Cont Oh Template

download Cont Oh Template

of 40

Transcript of Cont Oh Template

  • 8/6/2019 Cont Oh Template

    1/40

    Disaster Recovery and Backup Plan

    Shelley Keating

    CEO Harris and Heartfield Manufacturing

  • 8/6/2019 Cont Oh Template

    2/40

    Introduction:

    It is important to note that disasters both large and small come often throughout

    the world and while there is no way to predict when one will occur the best way to dealwith a disaster is to be prepared. In light of this my company Team Bin has prepared a

    disaster recovery plan which we have tailored to fit your company. In this plan you will

    find details on how to cope with all aspects of disaster recovery and preparation. It is our

    goal with this guide to provide you with everything you will need to fully recover both

    quickly and professionally in the event of a disaster. Inside you will find a summary of

    your company, our mission statement, memos about your first meeting, sources for more

    information, several inventory sheets detailing your facility and equipment, what you

    would need to bring different departments back online, details on alternate locations to

    relocate to, emergency contact info, details on dealing with public works and emergency

    services, details on dealing with computer intrusions and hacking, specialized guidelines

    for dealing with hazardous materials and your art/antique collection, an implementationschedule, ROI on a UPS system, machine shut down procedures, forms for evaluating

    walkthrough tests, information for updating political and social conditions and how to

    deal with any negative community dynamics during the disaster. I think that you will

    find the plan to be comprehensive while at the same time being easy to follow and I look

    forward to meeting with you to further discuss the plan.

    Executive Summary:

    As stated beforehand disasters of varying size and consequence happen often

    throughout the world and therefore as Murphys Law mandates, it will happen when you

    are least prepared. It is for this reason that we seek to keep your company at a high level

    of awareness and preparation at all times. We understand that your company prides itself

    with your excellent reputation for manufacturing high quality parts and delivering orders

    on schedule and would like to make sure that this standard of excellence can be continued

    in the event of a disaster. I firmly believe that the only way to continue this standard of

    excellence is to have a solid, tested recovery plan. By setting up this plan now you will

    be giving yourself time to test the plan and therefore will have the chance to continually

    improve it before the onset of a disaster. In order to understand the importance of the

    disaster recovery plan, I believe it is important to first understand just how crippling a

    disaster can be. A disaster will at first of course have the ability to damage your facility

    which without a plan could result in confusion and panic amongst employees that could

    lead to further problems, injuries, or even death. A disasters effect will not stop at just

    your facility however. A disaster that is poorly dealt with could then move on to affect

    your reputation with your customers, something that you have worked hard to attain and

    would have a very difficult time gaining back, resulting in loss of customers, loss of

    sales, and perhaps even a drop in stock value. The wave of destruction could then

    continue on to both business partners and suppliers as they take the heat from customers

  • 8/6/2019 Cont Oh Template

    3/40

    and are also left with a now unneeded surplus of supplies. It is clear to see that not

    preparing for a disaster could destroy a company and result in injury, death, lawsuits,

    revocation of licenses, the breaking of business partnerships, and even fines. It is

    imperative to us here at Team Bin to make sure nothing of the sort ever befalls Harris and

    Heartfield manufacturing. It is our goal to see that when disaster strikes, you are back on

    your feet in the shortest amount of time possible continuing to shine in the eyes of thepublic, and perhaps even receiving commendation and an even more positive public

    image for your outstanding response to disaster. In the long run I feel that if and when

    you were to encounter a disaster the cost of implementation on this hand would be paid

    back several times over.

    Summary of Experiences:

    Overall I have had a very good experience with this class. I enjoyed how it was

    able to not only present the material but also forced me to express what I learned in a

    creative real world scenario. It has given me a confidence that I could in fact help a smallcompany in dealing with a disaster. I would also like to say that I believe a large part of

    the classs success was your continued willingness to take suggestions from us as we

    worked our way through the course. I believe in this fashion you will be able to make the

    course better and better with every passing semester. As I posted on the website the only

    gripe I have about the course was the huge amount of work all due right at the end. I

    think that this cover page, final, and standard weekly work/quizzes are more than enough

    for an already truncated week. As I stated in an email I sent to you I think that the best

    way to lighten the load would be to assign the individual projects to earlier weeks and

    perhaps tie them closer to the chapter you assign them with, instead of being a project

    that is better done after finishing the class, but of course this is just my opinion. I think

    that the weekly projects were very nicely assigned for the most part and I think I got a lotout of the reading by actually having to show you hands on what I had learned. I also

    enjoyed that the quizzes were short and to the point and could be taken as many times as

    you needed as Ive found that many of the quizzes in the classes Ive taken so far have

    been riddled with problems and occasionally wrong answers. Lastly, the group aspect of

    the class worked out ok for me and Greg but I believe this may be just because it was the

    two of us and that we were both compatible. I can foresee that you may have some

    resistance to the group format since most of us are doing these classes on line so that we

    can fit school around work and other obligations that would prevent us from keeping to a

    strict schedule. I think this would have proved quite difficult if there were more of us in

    the group trying to find common times to meet. Since it was just Greg and I however we

    were mostly able to just wait to find each other on line. Also, I would suggest to the classusing an instant message service to keep in touch as it has proved invaluable to Greg and

    I in getting together and collaborating on the projects.

  • 8/6/2019 Cont Oh Template

    4/40

    Table of Contents

    Page 1: Project 1.1 Company SummaryPage 2: Project 1.2 Mission Statement

    Page 3: Project 2.1 Memo Regarding First MeetingPage 4: Project 2.2 Websites for Assistance with Disaster Recovery

    Page 5: Project 3.1 Facility Exposure Inventory SheetPage 6: Project 3.2 Heavy Equipment Exposure Inventory Sheet

    Page 7: Project 3.2 Light Equipment Exposure Inventory SheetPage 8: Project 3.2 Installed Systems Exposure Inventory Sheet

    Page 9: Project 3.2 Information Technology Exposure Inventory Sheet

    Page 10: Project 3.2 Office Equipment Exposure Inventory Sheet

    Page 11: Project 4.3 Human Resources and Support Analysis SheetPage 12: Project 4.4 Corporate Security and Support Analysis Sheet

    Page 13: Project 5.3 Emergency Operations Center Information Sheet

    Page 14: Project 5.4 First Alert Information SheetPage 15: Project 6.2 Emergency Service Contact Procedure Checklist

    Page 16-17: Project 6.3 Procedures for Contacting Public WorksPage 18: Project 7.2 Computer Incidents Reporting to Law Enforcement AgenciesPage 19: Project 7.3 Reporting Hacking Incidents to End-User Departments

    Page 20: Project 8.2 Hazardous Materials Procedure Checklist

    Page 21-22: Project 8.3 Procedure for dealing with art, antiques, and collectibles

    Page 23: Project 9.2 Implementation SchedulePage 24: Project 9.4 Analysis of the value of UPS

    Page 25: Project 10.2 Procedure Walk-through SheetPage 26: Project 10.4 Shutdown Procedure Evaluation Sheet

    Page 27: Project 11.4 Sources of Information for Political and Social ConditionsPage 28: Project 11.5 Ongoing Training

    Page 29-30: Project 12.3 Neutralizing Negative Dynamics of Local CommunityPage 31-32: Project 12.8 Communities and Dealing with Disasters in the Long Term

    Page 33-36: Individual Project Backup Project

  • 8/6/2019 Cont Oh Template

    5/40

    Team BIN:

    Harris and Heartfield Manufacturing

    I would like to introduce you all to our new client Harris and HeartfieldManufacturing. Harris and Heartfield are a small family owned manufacturer of metal

    parts and have asked for our help in devising a disaster recovery plan for their company.Harris and Heartfield, which I will hereafter refer to as H&H, was founded by the current

    owners grandfathers Matthew Harris and Henry Heartfield. The current owners BrandonL. Harris and Tony Heartfield stressed to me that they were very concerned about

    keeping their companys excellent reputation for manufacturing high quality parts anddelivering orders on schedule and would like to make sure that this standard of excellence

    can be continued in the event of a disaster. The entire management team expressedconcern about being able to stay competitive over the next several decades and most

    importantly being able to fulfill orders under any circumstances that may arise. We have

    been asked to help due to the fact they do not believe the board of investors, whilebusiness savvy, will not spend the necessary money for backup costs unless we canprovide a convincing argument that the plan will provide a positive return.

