Disaster Recovery Planning - Revision history

User at 20:39, 12 April 2023

2023-04-12T20:39:13Z

User at 20:38, 12 April 2023

2023-04-12T20:38:08Z

Show changes

User at 17:20, 11 November 2022

2022-11-11T17:20:15Z

User at 17:19, 11 November 2022

2022-11-11T17:19:31Z

User: The LinkTitles extension automatically added links to existing pages (https://github.com/bovender/LinkTitles).

2021-02-06T15:25:54Z

The LinkTitles extension automatically added links to existing pages (https://github.com/bovender/LinkTitles).

Show changes

User: Disaster recovery planning is the process of creating a document that details the steps your business will take to recover from a catastrophic event.

2018-12-21T04:25:59Z

Disaster recovery planning is the process of creating a document that details the steps your business will take to recover from a catastrophic event.

User: Created page with "'''Content Coming Soon'''"

2018-12-05T21:25:18Z

Created page with "'''Content Coming Soon'''"

New page

'''Content Coming Soon'''

@@ Line 22: / Line 22: @@
 == Objectives of Disaster Recovery Planning (DR Planning)<ref>[http://community.kaseya.com/cfs-filesystemfile.ashx/__key/telligent-evolution-components-attachments/00-93-01-00-00-01-27-29/disater-recovery-Part-I-of-III.pdf What are the Objectives of Disaster Recovery Planning (DR Planning)?]</ref> ==
 The primary objective of disaster recovery planning is to protect the organization in the event that all or part of its operations and/or computer services are rendered unusable. Preparedness is the key. The planning process should minimize the disruption of operations and ensure some level of organizational stability and an orderly recovery after a disaster. Other objectives of disaster recovery planning include:
-• Providing a sense of security
+*Providing a sense of security
-• Minimizing risk of delays
+*Minimizing risk of delays
-• Guaranteeing the reliability of standby systems
+*Guaranteeing the reliability of standby systems
-• Providing a standard for testing the plan.
+*Providing a standard for testing the plan.
-• Minimizing decision-making during a disaster
+*Minimizing decision-making during a disaster

← Older revision		Revision as of 17:20, 11 November 2022
Line 2:		Line 2:


−	Arguably the most critical parts of disaster recovery planning are the disaster recovery [[strategy]] and the detailed recovery plan. It is here that you will codify the concrete steps to take to get up and running again following an unplanned outage. The disaster recovery strategy and detailed recovery plan are based on a [[risk]] assessment and business impact analysis of your organization and your understanding of the systems most critical to the business and what you need to do to get them working again in an acceptable time frame. The crux of disaster recovery planning is a detailed recovery plan based on a disaster recovery strategy tailored to your organization’s unique risk profile.<ref>Explaining Disaster Recovery Planning [http://www.computerweekly.com/podcast/Developing-a-disaster-recovery-strategy-and-detailed-DR-plans Computer Weekly]</ref>	+	Arguably the most critical parts of disaster recovery planning are the disaster recovery [[strategy]] and the detailed recovery plan. It is here that you will codify the concrete steps to take to get up and running again following an unplanned outage. The disaster recovery strategy and detailed recovery plan are based on a [[risk]] assessment and [[Business Impact Analysis (BIA)\|business impact analysis]] of your organization and your understanding of the systems most critical to the business and what you need to do to get them working again in an acceptable time frame. The crux of disaster recovery planning is a detailed recovery plan based on a disaster recovery strategy tailored to your organization’s unique risk profile.<ref>Explaining Disaster Recovery Planning [http://www.computerweekly.com/podcast/Developing-a-disaster-recovery-strategy-and-detailed-DR-plans Computer Weekly]</ref>

