The disaster recovery handbook: a step-by-step plan to ensure business continuity and protect vital operations, facilities, and assets

552 Pages·2018·3.9 MB·English

by  Wallace

Thank you for downloading this
AMACOM eBook.
Sign up for our newsletter, AMACOM BookAlert, and
receive special offers, access to free samples, and
info on the latest new releases from AMACOM,
the book publishing division of
American Management Association.
To sign up, visit our website: www.amacombooks.org
To learn more about the American Management
Association visit: www.amanet.org
The copyright information for this title may be found at the end of this eBook file.
THE
DISASTER
RECOVERY
HANDBOOK
| THIRD EDITION |
THIRD EDITION
THE
DISASTER
RECOVERY
HANDBOOK
A Step-by-Step Plan to Ensure Business Continuity and
Protect Vital Operations, Facilities, and Assets
MICHAEL WALLACE
LAWRENCE WEBBER
AMERICAN MANAGEMENT ASSOCIATION
NEW YORK • ATLANTA • BRUSSELS • CHICAGO • MEXICO CITY • SAN FRANCISCO
SHANGHAI • TOKYO • TORONTO • WASHINGTON, D.C.
CONTENTS
 Acknowledgments ix
1. Getting Started: Overview of the Project 1
2. Building the Business Case: Measuring the Impact on the Business 25
3. Evaluating Risk: Understanding What Can Go Wrong 39
4. Selecting a Strategy: Setting the Direction 77
5. Building an Interim Plan: Don’t Just Sit There, Do Something 91
6. Writing the Plan: Getting It Down on Paper 109
7. Administrative Plan: Orchestrating the Recovery 123
8. Technical Recovery Plan: Putting Humpty Dumpty Back Together Again 143
9. Work Area Recovery Plan: Getting the Office Up and Running 159
10. Pandemic Plan: The Wrath of Nature 175
11. Crisis Management Plan: Minimizing the Damage 197
12. Emergency Operations Plan: Taking Control of the Situation 215
13. Testing Your Plans: Test, Test, Test 241
14. Certifications: How Does Your Plan Measure Up? 269
15. Policies and Procedures: Get Everyone Moving in the Same Direction 287
16. Electrical Service: Keeping the Juice Flowing 305
17. Telecommunications and Networking: Your Connection to the World 323
18. Vital Records Recovery: Covering Your Assets 349
vi CONTENTS
19. Information Security Response: Always Vigilant 375
20. Data: Your Most Irreplaceable Asset 399
21. Workstations: The Weakest Link 421
22. Customers: Other People to Worry About 435
23. Suppliers: Collateral Damage 443
24. Fire: Burning Down the House 455
25. Human Resources: Your Most Valuable Asset 473
26. Health and Safety: Keeping Everyone Healthy 493
27. Terrorism: The Wrath of Man 509
 Glossary 521
 Index 527
 About the Authors 533
  Sample Chapter from Leading at the Edge by Dennis N.T. Perkins
with Margaret P. Holtman and Jillian B. Murphy 535
 About AMACOM Books 551
PDF files for the supplementary materials are available to purchasers
of this book at: www.amacombooks.org/go/DisasterRecovery3E.
SUPPLEMENTARY MATERIALS
www.amacombooks.org/go/DisasterRecovery3E
CHAPTER 1
Form 1-1: Example Letter Appointing the Business Continuity Manager
Form 1-2: Stakeholder Assessment Map
Form 1-3: Team Member Responsibilities Map
Form 1-4: Communications Responsibility Plan
Form 1-5: Sample Stakeholder Reporting Matrix
CHAPTER 2
Form 2-1: Department Function Identification
Form 2-2: Business Impact Analysis Questionnaire
CHAPTER 3
Form 3-1: Layer One Risk Assessment Tool
Form 3-2: Layer Two Risk Assessment Tool
Form 3-3: Critical Process Impact Matrix
Form 3-4: Critical Process Breakdown Matrix
Form 3-5: Risk Assessment Form Layer 3
Form 3-6: Risk Assessment Form Layer 4
Form 3-7: Risk Assessment Form Layer 5