    The company while originally founded in 1942 for defensive contracting purposesnow only receives 60% of its revenue from defense contractors due to consolidation

    within the US defense industry. The additional revenue comes from manufacturingspecialized metal parts for heavy equipment and from orders for replacement parts that

    the company has manufactured from the past and for custom orders for the developmentof prototype equipment.

    H&H currently has 200 employees at its single location in Carlsbad, Californiaand their equipment has been broken down as follows:

    Administrative Department: 20 employees All have desktop computers

    connected to the LAN.Research and Design Department: 15 engineers All use Sun Microsystems

    workstations connected to the LAN.

    Servers: 3 servers for administrative functions, 6 servers support design and

    manufacturing.Shop Floor: Variety of machining equipment, half of which are computerized.

    With all of this information in mind, I am confident that our team can come up

    with a plan to satisfy their board of directors and keep H&H safe from disaster. I look

    forward to working with all of you to achieve this goal.

  • 8/6/2019 Cont Oh Template

    6/40

    Mission Statement

    The purpose of this manual is to provide general guidelines in the event Harris and HeartfieldManufacturing must recover from a disaster.

    The steps outlined in the following pages will allow Harris and Heartfield Manufacturing to:1. Rebuild should a disaster destroy your business data2. Remain operational during and after a disaster3. Provide exceptional service to employees/customers affected by the disaster.

    The disaster recovery plan was first discussed, and implemented by Harris and Heartfield

    Manufacturings Disaster Recovery team, Team Bin, and will be overseen by team leaderTimothy Edwards.

    The guidelines of this plan are designed to reduce and control damage, and prioritize effortsneeded to return to normal business functions:

    First, you must conduct an analysis of the critical data, to determine data needed to be recovered,in the event of a disaster. During this analysis you will require inputfrom all departments identifyingthe critical data for Harris and Heartfield Manufacturings survival.

    Second, the backup of critical data should be inventoried, and transferred to an independentdisaster facility, other then Harris and Heartfield Manufacturings base location. This data would bemade available for Harris and Heartfield Manufacturing for maintenance, and use.

    Third, take time to review the critical data, and construct a schedule to keep those programs ascurrent as possible. Also a plan should be made for a full-scale meeting between all concernedpersonnel from your organization and that of your disaster recovery vendor to focus on the futuredirection of your plan and its implementation.

    Finally, plan a simulated disaster recovery test once a year. These tests should be conducted as ifa disaster actually hit your operation.

  • 8/6/2019 Cont Oh Template

    7/40

    1

    MemorandumTo: Department Heads of Harris And Heartfield Manufacturing

    CC: Brandon L. Harris and Tony Heartfield

    From: Team BIN

    Date: 7/17/07Re: First Disaster Recovery Meeting

    Disaster Recovery Meeting

    Date: 6/18/04

    Time: 10:30

    Location: Central Conference Room

    I would like to start by greeting you all and welcoming you to the disaster recoveryplanning process.As you all by now know your company has hired our team to provide a

    disaster recovery plan in order to ensure that your company is able to maintain their excellentservice standards in the face of any unforeseen disasters. In light of this we have set up our

    first meeting with you, the department heads. With this in mind I am sending out this memoto inform you all of what to expect and how to prepare for the first meeting. The first step isto assign a secondary representative from your department to the disaster recovery planning

    team. You will be the primary representative for your department and be a full member ofthe team, while the alternate will be a secondary member. It is our belief that the secondary

    member will greatly help with scheduling conflicts as well as improving team stability. It isimportant that this secondary representative be a manager with the same compete

    understanding of the department and authority to make decisions as you do. It will beimportant that you both take the time to keep each other informed of all planning and

    department issues. We have been ensured that your efforts will be both supported andrewarded by Tony Heartfield who will be your main executive contact, or what we like to

    call the champion. As far as your individual department is concerned you are responsible forconducting all specific departmental research in order to help in the establishment, evaluation

    and implementation of the corporate plan. While you may be concerned about actuallygetting the time and interest needed from your already busy employees, Mr. Heartfield has

    set up a rewards program that will ensure a 2-5% bonus to their annual pay depending on theemployees involvement in the process. The first task to be completed at the start of the

    meeting will be the creation of a skills inventory. All of you will be required to submit aform with your applicable skills to this inventory so that we can better determine which team

    members have previous experience in disaster planning and who will prove most useful inthe process ahead of us. When the list is compiled it will be readily available from your

    corporate website. It would be beneficial if all of you could conduct initial assessments in

    your own departments as well so that we can mark appropriate employees as potentialresources to help out other departments. A complete agenda of this first meeting will be sentout 2 weeks before the meeting occurs. Thank you all for your time, we look forward to

    working.

    CONFIDENTIAL

  • 8/6/2019 Cont Oh Template

    8/40

    5 Websites for assistance with d isaster recovery

    1. http://www.livevault.com/pdf/customers/SBACaseStudy_103102.pdf

    This website requires you to download a PDF file, about the US Small Business Administration.This article describes this U.S. government agency that provides financial, technical andmanagement assistance to help Americans start, run and grow their businesses..2. http://www.sbaonline.sba.gov/disaster_recov/index.html

    This website also is about the Small Business Administration. It goes into further detail, regardingquestions, how to apply, state by state updates, financing, and business opportunities. The sitegives a glossary of many terms related to disaster recovery, and many others.

    3. http://www.ibhs.org/business_protection/

    The Institute for Business and Home Safety describes in detail, different programs for differenttypes of disasters. It has brochures, and files to download, to educate you about home andbusiness disaster recovery plans. You can also subscribe to newsletters, about the different plans.

    4. https://disasterhelp.gov/portal/jhtml/index.jhtml

    Disaster Help describes in detail, all the different disasters, and the plans implemented to helprestore you back to normal. The site lists different resources to find more information, as well asask question yourself. It allows you to link to different states, and their policies dealing with disaster

    recovery.

    5. http://epix.hazard.net/internet_sites.html

    This site is actually very informative. It lists, and describes, all the emergency agencies, around theworld, and if you spoke the language, allows you to link up with that specific countries website fordisaster recovery.

  • 8/6/2019 Cont Oh Template

    9/40

    Carlsbad, CA Carlsbad, CAAddress: 1345 Business St

    Business processes performed at facility: The fabrication of specialized metal parts for use in defense equipment, heavy equipment, replacement parts

    and rotot e e ui ment.

    N/A

    N/AN/A

    5/23/055/23/055/23/055/23/055/23/05

    N/A

    5/23/045/23/045/23/045/23/04

    Products or parts

    Yes No N/AYes No N/AYes No N/AYes No N/AYes No N/AYes No N/AYes No N/AYes No N/A

    Light equipmentInstalled systems

    Information technologyOffice equipment

    Next Update:

    Physical facilitiesPersonnel

    Heavy equipment

    N/AN/A

    5/23/04

    Exposure inventories attached: Status

    (Select one)

    Last Updated:

    Main fax number: 555-555-6413Main e-mail: [email protected]

    Disaster recovery contactName: Tony Heartfield

    Address: 25 Personal Ave

    Telephone: 555-555-2265Fax number: 555-555-7982E-mail: [email protected]

    Facility name and locationName: Harris and Heartfield Manufacturing

    Main telephone: 555-555-3492

    Facility Exposure Inventory Overview Sheet(Form number FEIOS01)

    Facility number: 1 Number of buildings: 1Number of employees: 200

  • 8/6/2019 Cont Oh Template

    10/40

    1 Mills 2 Machining & Boring of Parts Carlsbad, California2 8 Lathes 4 Fabric ation of Bushings & Tools Carlsbad, California3 17 Lathes (Southbe nd 17"x60") 4 Fabric ation of Bushings & Tools Carlsbad, California4 Tool Cutter/G rinder 5 Sharpe ning Ream ers, Drills, Spec ial Tooling Carlsbad, California5 Vertical CNC Mill