@@ Line 1: / Line 1: @@
-[[Disaster recovery]] planning is the [[process]] of creating a document that details the steps your [[business]] will take to recover from a catastrophic event. <ref>What is Disaster Recovery Planning [https://www.thebalance.com/disaster-recovery-planning-goals-and-objectives-2533757 the balance]</ref>
+Disaster recovery planning is the [[process]] of creating a document that details the steps your [[business]] will take to recover from a catastrophic event. <ref>What is Disaster Recovery Planning [https://www.thebalance.com/disaster-recovery-planning-goals-and-objectives-2533757 the balance]</ref>
-Arguably the most critical parts of disaster recovery planning are the disaster recovery [[strategy]] and the detailed recovery plan. It is here that you will codify the concrete steps to take to get up and running again following an unplanned outage. The disaster recovery strategy and detailed recovery plan are based on a [[risk]] assessment and business [[impact]] analysis of your organisation and your understanding of the systems most critical to the business and what you need to do to get them working again in an acceptable time frame. The crux of disaster recovery planning is a detailed recovery plan based on a disaster recovery strategy tailored to your organisation’s unique risk profile.<ref>Explaining Disaster Recovery Planning [http://www.computerweekly.com/podcast/Developing-a-disaster-recovery-strategy-and-detailed-DR-plans Computer Weekly]</ref>
+Arguably the most critical parts of disaster recovery planning are the disaster recovery [[strategy]] and the detailed recovery plan. It is here that you will codify the concrete steps to take to get up and running again following an unplanned outage. The disaster recovery strategy and detailed recovery plan are based on a [[risk]] assessment and business impact analysis of your organization and your understanding of the systems most critical to the business and what you need to do to get them working again in an acceptable time frame. The crux of disaster recovery planning is a detailed recovery plan based on a disaster recovery strategy tailored to your organization’s unique risk profile.<ref>Explaining Disaster Recovery Planning [http://www.computerweekly.com/podcast/Developing-a-disaster-recovery-strategy-and-detailed-DR-plans Computer Weekly]</ref>
@@ Line 19: / Line 19: @@
-Because smaller RTO and RPO values often come with an increase in complexity, the associated administrative overhead follows a similar curve. A high-availability application might find you managing [[distribution]] between two physically separated datacenters, managing replication, and more.
+Because smaller RTO and RPO values often come with an increase in complexity, the associated administrative overhead follows a similar curve. A high-availability application might find you managing distribution between two physically separated data centers, managing replication, and more.
 '''Objectives of Disaster Recovery Planning (DR Planning)'''<ref>What are the Objectives of Disaster Recovery Planning (DR Planning)? [http://community.kaseya.com/cfs-filesystemfile.ashx/__key/telligent-evolution-components-attachments/00-93-01-00-00-01-27-29/disater-recovery-Part-I-of-III.pdf Kaseya]</ref><br />
-The primary [[objective]] of disaster recovery planning is to protect the [[organization]] in the event that all or part of its operations and/or [[computer]] services are rendered unusable. Preparedness is the key. The planning process should minimize the disruption of operations and ensure some level of organizational stability and an orderly recovery after a disaster. Other objectives of disaster recovery planning include:
+The primary objective of disaster recovery planning is to protect the [[organization]] in the event that all or part of its operations and/or [[computer]] services are rendered unusable. Preparedness is the key. The planning process should minimize the disruption of operations and ensure some level of organizational stability and an orderly recovery after a disaster. Other objectives of disaster recovery planning include:
 • Providing a sense of security
 • Minimizing risk of delays
@@ Line 47: / Line 47: @@
 As shown in this Figure 3, the initial DR planning project involves 10 tasks, and these may be further refined into three subsets or phases.
-*[[Data Collection]] and [[Risk Assessment]]: the tasks in this phase include project initiation, data collection and the completion of a preliminary risk analysis.
+*Data Collection and [[Risk Assessment]]: the tasks in this phase include project initiation, data collection and the completion of a preliminary risk analysis.
 *[[Design]]:  in which the capabilities are created to actually recover from a disaster
-*Implementation: in which the strategies selected for recovery are tested and tests provide [[feedback]] to the planning process
+*Implementation: in which the strategies selected for recovery are tested and tests provide feedback to the planning process
@@ Line 55: / Line 55: @@
 Your disaster recovery planning team should consist of the following:
 *[[Management]] Steering Committee
-Executive team members who oversee the process are involved at a high level, which means they may not technically need a seat at the table—but they should be standing in the room. They play an important role when it comes to approvals for things like budgetary issues, [[policy]] considerations, strategic direction, and overcoming roadblocks or intradepartmental issues. These individuals might be part of an existing business continuity oversight committee, or form a separate disaster recovery steering committee, depending on the organization.
