a sponsor at DRJ Fall 2019 Sept. 29th-Oct 1. Stop by booth #311/313 to learn about how Virtual Corporation specializes in partnering to develop and sustain repeata... Read More