    1Machining Parts

    Carlsbad, California

    6 Horizontal CNC Mill 1 Machining Parts Carlsbad, California7 EDM Mac hine 1 Cutting High Strength Steel Carlsbad, California8 6 Carbide Grinder 2 Tooling Sharpe ner Carlsbad, California9 Jig Bore 2 Prec ision Hole Boring Carlsbad, California

    10 3 Ton A rbo r Press 1 Bearing, Bushings & Sleeve Installation & Remova l Carlsbad, California11 Drill Press 1 Hole Drilling Carlsbad, California12 MIG Welding Equipm ent 3 Welding Steel Carlsbad, California13 TIG Welding Equipm ent 3 Aircraft Welding Carlsbad, California14 Oxy-Ace tylene Welding Equipment 4 Brazing, Cutting & Silver Solder Carlsbad, California15 Airc rafte r Turn Tab le 1 360 Degree Rotating Table Carlsbad, California16 Glassbead Blast Cabinet 3 Cleaning for Welding Carlsbad, California17 Forklift 2 Shipping / Rec eiving / Wareho using Carlsbad, California18 Pallet Jacks 4 Shipping / Rec eiving / Wareho using Carlsbad, California19 Table Saw 2 Shipping / Rec eiving / Wareho using Carlsbad, California20 Freight Sca le 1 Shipping / Rec eiving / Wareho using Carlsbad, California21 30 & 50 Gallon Drum Grabber 1 Shipping / Rec eiving / Wareho using Carlsbad, California22 Banding Tool 3 Shipping / Rec eiving / Wareho using Carlsbad, California23 Mobile Shipping Foamer 2 Shipping / Rec eiving / Wareho using Carlsbad, California24 Autoclave 1 Composite Fabrication a nd Repair Carlsbad, California

    25 Large A utoclave 1 Composite Fabrication a nd Repair Carlsbad, California

    26 Dual Zone Hot Bond Table 1 Composite Curing up to 450 Degrees Carlsbad, California

    27 Dual Zone Hot Bond Units1

    Portable Composite Curing up to 450 Degrees Carlsbad, California28 10 X 10 Walk-in- Freezer 2 Prepreg & Adhesive Storage, 0 to-10Degrees Carlsbad, California

    29 Low Tempera ture Curing Room 2 Low Temp Curing of Com posites & Paint up to 180 Degree Carlsbad, California

    30 HEPA Filtered Clean Room 1 1,500 Sft Humidity Controlled Carlsbad, California

    31 Digital Scales 2 Weight & Balance of Flight Controls and weighing of Resins Carlsbad, California

    32 12 x 30 Curing Oven 1 All Curing of Composites & Paint up to 500 Degrees Fahrenheit Carlsbad, California

    Quantity Purpose Alternate locationEquipment type

    Heavy Equip me nt Exposure Inve ntory Shee t - HEEIS01

  • 8/6/2019 Cont Oh Template

    11/40

    1 12 Press Brake 10 Sheetmetal Parts Fabrication Carlsbad, California2 12 Sheetmetal Shear 10 Metal Cutting Carlsbad, California3 4 Leaf Brak e 5 Sheetmetal Parts Fabrication Carlsbad, California4 4 Sheetmetal Shear 5 Metal Cutting Carlsbad, California5 2 Sheetmetal Brake 3 Sheetmetal Parts Fabrication Carlsbad, California6 Trace- A-Punch 3 Sheetm etal Parts Trac er Carlsbad, California7 5 Band Saws 5 Metal Cutting Carlsbad, California8 Throatless Shear 10 Metal Cutting Carlsbad, California9 Angle Shear 10 Metal Cutting Carlsbad, California

    10 Turret Punc h 5 Metal Punching Carlsbad, California

    11 3 & 6 Sheetm etal Rollers 2 Metal Contouring Carlsbad, California12 A Squeezes 5 Pneum atic Riveting Tools Carlsbad, California13 C Squeezes 5 Pneum atic Riveting Tools Carlsbad, California14 Various Drill Motors 1 Pneum atic Hole Drilling Tools Carlsbad, California15 Hand Squeezes 5 Hand Riveting Tools Carlsbad, California16 Pop Rivet Guns 10 Hand Riveting Tools Carlsbad, California17 Rivet Cutters 5 Rivet Cutting Tools Carlsbad, California18 T Head Crimp ing Tools 5 Sheetmeta l Hand Crimping Tools Carlsbad, California19 7 Angle Polishers 3 Metal Polishing Carlsbad, California20 Multi-meters 3 Wiring Test Me ters Carlsbad, California21 Rivet Shav ers 3 Rivet Hea d M illing Tool Carlsbad, California22 Torque Wrenc hes 5 Fastener Torq uing Carlsbad, California23 Grease Guns 3 Parts Lubric atio n Carlsbad, California24 Cherrymax Guns 5 Pneum atic Blind Fastener Installation Tools Carlsbad, California25 ERC Sheet Me tal Shrinker, Mo del #1447 1 Sheetmeta l forming mac hine Carlsbad, California26 Universal Specialties Expander 1 Sheetmeta l machine Carlsbad, California27 Rivnut Kits 3 Rivnut Installa tion Tools Carlsbad, California28 Safety Kleen Green Mac hine 1 Parts Cleaning Equipment Carlsbad, California29 Aircraft Com ponent Fixtures n/a For A320,727,737,757,747,DC-9,DC-10,MD80,MD90,MD11 Carlsbad, California

    Equipment type Quantity Purpose Alternate location

    Light Equipment Exposure Inventory Sheet - LEEIS01

  • 8/6/2019 Cont Oh Template

    12/40

    1 Backup Exec 1 Backup and storage of data Carlsbad, California2 Authentication 1 Windows NT domain authenticat ion Carlsbad, Cal ifornia

    3 Panasonic DBS Telephone System1

    Internal telephone PBX Carlsbad, California4 ADP Payroll 1 Payroll system Carlsbad, California5 1 voicemail Carlsbad, California6 MS SQL Server 2000 1 Database for DevTrack system Carlsbad, California7 DevTrack 1 Defect and project tracking system database Carlsbad, California8 MKS Source Integrity 1 Software version control Carlsbad, California9 Perforce 1 Software version control Carlsbad, California

    10 Allegro 1 Engineering Design Software Carlsbad, California11 Orcad 1 Engineering Design Software Carlsbad, California12 Pspice 1 Engineering Design Software Carlsbad, California13 SPECCTRA 1 Engineering Design Software Carlsbad, California14 Pro/ENGINEER 1 Engineering Design Software Carlsbad, California15 1 Provides card key access to building Carlsbad, Cal ifornia16 Simplex fire alarms system 1 Alerts for all zones in building for fires Carlsbad, California

    Equipment type Quantity Purpose Alternate loc ation

    AVT CallServer X80 Voicemail

    Northern Computers N_1000-IIMain door Ac

    Installed System s Exposure Inventory Shee t - ISEIS01

  • 8/6/2019 Cont Oh Template

    13/40

    1 Dell PowerEdge 4600 6 ERP, MS SQL Server 2000 Carlsbad, California2 Dell PowerEdge 4300 1 MS Exchange Server Carlsbad, California

    3 Dell PowerEdge 23001

    File Services Server Carlsbad, California4 Compaq ProLiant 6000 2 Primary and Backup Domain Controller Carlsbad, California5 Dell OptiPlex Gxa 1 Tape Backup Server Carlsbad, California6 HP SureStore DDS4 Tape Drive 1 Carlsbad, California7 WatchGuard Firebox II 1 Firewall/VPN Appliance - Network Equipment Carlsbad, California8 Cisco 2601 Router 1 AT&T Internet Router- Network Equipment Carlsbad, California9 Cisco 2501 Router 1 AT&T Frame Router- Network Equipment Carlsbad, California