+Executive team members who oversee the process are involved at a high level, which means they may not technically need a seat at the table—but they should be standing in the room. They play an important role when it comes to approvals for things like budgetary issues, [[policy]] considerations, strategic direction, and overcoming roadblocks or intradepartmental issues. These individuals might be part of an existing business continuity oversight committee or form a separate disaster recovery steering committee, depending on the organization.
 *Disaster Recovery Coordinator
-The disaster recovery coordinator is an individual from IT who manages the overall recovery in the event of an actual disruption. They are typically also a member of the emergency management team. The disaster recovery coordinator is responsible for setting recovery plans into motion among the team, and coordinating those efforts as they progress. They also help facilitate resolution of problems encountered along the way, and remove roadblocks that slow the process down.
+The disaster recovery coordinator is an individual from IT who manages the overall recovery in the event of an actual disruption. They are typically also a member of the emergency management team. The disaster recovery coordinator is responsible for setting recovery plans into motion among the team, and coordinating those efforts as they progress. They also help facilitate the resolution of problems encountered along the way, and remove roadblocks that slow the process down.
 *[[Business Continuity]]
 Business continuity and disaster recovery go hand-in-hand. The business continuity “expert,” so to speak, fulfills two important roles on the team:
-To ensure that IT recovery plans align with business needs. Business needs are determined by a Business [[Impact Analysis]] (BIA), which is completed before disaster recovery planning is set in motion. If you haven’t done a formal BIA, an informal one will do in the short term, so you can move forward with the DR process. But it’s important to realize that a BIA in some form is critical to DR; without it, you have no clear [[goals]] and your efforts will undoubtedly fall short of meeting real recovery needs. The business continuity representative bridges the gap between business and IT to ensure that critical business needs will be met through IT recovery plans, and that any gaps in alignment are addressed.
+To ensure that IT recovery plans align with business needs. Business needs are determined by a Business Impact Analysis (BIA), which is completed before disaster recovery planning is set in motion. If you haven’t done a formal BIA, an informal one will do in the short term, so you can move forward with the DR process. But it’s important to realize that a BIA in some form is critical to DR; without it, you have no clear [[goals]] and your efforts will undoubtedly fall short of meeting real recovery needs. The business continuity representative bridges the gap between business and IT to ensure that critical business needs will be met through IT recovery plans, and that any gaps in alignment are addressed.
-To ensure that the necessary components of business continuity are present in the disaster recovery plans. While IT brings technology expertise, IT participants may not be well-versed in basic business continuity essentials involving emergency or crisis management—how to report information during an event, contact lists for key personnel, [[vendor]] information, etc. All of these components pave the way for a smooth and effective recovery process.
+To ensure that the necessary components of business continuity are present in the disaster recovery plans. While IT brings technology expertise, IT participants may not be well-versed in basic business continuity essentials involving emergency or crisis management—how to report information during an event, contact lists for key personnel, vendor information, etc. All of these components pave the way for a smooth and effective recovery process.
 *[[IT Infrastructure]]: Because their areas of expertise apply to the building blocks of an organization, these team members do the lion’s share of the actual recovery work. Each of the infrastructure representatives are responsible for identifying strategies and solutions that will recover critical operations in their areas of expertise, implementing them, and testing them to ensure that they work. The strategies they design must meet the requirements for critical business units as outlined in the BIA. You’ll want three individuals from IT infrastructure on the team - one from each of the following areas: Servers/Storage/Databases
 **Servers - Almost all technology runs on some type or [[server]]. This person should be intimately familiar with the server and operating [[system]] infrastructure along with the backup or replication technologies needed to meet the recovery needs. With the increased use of virtual machines, the implications of the differences between the use of physical and virtual environments must be addressed and understood.
@@ Line 70: / Line 70: @@
 **Telecom - Disruptions often affect voice communication infrastructure, making it difficult for employees to communicate inside the organization, as well as with external business partners and customers.
 *IT Applications: Depending on IT infrastructure recovery plans and the extent of the actual disruption, the individual(s) responsible for applications may play a greater or lesser role in recovery. But they do need to understand, based on how the infrastructure team proposes to restore the environment, what additional application tasks may need to occur—i.e., changes to app configuration and settings, data consistency, or application integrations. They should work closely with the infrastructure representative to identify recovery steps and design an appropriate plan that meets the needs of critical business units.
