5 Parts to a Solid Disaster Recovery Plan

If your business was about to be destroyed by fire, and you had one minute to save one file, what would it be?

Probably not your pictures of Fluffy the cat. But maybe your payroll data or customer order list. A Disaster Recovery strategy defines which data you will save first and what will be available during planned or unplanned downtimes. It also plans for the data you can live without.

Complexity vs. Costs

When you create your Disaster Recovery plan, you’ll need to weigh the trade-offs between complexity vs. costs. What data can you afford to be without? For how long? If you lost some data, would that destroy your business forever?

Five parts of a disaster recovery plan:

1. Recovery Point Objective (RPO). RPO defines how much data you are willing to lose. You can give higher priority to your most critical data, but be willing to lose less important data, such as pictures of Fluffy. Customer records might be top of your list, while marketing data might rank lower.
2. Recovery Time Objection (RTO). RTO weighs how long you are willing to be without your data. Depending on your business, you might decide that you can lose up to two hours of business operation. A shorter time will create higher costs, so you’ll need to consider your options carefully.
3. Personnel. Who should get their data back sooner? Who will support the plan? Do you have a backup person as well as backup technology? Is your plan dependent on human intervention, which may not be possible in all cases?
4. Regulatory constraints. Is your business subject to regulatory compliance? How will you make sure you are covered?
5. Critical data. Which data is critical to your business? What are the dependencies between different areas of the business?

Test and train

Often companies will create a plan, and then leave it on the shelf. They don’t fully test the plan, or consider multiple scenarios. When a disaster hits, whether it’s cybercrime or a hurricane or a rogue sprinkler system, the plan fails. The New York Stock Exchange had a plan before Hurricane Sandy, but they didn’t follow it when disaster hit. Instead, they closed the stock exchange for two days.

Your resources and business needs will change over time. This includes your location, personnel, and data. Testing your plan two to three times a year is one way to make sure the plan is up-to-date and still supports your current business goals.

Once you have a plan in place you’ll need to train all personnel. For a higher chance of success, ensure that senior management endorses the plan and promotes training for all employees.

Get help to create a plan

iV4 can guide you through all stages of disaster recovery strategy, planning and implementation. Our Managed Backup and Recovery IT Solution reduces the complexity and controls the cost of building and maintaining an offsite infrastructure for backups and disaster recovery.