    10 APC Symmetra Power Array 10 Uninterruptible Power Supply Carlsbad, California11 3Com Superstack (10) 1 24-Port 10Mbps Data Hubs Carlsbad, California12 Sun Workstations 15 Carlsbad, California13 20 Administrative Workstations Carlsbad, California

    Information Tec hno log y Exposure Inventory Shee t - ITEIS01

    Equipment type Quantity Purpose Alternate loc ation

    Dell Dimension 2400 Workstations

    Tape Backup Autoloader Drive

    R&D Engineers Workstations

  • 8/6/2019 Cont Oh Template

    14/40

    1 45 Storage Carlsbad, California

    2 15 Portable handling of Tools Carlsbad, California

    3 5 Workstations Carlsbad, California4 150 Workstations Carlsbad, California5 200 Paper storage Carlsbad, California6 1 Meetings Carlsbad, California7 1 Shred paper Carlsbad, California8 3 Printing documents Carlsbad, California9 10 Sending info via fax Carlsbad, California

    10 4 Copying documents for filing Carlsbad, California

    Equipment type Quantity Purpose Alternate location

    O'Sullivan Bookc ases

    Ice be rg Snap Ease Utility ca rts

    Executive desks

    Xerox Copiers

    Oval Conference tableHeavy-Duty ShredderHP Network PrintersPanasonic Fax Machines

    Office Equipment Exposure Inventory Sheet -- OEEIS01

    Metal DesksVertical filing cabinets

  • 8/6/2019 Cont Oh Template

    15/40

    Timekeeping and payroll (ADP Payroll)

    2000 sq feet office space

    Critical

    Critical

    Business Processes Supported

    1

    Recovery

    Priority of

    Business ProcessRevenue Collection

    1Revenue Collection

    Sheet 1 of 1 Date:5/23/04

    Human Resources and Support Analysis Sheet(Form number HRSS01)

    System or Function Classification

  • 8/6/2019 Cont Oh Template

    16/40

    Revenue Collection

    Revenue Collection

    Tony Heartfield

    2000 sq fee t office spac e

    Timo thy Edw ard s

    CEO/ CTONet Sec urity/ IT

    n/ a

    Net Sec urity/ IT

    Critical Spa ce

    Business Processes Supported

    1

    Ranked

    Sec urity

    Personnel

    Revenue Collection1

    1

    Revenue Collection

    Sheet 1 of 1 Date:5/23/ 04

    Corpo rate Sec urity and Support Analysis Sheet - CSSS01

    Se curity Sta ff a nd offic e sp ac e Cla ssific a tio n

    Gregory Murphy

  • 8/6/2019 Cont Oh Template

    17/40

    Emergency Operations Center Information SheetSheet 1of 1 Date: 5/23/04

    Facility number: 1Building number: 1-1Number of employees: 200

    Facility name and locationName: Harris and Heartfield ManufacturingAddress: 1345 Business St

    Main telephone: 555-555-3492Main fax number: 555-555-6413Main e-mail: [email protected]

    Primary emergency operations center

    Facility name and locationName: Harris Storage WarehouseAddress: 206 Something St

    Main telephone: 555-555-2281

    Main telephone: 555-555-1165

    Main fax number: 555-555-1234Main e-mail: [email protected]

    Alternate emergency operations center

    Facility name and locationName: Holiday InnAddress: 850 Palomar Airport Rd

    Main telephone: 760-438-7880Main fax number: 760-438-1015Main e-mail: [email protected]

    for numerous reasons. This lar e warehouse is the ro ert of John Harris,Brandon Harris's brother. Due to the relationshi we can relocate here fornearl no cost. In addition much of the warehouse is currentl not in use

    Carlsbad, CA

    Carlsbad, CA

    Main fax number: 555-555-4569Main e-mail:[email protected]

    Contacts

    Name: Rachel BlakeAddress: 850 Palomar Airport Rd

    Carlsbad, CA

    Carlsbad, CA

    Carlsbad, CA

    Comments: We believe this will prove to be an excellent emergency center

    Main telephone: 555-555-1111Main fax number: 555-555-2212Main e-mail: [email protected]

    Contacts

    Name: John HarrisAddress: 12 Pleasant St

    are numerous conference rooms where we could meet and set up ouradministrative office.

    and therefore some of the more critical equipment can be relocated there.In addition there will also be room left over for a makeshift administrationoffice. Lastly it is very close to our building.

    Comments: This hotel was chosen to be a backup location in the event that

    John's warehouse is not available. While we do not see this as a ossiblitwe would rather be safe than sorr and have therefore set u this hotel as analternate emer enc center. While not as ex ansive as Harris Stora e there

  • 8/6/2019 Cont Oh Template

    18/40

    555-555-3492 ext 103, bfritz@harrisandhea rtfield.c om

    555-555-3492 ext 111, tmasters@harrisandhea rtfield.c om

    555-555-3000, gm urphy @secu rityspec ialists.co m

    555-555-3000, ted wa rds@secu rityspec ialists.comTimo thy Edw ard s

    Network Sec urity/ IT

    Network Sec urity/ IT

    Network Administrator 555-555-3492 ext 122, smcd owell@harrisand heartfield.c om

    Lega l Counsel

    S. VP of Manufacturing

    Scott McDowell

    Tony Heartfield

    Danny Millard

    CEO/ CTO

    COO/ CFO

    Bob Fritz

    Tom Ma sters

    Gregory Murphy

    555-555-3492 ext 101, thea rtfield@harrisandhea rtfield.c om

    555-555-3492 ext 102, dm illard@harrisand hea rtfield.c om

    Fac ility name and loc ation

    Name : Harris and Heartfield Manufa cturing

    Address: 1345 Business St

    Main telephone : 555-555-3492

    Main fax number: 555-555-6413

    Main e-mail: info@harrisand heartfield.c om

    Number of buildings: 1

    First Ale rt Informa tion SheetSheet 1 of 1 5/ 23/2004

    Fac ility numbe r: 1

    Contact InformationKey Personnel Co ntac ts

    555-555-3492 ext 100 or 555-555-1165, jha rris@harrisandhea rtfiel

    Number of employees: 200

    John Harris

    Harris and Heartfield Manufacturing Carlsbad, CA

    Chairman of the Board

  • 8/6/2019 Cont Oh Template

    19/40

    N / A

    Building # 1 Office Drawings ( Blueprints )

    Description of eve nts of the d isaster reported:

    Condit ion of Emer enc Service :

    Building # 2 Office Drawings ( Blueprints )

    Stev e Ma trix

    Hugh Burdick

    Sec urity Spec ialist

    Sec urity Sup ervisor

    Building # 2 Warehouse

    Building # 1 Office s, Pap erwork, and ITEquipm ent

    Instructions given to the proper emergency responders

    Ce ll: 555-555-4430 Home : 555-555-7693

    Ce ll: 555-555-3377 Home : 555-555-9913

    Building Supervisor

    Maintenance Level 5

    Eme rgency Response Trained Building a nd Sec urity Staff

    Rob ert Swo tia

    John Steam er

    Ce ll: 555-555-4554 Home : 555-555-2290

    Ce ll: 555-555-9977 Home : 555-555-7654

    Haz-Mat Response

    Alliance Disaster & Restoration

    San Dieg o, CA Phone: 858-459-3383

    Vista, CA Phone : 760-598-9952

    Deb ris Box

    Abe rg & Son C onstruction

    4626 Santa Fe Street

    1487 Poinsettia Ave

    10981 San Diego Mission Road

    126 Windvane Lane

    San Dieg o, CA Phone: 858-459-3383

    Ca rlsba d, CA Phone: 760-931-2197

    Ca rlsba d, CA Phone: 760-931-2197

    Ca rlsba d, CA Phone: 760-931-2197

    2560 Orion Way

    2560 Orion Way

    Police Department

    Fire Department

    Emerge ncy Response Service Contac t Information

    Status

    Contac t Personnel Contac t InformationTitle Completed Pending

    Network Ad ministrator

    Tony Heartfield

    Dan Millard

    Cell: 555-555-9876 Home: 555-555-2134

    Cell: 555-555-4536 Home: 555-555-5656

    Cell: 555-555-8785 Home: 555-555-6544

    Emergenc y Service Co ntac t Proce dure Chec klist

    John Harris Chairman o f the Board

    CEO / CTO

    COO / CFOTom M aste rs

    Stev e Ma trix

    Scott McDowell

    Cell: 555-555-4430 Home: 555-555-7693

    Cell: 555-555-5548 Home: 555-555-2597

    S. VP of Ma nufa ct uring

    Building Supervisor

    Cell: 555-555-8875 Home: 555-555-0934

  • 8/6/2019 Cont Oh Template

    20/40

    Procedures For Contacting Public Works

    Employees authorized for contacting public works:

    John Anderson Floor Manager

    Mike Johnson Engineering Manager

    Contact info for public works:City of Carlsbad Public Works

    405 Oak Avenue

    Carlsbad, CA 92008

    Telephone Number:

    (760) 434-2980

    Fax:

    (760) 720-9562

    Office Hours:

    Monday - Thursday 7:30 a.m. - 5 :30 p.m.Friday 8 a.m. - 5 p.m.

    http://www.ci.carlsbad.ca.us/cserv/3works.html

    Identification policy:

    When contacting public utilities and public works departments there will obviously be no

    need to specify building numbers as we currently only occupy our main facility. Ifhowever there is partial damage done it would be helpful to specify the administrative or

    work areas.

    Services provided by Public Works:

    Engineering: Will provide construction management and inspection services.

    General Services: Responsible for general maintenance of city buildings, fields, trees,and medians.

    Maintenance and Operations: Responsible for the maintenance and repair of city streets,and water sanitation systems. It also manages the environmental programs such as waste

    disposal, recycling and storm water protection.

    How to talk to public utility workers:

    When describing problems to public utility workers try to be as factual as possible. Many

    public workers have extensive experience in dealing with disasters and therefore a briefand to the point description of the problem will be most helpful.

    Blueprints and diagrams:

    The floor manager is currently keeping all blueprints and diagrams showing public utilityhookups and shutoffs in his safe. If he is not available during the disaster the engineering

    manager also possesses the necessary code.

  • 8/6/2019 Cont Oh Template

    21/40

    Other people to be contacted:

    The following people have extensive knowledge of the building and may be contacted asneeded.

    Juan Ortiz General contractor

    555-555-3214Bob Smith Plumbing/ Ventalation services555-555-7894

    Tom Brody Electrical555-555-7777

    John Cody IT/Network555-555-6452

  • 8/6/2019 Cont Oh Template

    22/40

    1 Dell PowerEdge 4600 ERP, MS SQL Server2 Dell PowerEdge 4300 MS Exchange Server3 Dell PowerEdge 2300 File Services Server4 Compaq ProLiant 6000 Primary and Backup Domain C5 Dell OptiPlex Gxa Tape Backup Server6 HP SureStore DDS4 Tape Drive7 WatchGuard Firebox II Firewall/VPN Appliance - Netwo8 Cisco 2601 Router AT&T Internet Router- Network9 Cisco 2501 Router AT&T Frame Router- Network E

    10 APC Symmetra Power Array Uninterruptible Power Supply11 3Com Superstack (10) 24-Port 10Mbps Data Hubs12 Sun Workstations13 Administrative Workstations 1345 Business Street Carlsbad, California

    1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California

    15

    20

    1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California

    1345 Business Street Carlsbad, California

    1

    1

    10

    1

    Tape Backup Autoloader Drive

    R&D Engineers WorkstationsDell Dimension 2400 Workstations

    61

    1

    2

    1

    1

    1

    Equipment type Quantity Purpose

    Information Systems

    Office loc ation

    Loc al Law Enforcem ent age ncie s

    Sco tt Mc Dowell Network Administrator 555-555-3492 ext 122, smc do we ll@ha rrisandhea rtfield.c om

    Bob Fritz Legal Counsel 555-555-3492 ext 103, bfritz@ha rrisan dhea rtfield.c om

    Gregory Murphy Netw ork Sec urity/ IT 555-555-3000, gmurphy@sec urityspe c ialists.com

    Timothy Edw ards Netw ork Sec urity/ IT 555-555-3000, tedwa rds@sec urityspe c ialists.com

    Name: Harris and Heartfield M anufac turing

    Address: 1345 Business St

    Main telephone : 555-555-3492

    Main fax number: 555-555-6413

    Number of buildings: 2

    Comp uter Incide nts repo rting to law enforc eme nt age nciesSheet 1 of 1 5/ 29/2004

    Facility number: 1

    Fac ility name and loc ation

    Contact InformationKey Personnel Co ntac ts

    Number of employees: 200

    Harris and Heartfield Manufacturing Carlsbad, CA

    Main e-mail: info@harrisand heartfield.c om

    Polic e Department 2560 Orion Way Carlsbad , CA Phone: 760-931-2197

    Ca rlsba d , CA Phone: 760-929-08115950 LaPlac e C ourt # 201FBI

    Type of Com puter Crime

    App lica tion- layer a ttac k(s)

    Autorooter

    Denial of Service DoSTCP SYN f loo d

    Ping of Dea th

    IP-spo ofing at ta ck(s)

    TFN an d TFN2K

    Stac heldraht

    Packet Sniffers

    Man-in-the m iddle a ttac k(s)

    Network reconnaissance

    Trojan Horse / Viruses

    Backdoors

    Passwo rd att ac k(s)

    Trust Exploita tion a tta c k(s)

    Port redirection attack(s)

    Attacks Reported Attacks NOTReported

  • 8/6/2019 Cont Oh Template

    23/40

    appropriate to contact everyone who will be affected which will most likely include adminstration, research and development, and possibly those on thework floor using computerized machines depending on the severity of the attack. When describing the outage to the user there is absolutely no need tobring up any specific details about the hack or current vulnerabilities in the system. This information should be strictly held in a need to know basis. It is

    floor.

    is a bad enough attack that the systems will be down for a prolongued period of time it is only necessary to inform the users that there is a security issuewhich is being delt with as quickly as possible, further description of the attack is both unnesecarry and discouraged. When identifying the computers thatwill be down, they can be broken into Admin which will deal with Administrations 20 windows computers and 3 servers, R&D which will deal with Researchand Developments 15 sun microsystem computers and 6 servers or finally as Floor which will deal with the computer controlled equipment on the work

    Main telephone: 555-555-2277Main fax number: 555-555-6663Main e-mail: [email protected]

    Procedure explanation: In the event of a hacking incident where end-users of our network will experience downtime, they must be notified. It will be

    Disaster recovery contactName: John JacksonAddress: 1345 Business St

    Carlsbad, CA

    Main fax number: 555-555-6413Main e-mail: [email protected]

    Facility name and locationName: Harris and Heartfield ManufacturingAddress: 1345 Business St

    Reporting hacking incidents to end-user departmentsPage 1 of 1 Date: 5/30/04

    Disaster Recovery Procedure:

    advisable that the users be told that the systems are going through some neccesary tests and maintenance and will be back up as soon as possible. If it

    Facility number: 1Building number: 1-1

    Number of Buildings: 1Number of employees: 200

    Carlsbad, CAMain telephone: 555-555-3492

  • 8/6/2019 Cont Oh Template

    24/40

    N / A

    Haz Mat service d uties include :

    Tom Ma sters

    Stev e Ma trix

    Scott McDowe ll

    Cell: 555-555-4430 Home: 555-555-7693

    COO / CFO

    Cell: 555-555-5548 Home: 555-555-2597

    S. VP of Manufacturing

    Building Sup ervisor

    Cell: 555-555-8875 Home: 555-555-0934

    Cell: 555-555-9876 Home: 555-555-2134

    Cell: 555-555-4536 Home: 555-555-5656

    Cell: 555-555-8785 Home: 555-555-6544

    Hazardous Ma terials Proce dure Chec klist

    John Harris Cha irman o f the Board

    CEO / CTO

    Hazardo us Mate rials Contac t Information

    Status

    Contac t Personnel Contac t InformationTitle Completed Pending

    Netwo rk Administrator

    Tony Heartfield

    Dan Millard

    2560 Orion Wa y

    2560 Orion Wa y

    Police Department

    Fire Depa rtment

    Vista , CA Phone: 858-586-6215

    Carlsbad, CA Phone:858-346-2900

    Ca rlsba d, CA Phone: 760-931-2197

    Ca rlsba d, CA Phone: 760-931-2197

    Eap -Environme nta l Svc .