CHAPTER 5
Form 5-1: List of Service Agreements
Form 5-2: Vendor List
Form 5-3: Emergency Contact List
Form 5-4: Vendor Matrix
Form 5-5: Emergency Equipment List
CHAPTER 6
Form 6-1: Sample Business Continuity Action Plan
Form 3-3: Critical Process Impact Matrix
Form 3-4: Critical Process Breakdown Matrix
CHAPTER 7
Form 7-1: Sample Administrative Plan
Form 7-2: Business Continuity Manager Job Description
viii SUPPLEMENTARY MATERiALS
CHAPTER 8
Form 8-1: Technical Recovery Plan
Form 8-2: IT Team Leader Recovery Plan
Form 8-3: Technician Tracking Log
Form 8-4: Recovery Activity Log
Form 8-5: Hour-by-Hour Recovery Plan
CHAPTER 9
Form 9-1: Sample Work Area Recovery Plan
CHAPTER 10
Form 10-1: Sample Pandemic Management Plan
CHAPTER 11
Form 11-1: Sample Crisis Management Plan
Form 11-2: Skill Matrix by Technical Skill
Form 11-3: Skill Matrix by Job Process
Form 11-4: Skill Matrix by Job Function
CHAPTER 13
Form 13-1: Log Sheet
Form 13-2: Observation Log
CHAPTER 18
Form 18-1: Shelf List
Form 18-2: Recommended Supplies List
CHAPTER 19
Form 19-1: Sample Incident Management Plan
CHAPTER 20
Form 20-1: Recovery Plan Distribution List
Form 20-2: Recovery Plan Change Record
CHAPTER 22
Form 22-1: Inventory of Key Customers
CHAPTER 23
Form 23-1: Supplier Data
CHAPTER 24
Form 24-1: Sample Fire Poster
CHAPTER 25
Form 25-1: Skill Matrix by Job Process
Form 25-2: Skill Matrix by Technical Skill
Form 25-3: Skill Matrix by Job Function
ACKNOWLEDGMENTS
The authors would like to express their appreciation to Matt Curtin of Interhack,
Michael James of Fireproof Records Center, and Alice Kaltenmark of Reed Else-
vier for sharing their experiences in business continuity. Their wisdom and insights
were extremely valuable in creating this updated edition.
We would also like to express our appreciation to our wives Tami and Nancy for
their support while developing this and other books. Any successes that we’ve had
would not have been possible without their support.
1
GETTING STARTED
Overview of the Project
Nothing is impossible for the man
who doesn’t have to do it himself.
—A. H. WEILER
INTRODUCTION
The job of a business executive requires coordination of the many activities neces-
sary to create a successful business. Markets must be analyzed, potential customers
identified, strategies for creating and delivering products and services must be de-
veloped, financial goals established and reported, legislative mandates followed,
and many different stakeholders satisfied. To ensure that these objectives are met,
businesses eventually develop a series of processes designed to produce the desired
result. But the world is a dangerous place. Earthquakes, floods, tornadoes, pan-
demics, snowstorms, fire, and other natural disasters can strike at any time and
interrupt these important processes. Terrorism, riots, arson, sabotage, and other
human-created disasters can also damage your business. Accidents and equipment
failures are guaranteed to happen. As an executive responsible for the well-being
of your organization, it is critical that you have a plan in place to ensure that your
business can continue its operations after such a disaster and to protect vital oper-
ations, facilities, and assets.
You do this just like you do any other important task; you analyze the situation
and create a plan. A disaster recovery plan keeps you in business after a disaster
by helping to minimize the damage and allowing your organization to recover as
quickly as possible. While you can’t prevent every disaster, you can with proper
1