際際滷

際際滷Share a Scribd company logo
27.0 Disaster Recovery Policy
Scope
Any System that XXXXX deems essential for business operations.

Audience
Any approved User, employees, management and contractors or consultants onsite or
external.

Reason For Policy
Customers (internal and external) rely on XXXXXs systems being stable and secure :
 XXXXX (and the IT Departments) reputation is linked to this.
 Ultimately, XXXXXs business is at stake.
 And with security, various individuals reputation is at risk.

Policy Guidelines
General Guidelines

The relevant Manager shall review the situation and decide on the course of action.
IT Systems
When IT Systems are installed a Disaster Recovery (DR) Plan shall be produced and
signed-off by the Managing Director. The following steps are then carried out:
 The IT Manager will then arrange the setting up and installation of the Hot-standby
onsite and the offsite DR System.
 The DR System outsourced to a specialist supplier.
 Insure Tests are then carried out and every 12 months thereafter.
 Test Results shall be recorded and produced in an Audit Report for both internal and
external Audit.
Other Systems
That are not Business critical will depend on how they affect operations and will probably be
done out of hours in the morning or evening or at the weekend and arranged by the Facilities
Manager. These might include:
 Rest Rooms.
 Drink or Food Machines.
 Air-conditioning Systems.
 Fire exits.
 Alarms and sensor lighting.
External Conditions
These may cover the following:
 Bad weather affecting travel to and from any XXXXX site and therefore cause
Management to close the site early.
 The loss of any Local Bus or Train Service or the Company arranged transport.
 Some form of Vandalism or Terrorist attack.
Enforcement
This policy will be enforced by the IT Manager and/or executive team. Violations may
result in disciplinary action, which may include suspension, restriction of access, or
more severe penalties up to and including termination of employment. Where illegal
activities are suspected, the company may report such activities to the applicable
authorities.

Revision History
Revision X.X, 16th XXXX 2011

More Related Content

Disaster recovery policy

  • 1. 27.0 Disaster Recovery Policy Scope Any System that XXXXX deems essential for business operations. Audience Any approved User, employees, management and contractors or consultants onsite or external. Reason For Policy Customers (internal and external) rely on XXXXXs systems being stable and secure : XXXXX (and the IT Departments) reputation is linked to this. Ultimately, XXXXXs business is at stake. And with security, various individuals reputation is at risk. Policy Guidelines General Guidelines The relevant Manager shall review the situation and decide on the course of action. IT Systems When IT Systems are installed a Disaster Recovery (DR) Plan shall be produced and signed-off by the Managing Director. The following steps are then carried out: The IT Manager will then arrange the setting up and installation of the Hot-standby onsite and the offsite DR System. The DR System outsourced to a specialist supplier. Insure Tests are then carried out and every 12 months thereafter. Test Results shall be recorded and produced in an Audit Report for both internal and external Audit. Other Systems That are not Business critical will depend on how they affect operations and will probably be done out of hours in the morning or evening or at the weekend and arranged by the Facilities Manager. These might include: Rest Rooms. Drink or Food Machines. Air-conditioning Systems. Fire exits. Alarms and sensor lighting. External Conditions These may cover the following: Bad weather affecting travel to and from any XXXXX site and therefore cause Management to close the site early. The loss of any Local Bus or Train Service or the Company arranged transport. Some form of Vandalism or Terrorist attack.
  • 2. Enforcement This policy will be enforced by the IT Manager and/or executive team. Violations may result in disciplinary action, which may include suspension, restriction of access, or more severe penalties up to and including termination of employment. Where illegal activities are suspected, the company may report such activities to the applicable authorities. Revision History Revision X.X, 16th XXXX 2011