    Foss Environmm enta l

    4626 Santa Fe Street

    101 Coppe rwood Way

    2244 s. Santa Fe Ave

    1839 Water Street

    Haz-Mat Response

    Hazco

    San Dieg o, CA Phone: 858-459-3383

    Oc ea nside , CA Phone:760-722-7655

    Building Sup ervisor

    Maintenance Level 5

    Eme rgenc y Response Trained Building a nd Sec urity Staff

    Rob ert Swo tia

    John Steam er

    Ce ll: 555-555-4554 Hom e: 555-555-2290

    Ce ll: 555-555-9977 Hom e: 555-555-7654Ce ll: 555-555-4430 Hom e: 555-555-7693

    Ce ll: 555-555-3377 Hom e: 555-555-9913

    Building # 2 Warehouse

    Building # 1 Office s, Pap erwork, and ITEquipm ent

    Instructions given to the proper emergency responders

    Conditions of Hazardous Materials removal :

    Building # 2 Office Drawings ( Blueprints )

    Stev e Ma trix

    Hugh Burdick

    Sec urity Spe c ialist

    Sec urity Sup ervisor

    Descri tion of Hazardous Materials:

    Building # 1 Office Drawings ( Blueprints )

  • 8/6/2019 Cont Oh Template

    25/40

    Procedure for dealing with art, antiques, and collectibles:

    Employees responsible for art/antiques/collectables:

    Mike Sanders Research and Development Supervisor

    Melissa Garrett Office Manager

    Contact information for contractors:

    Michelles Art and Antiques

    2645 Business RoadCarlsbad, CA

    Phone: 555-555-9911Fax: 555-555-6466

    Email: [email protected]

    Conditions upon which contractors should be contacted:

    Any time a disaster occurs in which employees need to be evacuated from the building it

    is likely our art and antiques will need to be moved as well. As a rule of thumb if thedisaster stands a chance at damaging the building, the contractor must be called.

    How to describe events:

    When describing a disaster try to be as specific and thorough as possible. Let them knowwhat the problem is and where the valuable are located in relation to the disaster.

    How to identify facilities:

    Since we have one building an identification of facilities will not be necessary. Howeverany details that can be given about the specific area of damage would be beneficial.

    Instructions to give responders about entering our facility:

    Responders should be told about any possibly dangerous machines that may have beenleft on as well as all exits from the building and a general layout. There should be

    someone from security staff to accompany them.

    Items to provide responders upon arrival:

    Upon arrival the responders should be given blue prints of the building on which

    locations of our antiques and artwork can be mapped out. The respondents should also begiven any important paperwork regarding our collection.

    Employees to provide assistance to responders:

    Michael Green Head of SecurityJacob Kole Security

    Documentation on the acquisition and value of our collection:

  • 8/6/2019 Cont Oh Template

    26/40

    All documentation is currently being kept with our office manager Melissa Garrett and

    she should be seen if such documentation is required by the responders.

    How to secure art/antiques/collectables:

    Our collection should be transferred by the responders to Harris Storage Warehouse

    where a special section has been set aside to hold our collection for as long as necessary.

  • 8/6/2019 Cont Oh Template

    27/40

    Determine priority of data processing, Restore full communications and networking capabilities. Work with departments to veri

    of a pp lica tions.Month # 6

    Complete training for 75% of employees, Restore programs and data, test integrity of programs and data. Begin restoring c

    networking capabilities.Month # 4

    Complete training for 100% of all employees. Restore partial operation to priority departmentsMonth # 5

    Deploy new e quipment, sign c ontract s, launch training p rograms, and initiate awa reness ca mp aignMonth # 2

    Finish de ploying e quipm ent, c om plete training for 50% of em ploye es, distribut e a wa reness ma terials to a ll em ploMonth # 3

    Time Fram e Expe c ted Progress

    Convene the disaster recovery team and assess damages, contact vendors, discuss options. Purchase required equipment, i

    c ontrac tors, estab lish liaisons with em ergen cy service s and law enf orce me nt, de sign training pMonth # 1

  • 8/6/2019 Cont Oh Template

    28/40

    Analysis of the value of UPSFactor Sample DataA. Times per year that power for servers is lost.B. Number of hours needed to restore server with no UPS installed

    31

    G. Number of years for ROI (F/E) 7.083333333

    3$40.00120$850.00

    C. Minimum hours per year of nonavailability (AxB)D. Labor corst to restore server per incident (Bxlabor cost for IT staff @ $40/hr)E. Cost per year (DxC)F. Cost to deploy a UPS

  • 8/6/2019 Cont Oh Template

    29/40

    Walk-through te st questions Test results ( fill in c ircle )

    Procedure audited:Harardous Materials Date the procedure was last updated: 6-4-200

    Ade uate as wri tten

    Chan es needed as indicated

    N / A

    Not testable

    Are the steps in the procedure adequate to execute it?

    Did any specific instructions not work in the proc edure? Adequa te as written

    Changes needed as indicated

    N / A

    Not testable

    Did all of the app ropriate personnel respond w hen exec uting the proced ure? Adequa te as written

    Changes needed as indicated

    N / A

    Not testableHave other procedures changed that affect the execution of this procedure? Adequa te as written

    Changes needed as indicated

    N / A

    Not testable

    Recomm ended c hanges in the proced ure: NONE

    Print walk-through tester's name: Tony Heartfie ld

    Walk-through tester's signature:

    Walk-through tester's job title: CEO/ CTO

    Phone num ber:555-555-3492 ext 101 Date:6-4-2004

  • 8/6/2019 Cont Oh Template

    30/40

    Was the procedure effective?If answered no to above was there human error?

    Yes No N/A

    Does the procedure requre several pieces of equipment to be shutdown in sequence? Yes No N/A

    If ou answered no to above, where and when did human error occur?There was absolutely no human error. Everyone did an outstanding job following procedure.

    If ou answered no, but the roblem was not because of human error what went wron ?

    Was the procedure fast enough for employees to shutdown and evacuate? Yes No N/A

    Yes No N/AYes No N/A

    If ou answered no, but the roblem was not because of human error what went wron ?The shutdown sequence went very smoothly, I believe we are more than prepared for an actual disaster.

    Was the sequence properly executed? Yes No N/A

    Shutdown Procedure Evaluation Sheet

    Type of mock disaster: Earthquake Date of mock disaster: 6-6-04

    As stated previously there were no problems.

    Did supervisors and employees respond to the shutdown alarm in a timely fashion? Yes No N/AWere the shutdowns implemented according to procedures?

