The Disaster Recovery Strategy phase is to identify the means to restore IT operations efficiently and effectively following a service disruption caused by any residual risks identified during the Risk Analysis and Review phase.
A good recovery strategy must address all the potential impacts identified during the BIA process and can be integrated into the overall IT system architecture during its design and implementation phases.
The key considerations for developing a good strategy are cost, allowable outage time, security and ability to integrate with the enterprise-wide DR Plans. A recovery strategy can be achieved with one or a combination of multiple approaches that complement each other to provide the overall recovery capability to address the full spectrum of identified risks. In addition, the most appropriate recovery approach is one that can be implemented on the IT system and meet the system’s operational requirements.
Some of the recovery approaches available include commercial contracts with cold, warm, or hot site vendors, mobile sites, mirrored sites, reciprocal agreements with internal or external organizations, and service level agreements with the equipment vendors. IT technologies like Redundant Arrays of Independent Disks (RAID), automatic fail-over, Uninterrupted Power Supplies (UPS), and mirrored systems are also viable recovery approaches that can be carefully thought about. In the subsequent sections, we will drive into detail the various recovery approaches that you can use to develop your DR strategy.
The primary aim of DR Planning is to efficiently respond to and recover from a disaster event. Thus, DR Planning focuses on minimizing the impact of the disasters facing an organization. The typical strategies that are applied are as follows:
Implement baseline measures to ensure the security and reliability of activities and systems upon which the existence of an organization is highly dependent. Acquire or develop tools and techniques to eliminate bugs, configuration errors, and hardware failure.
Implement measures to minimize the impact of unavoidable disasters or risks.
Identify the procedures to respond to and recover from disasters. This is achieved through the prediction of scenarios that are likely to result in a disaster, their likelihood of occurrence and their impact. Information for the formation of scenarios is acquired from experience, the configuration of the system deployed in the organization, problems logs, and audit reports
The critical success factor for a successful implementation of DR strategy is your ability to recover vital records, such as your critical business data and application programs, not just your hardware, software and staff alone.
The mechanism to ensure continuity and availability of data and applications is to have a fault-tolerant set of backup and recovery processes to complement the complete DR strategy.
Backup Strategies
In general, all IT personnel today agree on all the following facts:
However, IT people need to understand the details of the selection criteria for adopting the most suitable backup and recovery process for the organization, so as to ensure the availability of critical digital assets during any disaster. In this section, a summary of the various backup and recovery options will be discussed.
Goh, M. H. (2016). A Manager's Guide to Implementing Your IT Disaster Recovery Plan. Business Continuity Management Specialist Series (2nd ed.). Singapore: GMH Pte Ltd.
Extracted from "Chapter 8: DR Strategy: Data Backup"