-*Advisors From Critical Business Units: An optional but useful addition to the team - Though it’s not a necessity, you may want to invite representatives from critical business units (those who participated in the BIA) to advise on disaster recovery planning efforts as needed. Rather than presenting the team’s plan as a done deal to business units, it’s helpful to discuss the plan earlier in the process to gather input. How will business processes be impacted by your proposed recovery plans? Is your plan feasible, or will it require the business units to create additional workarounds? Sometimes DR teams may propose alternate recovery methods that impact the requirements stated by the business unit; input from the business units is a must. For example—“We can recover this in four hours, but if you can wait six hours we can save $500,000. Will that work?” This is a good strategy for integrating IT and business, and boosts the likelihood of the plan’s overall success.
+*Advisors From Critical Business Units: An optional but useful addition to the team - Though it’s not a necessity, you may want to invite representatives from critical business units (those who participated in the BIA) to advise on disaster recovery planning efforts as needed. Rather than presenting the team’s plan as a done deal to business units, it’s helpful to discuss the plan earlier in the process to gather input. How will business processes be impacted by your proposed recovery plans? Is your plan feasible, or will it require the business units to create additional workarounds? Sometimes DR teams may propose alternate recovery methods that impact the requirements stated by the business unit; input from the business units is a must. For example—“We can recover this in four hours, but if you can wait six hours we can save $500,000. Will that work?” This is a good strategy for integrating IT and business and boosts the likelihood of the plan’s overall success.
 '''Future of Disaster Recovery Planning'''<ref>Future of Disaster Recovery Planning [http://www.infosectoday.com/Articles/DRPlanning.htm InfoSecToday]</ref><br />
-In determining the components of a disaster recovery plan, businesses typically need to make tough compromises, sacrificing the level of recovery (maximum amount of downtime and data loss) with cost. A relatively new form of technology - server [[virtualization]] - is beginning to gain popularity as a viable and cost effective means of achieving highly available, redundant systems. Server virtualization allows companies to consolidate multiple server functions on one host server, thus lowering total cost of operation and effectively managing emerging [[hardware]] advancements. At first glance, server virtualization may appear to be risky and counter-productive when trying to achieve a highly available, redundant IT infrastructure. After all, server virtualization increases the risk of multiple server failures by housing numerous server services on a single host server. But, with the combination of hardware advancements and [[software]] ingenuity, companies will be able to capitalize on server virtualization as a practical and effective means to achieve disaster recovery. In the case of a natural disaster or [[power]] outage that impacts a company's primary facility, a host server in a separate location connected to a SAN targeted for virtual server replication can be enabled quickly and with little effort. By capitalizing on increased virtual server performance as a result of software advancements and lower hardware costs with higher capacity, a robust and full-featured disaster recovery plan will be more readily attainable by more organizations.
+In determining the components of a disaster recovery plan, businesses typically need to make tough compromises, sacrificing the level of recovery (maximum amount of downtime and data loss) with cost. A relatively new form of technology - server virtualization - is beginning to gain popularity as a viable and cost-effective means of achieving highly available, redundant systems. Server virtualization allows companies to consolidate multiple server functions on one host server, thus lowering the total cost of operation and effectively managing emerging [[hardware]] advancements. At first glance, server virtualization may appear to be risky and counter-productive when trying to achieve a highly available, redundant IT infrastructure. After all, server virtualization increases the risk of multiple server failures by housing numerous server services on a single host server. But, with the combination of hardware advancements and [[software]] ingenuity, companies will be able to capitalize on server virtualization as a practical and effective means to achieve disaster recovery. In the case of a natural disaster or power outage that impacts a company's primary facility, a host server in a separate location connected to a SAN targeted for virtual server replication can be enabled quickly and with little effort. By capitalizing on increased virtual server performance as a result of software advancements and lower hardware costs with higher capacity, a robust and full-featured disaster recovery plan will be more readily attainable by more organizations.