  • 8/6/2019 Cont Oh Template

    31/40

    San Diego, CA 92120

    Carlsbad, CA 92008Phone: (760)-931-2145

    Mr. BuilderSheet Metal Workers International Association

    Phone 2: (202)-647-6575

    Agent JohnsonFBI San Diego Division9797 Aero Dr. San Diego, California 92123Phone: (858)-565-1255Fax: (858)-499-7991Alternate:Detective Omally

    Phone: (619)-265-0501Fax: (619) 265-0084

    Police Department of Carlsbad2560 Orion Way

    U.S. Department of State2201 C Street NW

    Phone 2: (760)-931-2115Security conditions and alerts:

    4594 Mission Gorge PlaceWashington, DC 20520Phone: (202)-647-4000

    Phone: (202)-647-4000Phone 2: (202)-647-6575Shifts in economic and social conditions:Ms. Jones

    Mr. AndersonU.S. Department of State2201 C Street NWWashington, DC 20520

    9797 Aero Dr. San Diego, California 92123Phone: (858)-565-1255Fax: (858)-499-7991General security conditions and alerts:

    FBI San Diego Division

    Sources of Information for Political and Social Conditions

    Internal terrorist threats: Specific threats against a facility, organization, or management:Agent Smith

  • 8/6/2019 Cont Oh Template

    32/40

    After implementing a disaster recovery plan to a company, there are many ways to

    maintain training for your companies staff. Many courses teach staff, the methods in

    identifying vulnerabilities and takes appropriate countermeasures to prevent and mitigate

    failure risks for an organization. It also provides the networking professional with a

    foundation in disaster recovery principles, including preparation of a disaster recovery

    plan, assessment of risks in the enterprise, development of policies, and procedures, and

    understanding of the roles and relationships of various members of an organization,

    implementation of the plan, and recovering from a disaster. All top-level decision-

    makers, long-range planners, contingency planners, risk managers, auditors, MIS

    directors, disaster recovery task force members...and anyone responsible for the safety

    and security of an organizations employees, equipment, records and facilities. Also,

    team attendance is encouraged.Assess your companys current level of emergency

    readiness.

    How You Will Benefits:

    Understand the benefits of an integrated, enterprise-wide recoveryapproach

    Develop policies and procedures for responding to specific emergencies Safeguard employees, equipment and sensitive inform

    There are numerous courses and seminars to keep everyone at your company constantly

    updated, with current disaster recovery methods.

  • 8/6/2019 Cont Oh Template

    33/40

    Neutralizing negative dynamics of local community members

    In the face of a disaster it is clear that every social group we will interact with will

    have their own fears, opinions and plans about a disaster. This is why we feel it is

    important to deal with any negative dynamics a social group may bring to the table. In

    this session we will be dealing specifically with the dynamics of local community

    members. I would like to stress the fact that this company prides itself as being part of the

    community here and we should take great care in producing a positive image among the

    other members. Below are three guideline steps to neutralizing any negative dynamics in

    the community that may occur during a disaster. We believe that if these guidelines are

    implemented correctly we can achieve both assistance with recovery efforts and

    resources from the community to speed our recovery.

    1) Act quickly and professionally at all times when following the recovery plan.While this may seem an obvious step, I cannot stress its importance enough. It is

    imperative that things be done quickly during a disaster however you must take

    care at the same time to maintain a professional demeanor. If things are not done

    quickly it is inevitable that the community will begin to look upon us unfavorably

    as we will look both lazy and unprepared, leaving us open for public criticism,

    which will only hurt our recovery. On the flip side, if we act too quickly and

    throw professionalism to the wind, we will look panicked and this feeling will be

    quickly spread throughout the community, so a balance must be found. A quick

    and professional response to the situation will not only boost confidence about our

    ability to handle the problem but may also draw support and praise from the local

    community.

    2) Be informative to the public during the disaster.When dealing with a disaster it is important to keep in mind that we are part of

    this community. This means that we must share with the rest of the community

    what is going on in terms of the disaster, its impact, and our efforts to recover. If

    things are kept from the community they will form their own opinions of what is

    being done which may not always be positive. It is also unlikely that the

    community will come to our aide if they are not informed on exactly what is

    going on and what types of help we require. By communicating all of this to the

    community and showing we are a team player, the community should in turn offer

    its services and expedite our recovery.

    3) Assure the public that things are going smoothly and plans are in place.It is very important that our public relations department takes care to assure the

    community that recovery operations are going smoothly and that we have a tested

    plan in place to deal with the problem. Without this insurance it is possible that

    the public may panic and cast a negative shadow on our efforts. If the public

  • 8/6/2019 Cont Oh Template

    34/40

    knows however that we are following a well made and rehearsed plan and that we

    were prepared and able to deal with the problem, they are far more likely to help.

  • 8/6/2019 Cont Oh Template

    35/40

    After researching the internet for information, on how communities deal with disasters long-term.

    Devastating acts, such as the terrorist attacks on the World Trade Center and the Pentagon, have

    left many concerned about the possibility of future incidents in the United States and their potential

    impact. They have raised uncertainty about what happens next, increasing stress levels.

    Nevertheless, there are things you can do to prepare for the unexpected and reduce the stress that

    you may feel now and later should another emergency arise. Taking preparatory action can

    reassure you and your children that you can exert a measure of control even in the face of such

    events. Every year, millions of Americans are affected by both human-caused and natural

    disasters, such as earthquakes, floods, hurricanes, tornados, and wildfires. Survivors face the

    danger of death or physical injury and the possible loss of their homes, possessions, and

    communities. Such stressors place survivors at risk for behavioral and emotional readjustment

    problems. Harris and Hartsfield should ask themselves three questions. What psychological

    problems might one experience as a result of surviving a disaster? What factors increase the risk

    of readjustment problems? What can survivors do to reduce the risk of negative psychological

    consequences and to best recover from disaster stress?

    Most disaster survivors only experience mild, normal stress reactions, and disaster experiences

    may even promote personal growth and strengthen relationships. However, as many as one out of

    every three disaster survivors experience some or all of the following severe stress symptoms,

    which may lead to lasting Posttraumatic Stress Disorder (PTSD), anxiety disorders, or depression.

    Treatment for PTSD typically begins with a detailed evaluation and the development of a treatment

    plan that meets the unique needs of the survivor. Generally, PTSD-specific treatment is begun only

    after the survivor has been safely removed from a crisis situation. If a survivor is still being exposed

    to trauma (such as ongoing domestic or community violence, abuse, or homelessness), is severely

    depressed or suicidal, is experiencing extreme panic or disorganized thinking, or is in need of

    drugs or alcohol detoxification, it is important to address these crisis problems as a part of the first

    phase of treatment.

    Sometimes people need extra help to deal with a traumatic event. People directly affected by this

    tragedy, young children, people who have been through other traumatic events, and people with

  • 8/6/2019 Cont Oh Template

    36/40

    emotional problems are more likely to need professional help. A person may need extra help

    coping if a month after the attack. There are all kinds of help, given by many different

    organizations. If given time communities and or businesses will bounce back from disasters,

    without major psychiatric problems.

  • 8/6/2019 Cont Oh Template

    37/40

    Backup Project

    Dear Shelley Keating,

    One part of Harris and Heartfields disaster recovery plan which I feel requires anextra amount of attention is the backup of critical computer data. At the present time thecompany has 20 desktop computers running Windows XP, 15 Sun Microsystem

    computers, 3 administrative servers and 6 design and manufacturing servers. It isimperative to have these computers back up as soon as possible after a disaster and to

    keep all information stored on them as safe as possible. The administrative computersand servers for example are filled with important human resources information, billing

    information, our large customer database, and are also the driving force behind ourwebsite and the collection of its forms from potential clients, all of which play a crucial

    role in day to day operations. The Sun Microsystem machines and the servers thatsupport them play a crucial role in all research that goes on in our facility and they

    currently house many of our trade secrets and detailed CAD drawings of our productsthat are used for production. The servers are also directly responsible for keeping almost

    half of our machinery operating and simply can not be down if business it to continue asnormal. In light of the importance of these computer systems I have come up with a

    backup plan which I believe will both speed up recovery after a disaster and keep yoursystems running at the best of their ability, all while maintaining cost effectiveness. We

    will look at the backup plan in three groupings: Hardware, Software and Offsite backup.A good place to start the backup plan is in the hardware field. I suggest that for

    optimal computer protection and ease of backup, that we employ RAID arrays in theservers, as well as backup drives and finally a UPS system. The first step we will look at

    for the backup plan is the implementation of a RAID array on each of the servers. A

