Search

Organizacije posebno srednje i male zanemaruju razviti pouzdan i izvediv plan oporavka od katastrofe. Stoga je jedna od temeljnih misija svake organizacije razvoj kvalitetnog plana oporavka od katastrofe. Uzimajući najbolje prakse u izradi plana oporavka od katastrofe uz pomoć dostupnih tehnologija osmišljava se plan oporavka od katastrofe kojem je cilj spriječiti ili svesti na najmanju moguću mjeru gubitak i prekid poslovanja. U ovom radu prikazani su prijedlozi rješenja plana oporavka od katastrofe za fiktivnu državnu ustanovu Segor, koja u sklopu svojeg poslovanja ima dva odvojena sustava te je potrebno napraviti dva prijedloga rješenja plana oporavka od katastrofe. Prvi prijedlog rješenja napravljen je za poslovni proces sustava elektroničke razmjene poreznih davanja Veron, a drugi prijedlog rješenja napravljen je za preostale poslovnih procesa Segora. U sklopu rada prikazano je i jedno od mogućih tehničkih rješenja koristeći virtualnu okolinu u VMware okruženju, kao i aplikaciju vSphere Replication. Kako bi svi prijedlozi rješenja bili prihvaćeni potrebno je napraviti scenarij aktivacije plana oporavka od katastrofe. Prikazana su tri scenarija: prvi scenarij je požar uslijed kojeg je došlo do potpunog uništenja primarne lokacije, drugi scenarij je potres koji nije prouzročio nedostupnost primarne lokacije, ali je narušena statika zgrade i nemogućnost pristupa zgradi te treći scenarij vanjska sabotaža uslijed velikog DDoS napada gdje primarna i sekundarna lokacija postaju nedostupne. Organizations, especially small and medium-sized ones, ignore to develop a reliable and feasible disaster recovery plan. Therefore, one of the fundamental missions of any organization is to develop a quality disaster recovery plan. Taking best practices in developing a disaster recovery plan and using available technologies, a disaster recovery plan is designed to prevent or minimize business losses and disruptions. This paper presents proposals for a solution to the disaster recovery plan for the fictitious state institution Segor. As Segor has two separate systems and networks within its business, it is necessary to make two proposals for a solution to the disaster recovery plan. The first solution proposal was made for the business process of the Veron electronic tax exchange system, and the second solution proposal was made for the remaining Segora business processes. The paper also presents one of the possible technical solutions using a virtual environment in a VMware environment and the vSphere Replication tool. For all proposed solutions to be accepted, it is necessary to create a scenario for activating the disaster recovery plan. Three scenarios are presented: the first scenario is a fire where the primary site was completely destroyed, the second scenario is an earthquake that did not cause the primary side to be inaccessible but disturbed building statics and inability to access the building, and the third scenario is external sabotage due to a large-scale denial of service attack (distributed denial-of-service DDoS) where the primary and secondary side become unavailable.

Disaster Recovery oder Katastrophenwiederherstellung ist die Fähigkeit von Betrieben nach Eintreten einer Katastrophe einen raschen Wiederanlauf der Produktion zu gewährleisten. Um den wirtschaftlichen, finanziellen und personellen Schaden möglichst gering zu halten, ist die Erstellung eines Disaster-Recovery-Plans für kleine und mittlere Produktionsbetriebe unerlässlich. Ziel eines solchen ist es, durch diverse Analysetechniken die potentiellen Risiken des Betriebs zu identifizieren und Strategien zur Entwicklung von proaktiven und reaktiven Gegenmaßnahmen zu implementieren. Im Rahmen dieser Arbeit werden alle Methoden, Ausführungsformen und theoretische sowie praktische Hintergründe zu einer Standard Operating Procedure, einem Notfallhandbuch, einer Business Impact Analyse, einer Failure Mode and Effects Analyse und die Recovery Time Objective Zeiten anhand eines pharmazeutischen Produktionsbetriebs beschrieben. Disaster recovery is the ability of a business to ensure a rapid resumption of production after a disaster has occurred. In order to keep the economic, financial and personnel damage as low as possible, the creation of a disaster recovery plan is essential for small and medium-sized production companies. The aim is to identify the potential risks of the operation using various analysis techniques and to implement strategies for the development of proactive and reactive countermeasures. In this thesis, all methods, implementation forms and theoretical as well as practical backgrounds for a Standard Operating Procedure, an emergency manual, a Business Impact Analysis, a Failure Mode and Effects Analysis and the Recovery Time Objective Times are described on the basis of a pharmaceutical production company.