← Older revision		Revision as of 04:25, 21 December 2018
Line 1:		Line 1:
−	'''~~Content Coming Soon~~'''	+	Disaster recovery planning is the process of creating a document that details the steps your business will take to recover from a catastrophic event. <ref>What is Disaster Recovery Planning [https://www.thebalance.com/disaster-recovery-planning-goals-and-objectives-2533757 the balance]</ref>
		+
		+
		+	Arguably the most critical parts of disaster recovery planning are the disaster recovery strategy and the detailed recovery plan. It is here that you will codify the concrete steps to take to get up and running again following an unplanned outage. The disaster recovery strategy and detailed recovery plan are based on a risk assessment and business impact analysis of your organisation and your understanding of the systems most critical to the business and what you need to do to get them working again in an acceptable time frame. The crux of disaster recovery planning is a detailed recovery plan based on a disaster recovery strategy tailored to your organisation’s unique risk profile.<ref>Explaining Disaster Recovery Planning [http://www.computerweekly.com/podcast/Developing-a-disaster-recovery-strategy-and-detailed-DR-plans Computer Weekly]</ref>
		+
		+
		+	Formulating a detailed recovery plan is the main aim of the entire IT disaster recovery (DR) planning project. It is in these plans that you will set out the detailed steps needed to recover your IT systems to a state in which they can support the business after a disaster.<ref>The Aim of a Disaster Recovery Planning Project [http://www.computerweekly.com/feature/How-to-write-a-disaster-recovery-plan-and-define-disaster-recovery-strategies Paul Kirvan]</ref>
		+
		+
		+	'''Basics of Disaster Recovery Planning (Figure 1.)'''<ref>Basics of Disaster Recovery Planning [https://cloud.google.com/solutions/designing-a-disaster-recovery-plan GoogleCloudPlatform]</ref><br />
		+	As a subset of business continuity planning, disaster recovery planning begins with a business impact analysis. The idea behind this analysis is to work out two key metrics:
		+	*A [[Recovery_Time_Objective_(RTO)\|recovery time objective (RTO)]], which is the maximum acceptable length of time that your application can be offline. This value is usually defined as part of a larger [[Service_Level_Agreement_(SLA)\|service level agreement (SLA)]].
		+	*A [[Recovery_Point_Objective_(RPO)\|recovery point objective (RPO)]], which is the maximum acceptable length of time during which data might be lost from your application due to a major incident. This metric will vary based on the ways that the data is used; for example, frequently modified user data could have an RPO of just a few minutes, whereas less critical, infrequently modified data could have an RPO of several hours. Note that this metric describes the length of time only; it does not address the amount or quality of the data lost.
		+	Taken together, these metrics have a roughly asymptotic impact on your bottom line. Typically, the smaller your RTO and RPO values are, the more your application will cost to run:
		+
		+
		+	[[File:DisasterRecoveryPlanning.png\|300px\|Disaster Recovery Planning]]<br />
		+	'''Figure 1. Ratio of cost to RTO/RPO''' source: [https://cloud.google.com/solutions/designing-a-disaster-recovery-plan Google]
		+
		+
		+	Because smaller RTO and RPO values often come with an increase in complexity, the associated administrative overhead follows a similar curve. A high-availability application might find you managing distribution between two physically separated datacenters, managing replication, and more.
		+
		+
		+	'''Objectives of Disaster Recovery Planning (DR Planning)'''<ref>What are the Objectives of Disaster Recovery Planning (DR Planning)? [http://community.kaseya.com/cfs-filesystemfile.ashx/__key/telligent-evolution-components-attachments/00-93-01-00-00-01-27-29/disater-recovery-Part-I-of-III.pdf Kaseya]</ref><br />
		+	The primary objective of disaster recovery planning is to protect the organization in the event that all or part of its operations and/or computer services are rendered unusable. Preparedness is the key. The planning process should minimize the disruption of operations and ensure some level of organizational stability and an orderly recovery after a disaster. Other objectives of disaster recovery planning include:
		+	• Providing a sense of security
		+	• Minimizing risk of delays
		+	• Guaranteeing the reliability of standby systems
		+	• Providing a standard for testing the plan.
		+	• Minimizing decision-making during a disaster
		+
		+
		+	'''Stages of Disaster Recovery Planning (Figure 2.)'''<ref>What are the Stages of Disaster Recovery Planning? [https://www.secure-24.com/wp-content/uploads/2015/03/Secure-24_EB-4-Stages-IT-Disaster-Recovery-Planning1.pdf secure24]</ref><br />
		+	The four stages of Disaster Recovery Planning are illustrated diagrammatically in Figure 2. below:
		+
		+
		+	[[File:DisasterRecoveryPlanning2.png\|400px\|Stages of Disaster Recovery Planning ]]<br />
		+	'''Figure 2.''' source: [https://www.secure-24.com/wp-content/uploads/2015/03/Secure-24_EB-4-Stages-IT-Disaster-Recovery-Planning1.pdf secure24]
		+
		+
		+	'''Disaster Recovery Planning Methodology (Figure 3,)'''<ref>Understanding the Disaster Recovery Planning Methodology [http://cdn.ttgtmedia.com/searchStorage/downloads/A_Brief_Overview_of_the_Disaster_Recovery_Planning_Process.pdf Jon William Toigo]</ref><br />
		+	DR planning methodologies are often branded to specific consulting practices and represented as complex and convoluted processes known only to a few privileged practitioners. But in fact, the DR planning methodology is a straightforward application of common sense that follows a pragmatic project plan similar to systems development lifecycle methodology.
		+
		+
		+	[[File:DisasterRecoveryPlanning1.png\|400px\|Disaster Recovery Planning Methodology ]]<br />
		+	'''Figure 3.''' source: [http://cdn.ttgtmedia.com/searchStorage/downloads/A_Brief_Overview_of_the_Disaster_Recovery_Planning_Process.pdf Toigo Partners International LLC]
		+
		+	As shown in this Figure 3, the initial DR planning project involves 10 tasks, and these may be further refined into three subsets or phases.
		+	*Data Collection and Risk Assessment: the tasks in this phase include project initiation, data collection and the completion of a preliminary risk analysis.
		+	*Design: in which the capabilities are created to actually recover from a disaster
		+	*Implementation: in which the strategies selected for recovery are tested and tests provide feedback to the planning process
		+
		+
		+	'''Key Roles & Responsibilities For The Disaster Recovery Planning Team'''<ref>Key Roles & Responsibilities For The Disaster Recovery Planning Team [https://www.drj.com/articles/online-exclusive/disaster-recovery-planning-who-needs-a-seat-at-the-table-why.html DRJ]</ref><br />
		+	Your disaster recovery planning team should consist of the following:
		+	*Management Steering Committee
		+	Executive team members who oversee the process are involved at a high level, which means they may not technically need a seat at the table—but they should be standing in the room. They play an important role when it comes to approvals for things like budgetary issues, policy considerations, strategic direction, and overcoming roadblocks or intradepartmental issues. These individuals might be part of an existing business continuity oversight committee, or form a separate disaster recovery steering committee, depending on the organization.
		+	*Disaster Recovery Coordinator
		+	The disaster recovery coordinator is an individual from IT who manages the overall recovery in the event of an actual disruption. They are typically also a member of the emergency management team. The disaster recovery coordinator is responsible for setting recovery plans into motion among the team, and coordinating those efforts as they progress. They also help facilitate resolution of problems encountered along the way, and remove roadblocks that slow the process down.
		+	*Business Continuity
		+	Business continuity and disaster recovery go hand-in-hand. The business continuity “expert,” so to speak, fulfills two important roles on the team:
