Your people, incident management, the media
In the course of developing IT – or ICT – DR plans, additional activities must be developed, documented and approved before disaster recovery provision is complete.
These include the following and must also be factored into planning that involves the use of cloud technologies for disaster recovery:
This article references the global standard for IT disaster recovery planning for end user organisations and can help develop and implement disaster recovery programmes. That standard is ISO/IEC 27031:2011, Information technology – security techniques – guidelines for information and communication technology readiness for business continuity.
As has been noted in previous articles in this series, disaster recovery provides strategies and procedures to help organisations protect their investments in IT systems and operating infrastructures. The essential mission for disaster recovery is to return IT operations to an acceptable level of performance to support mission-critical business functions, and to do this as quickly as possible following a disruptive event.
Figure 1 depicts the IT disaster recovery lifecycle, and is adapted from ISO/IEC 27031. It shows where awareness and training, incident management and media management fit into the overall disaster recovery lifecycle and framework. These three important activities will be discussed in greater detail in the course of this article.