This paper offers an overall view of applying business impact analysis (BIA) to prepare business continuity plan (BCP) for port logistics based on the joint research project to create tsunami resilient society undertaken by the academia from Chile and Japan. Authors review Chilean socio-economic circumstances and currently developed disaster responding system in the national and regional context, and identify significance and social request of maintaining the continuity of port logistics functions in association with integrated risk management of tsunami disaster. The authors place particular emphasis on the possible engagement of BIA for improving efficiency and effectiveness of port logistics BCP. The authors propose an appropriate procedure, techniques and tools for BIA implementation in this regard, and demonstrate them as a practical example of BIA implementation in the port of Iquique, Chile. Finally, are provided some recommendations and suggestions both for the development of future work, as well as the necessary development of policies

Theme of this thesis is Disaster Recovery and Business Continuity Planning. Main goal is design of Disaster Recovery plan for specific healthcare organization. One part of the design is analysis of analyzed hospital and identification of core applications and weak spots of the system. Within the analysis is risk assessment and assessment of its impact on the main applications. Based on this research the Disaster Recovery Plan is proposed. First part defines basic parts of Business Continuity Management and process of creating plans of recovery, including theoretical description of all steps necessary to implement these plans. Second part contains analysis of examined hospital with all the steps defined in previous chapters and definition of Disaster Recovery plan, which is main output of this work. Partial goal of this thesis includes proposal of implementation of Disaster Recovery plan and final assessment of analysis and its outputs

This thesis is concerned about Business Continuity Management with the focus on determination of the RTO and RPO parameters. The work is divided into two main parts. The first section briefly describes theoretical issues of Business Continuity Management in conjunction with IT Service Continuity Management. Then there are described various technologies that are currently used to ensure continuity and recovery of IT systems. In conclusion of the theoretical part, the work focuses on the process of Business Impact Analysis. This thesis thus offers a comprehensive view of main principles and benefits that these concepts have for company and how they should be integrated with each other. It provides an overview of various technologies, their link to RTO and RPO parameters and also the definition of steps of disaster recovery procedure. The work also briefly defines the basic procedure for determination of the RTO and RPO parameters, subsequent steps needed to design recovery solutions and analyzes various aspects which need to be considered when defining the parameters of continuity. The second practical part is based on the previous theoretically defined procedure and its aim is to analyze the data acquired during the questionnaire investigation in chosen company to determine the parameters of continuity for the applications in use and then suggest appropriate ways of addressing their backup and recovery. The result of this thesis is therefore a description of the analysis and practical application of methods for setting the parameters for continuity of information systems and the subsequent establishment of necessary measures.

Publisher Summary This chapter focuses on the process of business impact analysis. Risk assessment looks at the various threats the company faces, and business impact analysis looks at the critical business functions and the impact of not having those functions available to the firm. These two assessments look at the company from two different angles. The risk assessment starts from the threat side, and the business impact analysis starts from the business process side. Planning for business continuity as an outgrowth of disaster recovery makes more sense to understand the full picture regarding risks and threats and then looks at business impact. Both outputs—from the risk assessment and the business impact analysis phases—are used as input to the mitigation strategy development. The fundamental task in business impact analysis (BIA) is to understand which processes in your business are vital to your ongoing operations and to understand the impact that disruption of these processes would have on your business. Data can be gathered using questionnaires, interview, workshops, documents, and research. There are pros and cons to each approach. Since each company is unique, there is no “one size fits all” template one can use to delineate all critical business processes for all companies. The output for each process and function includes criticality assessment, financial impact analysis, operational impact analysis, recovery objectives, dependencies, and work-around procedures. When this is documented for each business function and key business process, one will have a comprehensive look at the company and a solid business impact analysis.

Properties of a computer system providing for its ability to recover from disaster are determined by its architecture and implemented technical solutions. Existing procedures of risk assessment and business impact analysis allow to assess the probability and potential results of a disaster, but do not provide direct guidelines as to the technical decisions. The paper outlines practical guidelines that close the gap between business-oriented analyses and technical design of disaster recovery facilities.

In Luxembourg, a cooperation of banks founded a company to share the costs and benefits of a disaster recovery center. The business model based on the recovery requirements of financial institutions, and the organizational and technical architectures implemented are described. The necessary documentation of business continuity plans is described by means of an example.

(2001). The Role of Business Impact Analysis and Testing in Disaster Recovery Planning by Health Maintenance Organizations. Hospital Topics: Vol. 79, No. 1, pp. 16-22.