DRP and BCP information jerome Moore CMGT/244 August 20, 2010 What is the difference between a DRP and a BCP? Often disaster recover plan (DRP) and business continuity plan (BCP) aren’t the plan but some time both terms are used in place of each other. There are distinct differences in the two, disaster recover plan incorporates information assets and services after disasters such as floods, fires or any other catastrophic events as well as hardware failure.
On the other hand business continuity plan encompasses a much wider responsibility than DRP, BCP plans recovery for the entire business or organization in the event of a major disaster, included in business continuity plan is communication between employees, work facilities, telephone services and business operations as well as restoring the business to normality before the disaster. What is the purpose of a Disaster Recovery Plan (DRP)? The purpose of a disaster recovery plan is to allow a company to resort back to normal operation in a short length of time with the highest level of efficiency.
The main objective of disaster recovery plan is get operations up and running the quickest amount of time. What are the key elements of a DRP? Within in a disaster recovery process there are strenuous rules and procedures that must be followed to guarantee that normal business function will continue to operate. In the event failure does occur to the network or resources, there are several key elements to include in a disaster recovery plan. • Establish a planning group • Perform risk assessment and audits • Establish priorities for applications and networks • Develop recovery strategies Prepare inventory and documentation of the plan • Develop verification criteria and procedures • Implement the plan By implementing these key elements could assure a company effective recovery from any business disaster that may occur. What are the five methods of testing a DRP? Checklist testing: Without a doubt, checklists are the recovery practitioner’s most valuable tools. They are inexpensive to implement and maintain and provide the backbone of the testing cycle. The checklists are team oriented and if used to their full potential provide multiple benefits. Walk Through Testing:
Team members verbally “walk through” the specific steps as documented in the plan to confirm effectiveness, identify gaps, bottlenecks or other weaknesses in the plan. Often used in conjunction with previously validated checklist plans. This test provides the opportunity review a plan with a larger subset of people allowing you to draw upon a correspondingly increased pool of knowledge and experiences. Staff will be familiarized with procedures, equipment and offsite facilities if required. Simulation Testing: A disaster is simulated so normal operations will not be interrupted.
Hardware, software, personnel, communications, procedures, supplies and forms, documentation, transportation, utilities, and alternate site processing should be thoroughly tested in a simulation test. Extensive travel, moving equipment, and eliminating voice or data communications may not be practical or economically feasible during a simulated test. However, validated checklists can provide a reasonable level of assurance for many of these scenarios. The simulation test should be considered advanced and only implemented after the previous checklist and walk through tests have been validated.
Analyze the output of the previous tests carefully before the proposed simulation to ensure the lessons learned during the previous phases of the cycle have been applied. Parallel testing: A parallel test can be performed in conjunction with the checklist test or simulation test. Under this scenario, historical transactions such as the prior business day’s transactions are processed against preceding day’s backup files at the contingency processing site or hot site. All reports produced at the alternate site for the current business date should agree with those reports produced at the alternate processing site.
This test should be considered advanced and only be undertaken following due diligence with respect to the lessons learned from the previous phases of the cycle. Full-interruption testing: A full-interruption test activates the total disaster recovery plan. The test is likely to be costly and could disrupt normal operation, and therefore should be approached with caution. Again, the importance of due diligence with respect to previous phases of the cycle cannot be overstated. Why does a DRP require testing?
To say the least, testing a disaster recovery plan is as much or even more important than simply formulating a disaster recovery plan and leaving it at that. There are several aspects that can go wrong in an actual disaster situation, several unforeseen factors that could crop up rendering the whole plan useless or inadequate beyond imagination. To avoid such a tragic failure of the disaster recovery plan, everyone involved in the business of securing critical data should realize the urgent need to test run the plans and ensure that they work like we want it to be in the time of crisis.
If this is not done, then we run the obvious risk of a possibly failed disaster recovery plan which would mean that all the money and man hours spent on formulating such a plan is a dead loss. Mind you, such a dead loss is over and above the possible loss of critical data which could well mean the end of company. Conclusion The importance of employing a DRP plan within a company can be a great benefit, whether it’s a small company of a big company. Disasters aren’t always foreseen but they can occur and with a proper DRP in place it can determine whether a company succeeds of fail. References ttp://www. thecomputercoach. net/html/drp. html http://www. ladenterprizes. com/differencedrp_bcp. htm www. sans. org/reading_room/whitepapers/… /disaster-recovery-plan_1164 www. sans. org/… /disaster-recovery-plan-testing-cycle-plan-plan-cycle_563 http://free-backup. info/test-the-disaster-recovery-plan. html http://rr. sans. org/recovery/cycle. php http://free-backup. info/test-the-disaster-recovery-plan. html? tpl=syndication-guidelines http://lrd. yahooapis. com/_ylc=X3oDMTVnaWVsMXYwBF9TAzIwMjMxNTI3MDIEYXBwaWQDTHJlazRUTFYzNEdR VjYwVDFRYVlHeC5xMDYuMHVja2pJb3dfYzJFV3NGejhWZzVHX2xkQjRPX1Yw DZPdVNOME9zVjg2a0I2BGNsaWVudANib3NzBHNlcnZpY2UDQk9TUwRzbGsD dGl0bGUEc3JjcHZpZAN6cmRkQ2tnZUF1MUhfekZqanhsTHl2VjYwRG1lOGty NGhMa0FCN3Rf/SIG=13pq6qtbo/**http%3A//www. sans. org/reading_room/whitepapers/recovery/the_disaster_recovery_plan_1164%3Fshow=1164. php%26cat=recovery http://lrd. yahooapis. com/_ylc=X3oDMTVnc2lubmFoBF9TAzIwMjMxNTI3MDIEYXBwaWQDTHJlazRUTFYzNEdR VjYwVDFRYVlHeC5xMDYuMHVja2pJb3dfYzJFV3NGejhWZzVHX2xkQjRPX1Yw eDZPdVNOME9zVjg2a0I2BGNsaWVudANib3NzBHNlcnZpY2UDQk9TUwRzbGsD dGl0bGUEc3JjcHZpZANDZ3NlN0VnZUF1MWtkQW9sRFlkVlMzRG1KbS5UVGt3 TmtCSUFCb3hv/SIG=126sepffu/**http%3A//www. attainium. et/newsbriefs/2010-03-17-BC-Newsbriefs. html http://lrd. yahooapis. com/_ylc=X3oDMTVnYjBpcTFpBF9TAzIwMjMxNTI3MDIEYXBwaWQDTHJlazRUTFYzNEdR VjYwVDFRYVlHeC5xMDYuMHVja2pJb3dfYzJFV3NGejhWZzVHX2xkQjRPX1Yw eDZPdVNOME9zVjg2a0I2BGNsaWVudANib3NzBHNlcnZpY2UDQk9TUwRzbGsD dGl0bGUEc3JjcHZpZANfR2k0TEVnZUF1MFVRWW9EWG1FdzIwYjAwRG1lOGtu OC5Mb0FDbnhY/SIG=12jdtaivk/**http%3A//www. makemineamillion. org/cmi_assets/docs/Protecting_Your_Enterprise. pdf https://api. turnitin. com/viewGale. asp? r=69. 5632761543227&svr=7&session-id=8e2f748ce8d0bcc4a18aedec3657a61c&lang=en_us&oid=21253991&key=fdc1bd59177cbfcf35a421d69551981d