    RAID array is simply a grouping of multiple hard drives that work together to act as onedrive with a single letter designation. This setup, depending on the type used, canprovide increased reliability, increased speed, or both. RAID arrays are currently

    grouped in 7 types ranging from 0 to 6, however RAID 0, 1, and 5 are the types we willbe considering for implementation. Raid 0 is a form of raid array also known as striping

    and it uses two or more hard drives in order to spread out the blocks of data to be written.It will start by writing a set amount of data to the first drive and then continue to move on

    to the remaining drives writing that same amount to each. The advantage of this methodwould be increased speed from the drives due to the fact that servers will then have to

    wait a shorter amount of time to write the data. The major disadvantage of this methodhowever is the fact that there is no type of redundancy and therefore if one drive fails we

    could lose access to all data in all disks which would prove to be catastrophic. Raid 1also uses two hard drives but instead of using them to increase speed it uses the second

    disk to provide complete redundancy. This process, which is also known as mirroringwrites the exact same data the two hard drives making a mirror image of the first drive

    which is where this type got its name. The advantage to this is quite obvious as if onedrive were to fail we would still be able to retrieve all of our data off of the second. This

    method however is also not without its downside. Due to the fact that the data must bewritten to both drives simultaneously read and write access to the data will be

  • 8/6/2019 Cont Oh Template

    38/40

    considerably slowed. The final type of RAID, known as RAID5 is the perfectcombination of the methods discussed above and is the method that I would personally

    like to see implemented. RAID 5 combines the best of both worlds by using three harddrives and striping them while at the same time backing up the data in a method known

    as parity. The parity bits are also striped across the disks and when one disk fails data

    from that disk can be recovered from the bits on the other two. Also since all data isbeing striped we will not be sacrificing disk speed. The only downfall of course wouldbe the cost of the third hard drive. It is clear to see however that this is the best option

    and justifies the jump in cost due to the fact that we can not suffer a loss of speed due tomirroring because of the large throughput needed for our CAD work, and at the same

    time could never afford to completely lose the data stored on any one of our servers. Thenext type of hardware upgrade I would like you to consider is the addition of back up

    drives to the servers as this will give another form of redundancy in our data and keep usfrom ever losing critical information. I have singled out tape drives as being the only

    method available to us due to the relatively small mount of data that can by otherremovable media such as zip disks and cd-roms. We currently have a choice of three

    types of tape drives, namely Travan, DAT, and DLT. The most modern Travan drivescurrently can hold about 10 GB, which sadly is no where near the amount of space we

    will be requiring for backup. The only positive aspect of these tapes would be their lowcost. DAT tapes use a completely digital backup process and are currently very popular

    in the backup world. They can currently hold up to 24 Gigabytes, are fairly priced andare acceptably fast due to SCSI connections. The final type of tape, which I am

    recommending for our current backup plan, is the DLT due to its absolutely massivecapacity of 200GB. In addition to its bigger size, DLT also offers faster speeds and better

    reliability. All of these positives however come at a higher price which I have taken intoconsideration. I believe that due to the critical nature of our data and the massive

    amounts of space we will need to store it, especially with the CAD applications it is thebest logical choice. The last point I will argue is our need for a UPS system. We have

    been given an excellent deal on a system and believe that it is worthwhile for manyreasons. I have included a chart showing ROI on the system in our disaster recovery

    guide but will state again here that the device will pay for itself completely within 7 yearsif we are able to maintain our low number of 3 power outages a year. While this may

    seem like a long time to wait for a return on the investment I would like to bring up oneother major point that was not taken into account in that calculation. With half of our

    machinery being controlled by the servers an hour bringing back up the server will notjust produce cost in the form of IT staff to bring it back up, but in a large amount of lost

    productivity.The next section of backup we will deal with is that of software. I have broken

    the selection down to three programs, Dantz Retrospect Professional 6.0, Nova Backup6.6, and Windows 2000 itself. Dantz Retrospect Pro, which I will now refer to as DRP, is

    a very thorough backup program filled with features. Not only will DRP backup the dataitself it will also store personalized options in order to provide a complete system

    rollback instead of just a simple reloading of data and programs. The program alsosupports all of the suggested tape drives as well as many other backup options such as cd-

    rom and DVD as well as hard drive locations. When backing up DRP also provides acomplete integrity check with will compare every bit of backed up data with the original

  • 8/6/2019 Cont Oh Template

    39/40

    to completely eliminate the chance of corrupted data. The software also offers the optionof compression which while taking more time, can cut the size of the archive by 25 to 40

    percent. The company also has a very helpful and informative website. However, whilean integrity check is indeed a good concept, it completely destroys the speed at which the

    program backs up data and reviewers have found that it can take up to an hour to backup

    just 563MB of data which is completely unacceptable for our situation giving the largefile sizes we will be working with. A cheaper alternative to DRP is Nova Backup. NovaBackup provides and even larger amount of backup devices to its support list and even

    includes its own antivirus software to scan files before it allows them to be passed forbackup which I feel to be a creative idea, it is not really necessary and will just slow

    things down since our files are already being scanned for viruses on a regular basis. Theprogram also makes a complete snapshot of the hard drive which will be very helpful if

    transferring information to a new server. The main disadvantage of this softwarehowever is its inability to backup only changed files, which is unacceptable. Due to the

    large amount of data we currently posses I feel that it would be foolhardy to waste to thetime and resources to do a complete system backup every time. The final piece of

    software and the one which I personally recommend is the backup software found withinWindows 2000 itself. The tools that are provided with Windows 2000 will also support

    our requested backup mediums while at the same time providing some major advantagesover the other software that is being considered. One of the main advantages is the

    option of five different backup options which represent different variations of full andincremental backups, giving us much broader options when considering a backup plan.

    In addition to this the tools also provide the ability to schedule our backup plan to occurat scheduled times and therefore requires less cost due to less IT staff being needed. As

    an added benefit the tape backups can be done from either the server or a workstation.Finally simple economics come into play; these tools are free and will require absolutely

    no extra spending as the others would.The last type of backup we will consider is that of offsite backup. Offsite backup

    is very important due to the fact that no matter how well thought out our other backupplans are a serious disaster that destroyed the building would also destroy our data. To

    counteract this I have narrowed down three potential off site options, Digital PointBackup, Amerivault, and lastly the storage of our tapes at our offsite safe at Harris

    Storage Warehouse. Digital point backup is a company which provides a completelyautomated backup process. DP backup will send our data in an encrypted form to their

    servers and will give us web access to view our backup history and set options.Amerivault, my personal choice offers all that DP backup does plus much more.

    Amerivault compresses the data to be backed up to reduce transmission time and sends itencrypted every night automatically with its Tier 1 connections to its off site location. In

    fact even when it arrives at Amerivault's location it remains under a strict 6 levels ofencryption which will keep even our most valuable trade secrets safe. In addition to this

    Amerivault also generates complete audits of the nightly backup procedure which can beviewed as needed. As if this wasnt enough Amerivault also takes great care in providing

    a solid storage environment by employing both UPS and diesel generators, 24 hoursecurity around the building and a state of the art fire detection and suppression system.

    Another huge benefit to Amerivault is that all data sent to them is actually mirrored attwo separate locations 300 miles apart which will put to ease the fear of any disaster

  • 8/6/2019 Cont Oh Template

    40/40

    affecting them at the same time. In addition the buildings themselves are built to carrierspecification. The final option which I will present is that of simply carrying the tapes to

    Harris Storage and depositing them there in a vault. While this would clearly be thecheapest choice I would discourage it for several reasons. First, it allows quite a bit of

    room for human error, as the tapes could be lost, misplaced, or the employee could just

    forget to take them. Also the warehouse is nowhere near as secure as the facilities atAmerivault, and is close enough in proximity to us that if the disaster was major thewarehouse could be affected as well.

    In summary, I propose that our final backup plan consist of RAID 5 arrays, DLTtape drives, a UPS system, Windows 2000 built in backup tools, and Amerivaults offsite

    storage service. I believe that this plan will protect your data through even the worst ofdisasters and will provide your company with the type of security it needs to continue the

    unparalleled service it has become known for through any unfortunate event that maycome its way.

    Sincerely,

    Timothy Edwards