		+	To ensure that IT recovery plans align with business needs. Business needs are determined by a Business Impact Analysis (BIA), which is completed before disaster recovery planning is set in motion. If you haven’t done a formal BIA, an informal one will do in the short term, so you can move forward with the DR process. But it’s important to realize that a BIA in some form is critical to DR; without it, you have no clear goals and your efforts will undoubtedly fall short of meeting real recovery needs. The business continuity representative bridges the gap between business and IT to ensure that critical business needs will be met through IT recovery plans, and that any gaps in alignment are addressed.
		+	To ensure that the necessary components of business continuity are present in the disaster recovery plans. While IT brings technology expertise, IT participants may not be well-versed in basic business continuity essentials involving emergency or crisis management—how to report information during an event, contact lists for key personnel, vendor information, etc. All of these components pave the way for a smooth and effective recovery process.
		+	*IT Infrastructure: Because their areas of expertise apply to the building blocks of an organization, these team members do the lion’s share of the actual recovery work. Each of the infrastructure representatives are responsible for identifying strategies and solutions that will recover critical operations in their areas of expertise, implementing them, and testing them to ensure that they work. The strategies they design must meet the requirements for critical business units as outlined in the BIA. You’ll want three individuals from IT infrastructure on the team - one from each of the following areas: Servers/Storage/Databases
		+	**Servers - Almost all technology runs on some type or server. This person should be intimately familiar with the server and operating system infrastructure along with the backup or replication technologies needed to meet the recovery needs. With the increased use of virtual machines, the implications of the differences between the use of physical and virtual environments must be addressed and understood.
		+	**Storage - Data protection or replication is a critical recovery component. It is now often the major component of the recovery strategy and capability. In most organizations, the storage used in the processing environment is not completely local to the servers (whether physical servers or the server running the virtual environment).
		+	**Database administration - Databases house the data that applications depend on. This is an architecture unto itself; databases may be shared across applications or run on individual or shared servers. Depending on the organizational structure, the database admin may be part of the infrastructure or application team. No matter the organizational setup, database administration and the impact that the data protection strategy may have on the data and database recovery requires participation from this area.
		+	*Networks/Telecom:
		+	**Network - Nothing works without firewalls, servers, storage, etc. This person should be intimately familiar with the network infrastructure of your organization and be able to take charge of recovery strategies related to it.
		+	**Telecom - Disruptions often affect voice communication infrastructure, making it difficult for employees to communicate inside the organization, as well as with external business partners and customers.
		+	*IT Applications: Depending on IT infrastructure recovery plans and the extent of the actual disruption, the individual(s) responsible for applications may play a greater or lesser role in recovery. But they do need to understand, based on how the infrastructure team proposes to restore the environment, what additional application tasks may need to occur—i.e., changes to app configuration and settings, data consistency, or application integrations. They should work closely with the infrastructure representative to identify recovery steps and design an appropriate plan that meets the needs of critical business units.
