Find the attached

Running head: DISASTER RECOVERY PLAN

Disaster Recovery Plan
Name
Course
Professors Name
Institution
Date

1

DISASTER RECOVERY PLAN

13
Disaster Recovery Plan

Introduction
Non-conformities and unexpected incidences are bound to happen in any organization.
Mitigation and recovery from such occurrences entirely rely on the organization’s risk
management and preparedness strategic plans. One appropriate way by which organizations can
effectively recover from unexpected incidences is by the use of Disaster Recovery Planning.
Having a disaster recovery planning marks, the significant difference between business entities
which can effectively manage and recover from disaster with minimal effort and cost and at a
maximum speed, in such a way that the operations of the organization is not greatly affected.
Disaster Recovery planning not only involve having the necessary machinery, equipment and
network for recovery but also entails a detailed disaster recovery plan. In his book Garlapati et al.
(2016) describes a disaster recovery plan as a detailed procedural guideline that are to be
followed in the instances of occurrence of a disaster. A disaster recovery plan should therefore
precisely indicate the steps every employee in an organization should take in the case of an
emergency.
The primary purpose of a disaster recovery plan in organization is to assist in resumption
of the normal operation within a minimal time possible. It is through this strategic plan that an
organization can establish its significant networks and the effectiveness of its IT system. In
addition to this,Garlapati et al. (2016) proposes that, a disaster recovery plan should delineate the
procedures to reboot, prioritize the objectives and goals of the recovery time and the manner in
which they should be recovered. The plan must therefore contain a relevant and reliable sources
of knowledgeable personnel, suppliers and the reasonable sequence to be followed for an
effective recovery. For an organization, fundamental significance of a recovery plan is to

DISASTER RECOVERY PLAN

13

enhance information recovery when the unexpected happens that may result in loss of IT
machineries. This implies that, a disaster recovery plan must critically outline potential threats
and their courses and identify a practical solution. Additionally, it should define the procedures
for reconstruction to ensure would put the business back to its normal operations. An effective
plan must internalize and process all its significant roles at the initial operational stages. This
paper is an outline of a disaster recovery plan that will be presented to the executive board of the
organization.
Major goals of a Disaster Recovery Plan (Philips, 2015)
•

Minimization of cessation of normal operations.

•

To reduce the magnitude of damage and disruption.

•

To reduce the economic effects of the disruption.

•

To provide alternative methods of operation in prior to disaster occurrence.

•

To equip the human capital with sufficient risk management and emergency approaches.

•

To provide for effective and faster restoration of operations.
Procedures and methods in disaster recovery approach

According to Philips (29015) disaster recovery plan involves five basic steps including;
i.

Identification of the threats.

ii.

Classification of potential risks.

iii.

Assessment of potential risks.

iv.

Determination of disaster impacts.

v.

Evaluation of disaster recovery approaches/ methods.

Identification of threats

DISASTER RECOVERY PLAN

13

In most cases, non-conformities occur unexpectedly. Consequently, the initial step to be
taken when such incidences occur is identification of the root causes of threat or rather risks.
Risk identification can mainly be achieved through scrutinization and analyzation of unexpected
that jeopardize the continuity of a business operation. At this stage, business impact analysis is
used for evaluation of existent physical and environmental hardware system that prevents
unauthorized intrusion into the business premises and reports such attempts. Initialization of this
process requires a list of important business operations. With the help of this list, prioritization is
made on how the incident will be addressed, starting with the most significant aspects of
business operations to the less important ones. Relatively significant functions of the business are
prioritized in order to reduce financial losses that may result due to disruption of organizational
normal operations. In the process of risk identification, the attributes of risks must be considered.
A few of these attributes include; the scope of the risk, likelihood of recurrence, prior warning,
risk impacts, day o...