Project: Business Continuity And Disaster Recovery Plan

The project should be submited in APA format.

Please see attachment 1: “Project Risk Management Plan.Pdf” and complete the project Part 2 (BIA, BCP, DRP, CIRT). Please follow the attachment 2 is the template must to follow to complete this assignment.

ISOL 533 – Information Security and Risk Management University of the Cumberlands

NOTE: BEFORE TURNING THIS IN, REMOVE THE HIGHLIGHTED TEXT.

Task 1. Complete the BIA table below and use it for the remainder of the assignment. You may want to review your Lab #07 assignment where you developed a BIA table. Information needed to create the Business Functions and Processes below are in the “Project Management Plan” scenario and the “Project Health Network Visual”. Hint: look at the processes that go from the customers and into the systems/applications in the “Project Health Network Visual”.

Business Function or Process	Business Impact Factor	Recovery Time Objective	IT Systems/Apps Infrastructure Impacts

Task 1: Business Impact Analysis – extracts from the Boiler Plate

1. Overview

This Business Impact Analysis (BIA) is developed as part of the contingency planning process for the HNetExchange Message system, HNetConnect Directory system and HNetPay Payment system. It was prepared for Health Network, Inc (Health Network).

2. System Description

3.1.1 Identify Outage Impacts and Estimated Downtime

Estimated Downtime

The table below identifies the MTD, RTO, and RPO for the organizational business processes that rely on the HNetExchange Message system, HNetConnect Directory system and HNetPay Payment system.

Mission/Business Process

For HNetExchange

MTD

RTO

RPO

Mission/Business Process

For HNetConnect

MTD

RTO

RPO

Mission/Business Process

For HNetPay

MTD

RTO

RPO

Task 2: Business Continuity Plan – extracts from the Boiler Plate

<After discussions with management, the organization implemented the following Back-up Plan: all database files are backed-up to tape at the end of the day. These tapes are then stored offsite. The HNetPay data is backed-up daily and retained for 6 months. The HNetMessage messages are backed-up daily and retained for 3 months. All other data is backed-up weekly and retained for 60 days. If the BCP is executed, the most current tapes are copied and mailed to the alternate site.

Modify the statements below to reflect this decision. FAILURE TO MODIFY THIS SECTION WILL RESULT IN DEDUCTED POINTS!!!!>

Emergency management standards

Data backup policy

Full and incremental backups preserve corporate information assets and should be performed on a regular basis for audit logs and files that are irreplaceable, have a high replacement cost, or are considered critical. Backup media should be stored in a secure, geographically separate location from the original and isolated from environmental hazards.

Department-specific data and document retention policies specify what records must be retained and for how long. All organizations are accountable for carrying out the provisions of the instruction for records in their organization.

IT follows these standards for its data backup and archiving:

Tape retention policy

Backup media is stored at locations that are secure, isolated from environmental hazards, and geographically separate from the location housing the system.

Billing tapes

· Tapes greater than three years old are destroyed every six months.

· Tapes less than three years old must be stored locally off-site.

· The system supervisor is responsible for the transition cycle of tapes.

System image tapes

· A copy of the most current image files must be made at least once per week.

· This backup must be stored offsite.

· The system supervisor is responsible for this activity.

Off-site storage procedures

· Tapes and disks, and other suitable media are stored in environmentally secure facilities.

· Tape or disk rotation occurs on a regular schedule coordinated with the storage vendor.

Access to backup databases and other data is tested annually

Task 3: Disaster Recovery Plan – extracts from the Boiler Plate

<There are 3 Systems Identified in the “Project Risk Management Plan”. For this assignment, fill out the following Appendixes for each SYSTEM. Complete all areas below that are highlighted.>

Disaster Recovery Plan for <HNetPay>

OVERVIEW

PRODUCTION SERVER

Location: Enter location

IT INFRASTRUCTURE

Provide details on what systems, applications, databases and equipment are involved.

BACKUP STRATEGY FOR SYSTEM ONE
Daily / Monthly / Quarterly	Choose which strategy on the left is use.

< For each Risk below, 1. Explain how the risk impacts the critical IT Infrastructure, 2. Explain how the Loss impacts the company, and 3. Explain the steps needed to resolve the problem>

DISASTER RECOVERY PROCEDURE

Risk #1: Loss of company data due to HNetPay hardware removed from production systems.

Provide details

Risk #2: Loss of customers due to production outages.

Provide details

Disaster Recovery Plan for <HNetConnect>

OVERVIEW

PRODUCTION SERVER

Location: Enter location

IT INFRASTRUCTURE

Provide details on what systems, applications, databases and equipment are involved.

BACKUP STRATEGY FOR SYSTEM ONE
Daily / Monthly / Quarterly	Choose which strategy on the left is use.

< For each Risk below, 1. Explain how the risk impacts the critical IT Infrastructure, 2. Explain how the Loss impacts the company, and 3. Explain the steps needed to resolve the problem>

DISASTER RECOVERY PROCEDURE

Risk #1: Loss of company data due to HNetConnect hardware removed from production systems.

Provide details

Risk #2: Loss of customers due to production outages.

Provide details