		+	*Advisors From Critical Business Units: An optional but useful addition to the team - Though it’s not a necessity, you may want to invite representatives from critical business units (those who participated in the BIA) to advise on disaster recovery planning efforts as needed. Rather than presenting the team’s plan as a done deal to business units, it’s helpful to discuss the plan earlier in the process to gather input. How will business processes be impacted by your proposed recovery plans? Is your plan feasible, or will it require the business units to create additional workarounds? Sometimes DR teams may propose alternate recovery methods that impact the requirements stated by the business unit; input from the business units is a must. For example—“We can recover this in four hours, but if you can wait six hours we can save $500,000. Will that work?” This is a good strategy for integrating IT and business, and boosts the likelihood of the plan’s overall success.
		+
		+
		+	'''Future of Disaster Recovery Planning'''<ref>Future of Disaster Recovery Planning [http://www.infosectoday.com/Articles/DRPlanning.htm InfoSecToday]</ref><br />
		+	In determining the components of a disaster recovery plan, businesses typically need to make tough compromises, sacrificing the level of recovery (maximum amount of downtime and data loss) with cost. A relatively new form of technology - server virtualization - is beginning to gain popularity as a viable and cost effective means of achieving highly available, redundant systems. Server virtualization allows companies to consolidate multiple server functions on one host server, thus lowering total cost of operation and effectively managing emerging hardware advancements. At first glance, server virtualization may appear to be risky and counter-productive when trying to achieve a highly available, redundant IT infrastructure. After all, server virtualization increases the risk of multiple server failures by housing numerous server services on a single host server. But, with the combination of hardware advancements and software ingenuity, companies will be able to capitalize on server virtualization as a practical and effective means to achieve disaster recovery. In the case of a natural disaster or power outage that impacts a company's primary facility, a host server in a separate location connected to a SAN targeted for virtual server replication can be enabled quickly and with little effort. By capitalizing on increased virtual server performance as a result of software advancements and lower hardware costs with higher capacity, a robust and full-featured disaster recovery plan will be more readily attainable by more organizations.
		+
		+
		+	===See Also===
		+	[[Disaster_Recovery_Plan_(DRP)\|Disaster Recovery Plan]]<br />
		+	[[Business_Continuity\|Business Continuity]]<br />
		+	[[Business_Continuity_Plan_(BCP)\|Business Continuity Plan (BCP)]]<br />
		+	[[Business_Continuity_Planning_(BCP)\|Business Continuity Planning (BCP)]]<br />
		+	[[Risk_Management\|Risk Management]]<br />
		+	[[Enterprise_Risk_Management_(ERM)\|Enterprise Risk Management (ERM)]]<br />
		+	[[Crisis_Management\|Crisis Management]]
		+
		+
		+	===References===
		+	<references/>
		+
		+
		+	===Further Reading===
		+	*Disaster Recovery Planning Guide [https://www.veritas.com/content/dam/Veritas/docs/white-papers/21319723-1_GA_WP_Disaster-Recovery-Planning-Guide.pdf Veritas]
		+	*Disaster Recovery Planning: Understanding your Options [https://www.tierpoint.com/disaster-recovery-planning-understanding-your-options/ Lynette Ellsworth]
		+	*Disaster Recovery Planning: Preparing for the Unthinkable (3rd Edition) [http://www.informit.com/articles/article.aspx?p=30944&seqNum=11 Jon William Toigo (Author)]
		+	*A Guide to Disaster Recovery Planning [https://www.cio.com.au/article/454491/guide_disaster_recovery_planning/ cio.com]
		+	*Ten Tips for Successful IT Disaster Recovery Planning [http://www.infosectoday.com/Articles/DRPlanning.htm Paul Chisholm]
		+	*Disaster Recovery Planning: A Strategy for Data Security [http://www.emeraldinsight.com/doi/abs/10.1108/09685220010353150 Steve M. Hawkins, David C. Yen, David C. Chou]
		+	*A Framework for Disaster Recovery Planning: Methodology in Three Industry Environments [https://www.questia.com/library/journal/1G1-208747773/a-framework-for-disaster-recovery-planning-methodology Xiao, Liqiong; Tate-Smith, Laura; Stephens, Charlotte S.]
		+	*Business Continuity and Disaster Recovery Planning for IT Professionals [https://books.google.com/books?hl=en&lr=&id=vT8TAAAAQBAJ&oi=fnd&pg=PP1&dq=disaster+recovery+planning+methodology&ots=d0twdd482U&sig=XcimmKsU86D6WczmLFiiIdTpWGw#v=onepage&q=disaster%20recovery%20planning%20methodology&f=false Susan Snedaker]