Upload
lolokpop
View
223
Download
0
Embed Size (px)
Citation preview
8/6/2019 Cont Oh Template
1/40
Disaster Recovery and Backup Plan
Shelley Keating
CEO Harris and Heartfield Manufacturing
8/6/2019 Cont Oh Template
2/40
Introduction:
It is important to note that disasters both large and small come often throughout
the world and while there is no way to predict when one will occur the best way to dealwith a disaster is to be prepared. In light of this my company Team Bin has prepared a
disaster recovery plan which we have tailored to fit your company. In this plan you will
find details on how to cope with all aspects of disaster recovery and preparation. It is our
goal with this guide to provide you with everything you will need to fully recover both
quickly and professionally in the event of a disaster. Inside you will find a summary of
your company, our mission statement, memos about your first meeting, sources for more
information, several inventory sheets detailing your facility and equipment, what you
would need to bring different departments back online, details on alternate locations to
relocate to, emergency contact info, details on dealing with public works and emergency
services, details on dealing with computer intrusions and hacking, specialized guidelines
for dealing with hazardous materials and your art/antique collection, an implementationschedule, ROI on a UPS system, machine shut down procedures, forms for evaluating
walkthrough tests, information for updating political and social conditions and how to
deal with any negative community dynamics during the disaster. I think that you will
find the plan to be comprehensive while at the same time being easy to follow and I look
forward to meeting with you to further discuss the plan.
Executive Summary:
As stated beforehand disasters of varying size and consequence happen often
throughout the world and therefore as Murphys Law mandates, it will happen when you
are least prepared. It is for this reason that we seek to keep your company at a high level
of awareness and preparation at all times. We understand that your company prides itself
with your excellent reputation for manufacturing high quality parts and delivering orders
on schedule and would like to make sure that this standard of excellence can be continued
in the event of a disaster. I firmly believe that the only way to continue this standard of
excellence is to have a solid, tested recovery plan. By setting up this plan now you will
be giving yourself time to test the plan and therefore will have the chance to continually
improve it before the onset of a disaster. In order to understand the importance of the
disaster recovery plan, I believe it is important to first understand just how crippling a
disaster can be. A disaster will at first of course have the ability to damage your facility
which without a plan could result in confusion and panic amongst employees that could
lead to further problems, injuries, or even death. A disasters effect will not stop at just
your facility however. A disaster that is poorly dealt with could then move on to affect
your reputation with your customers, something that you have worked hard to attain and
would have a very difficult time gaining back, resulting in loss of customers, loss of
sales, and perhaps even a drop in stock value. The wave of destruction could then
continue on to both business partners and suppliers as they take the heat from customers
8/6/2019 Cont Oh Template
3/40
and are also left with a now unneeded surplus of supplies. It is clear to see that not
preparing for a disaster could destroy a company and result in injury, death, lawsuits,
revocation of licenses, the breaking of business partnerships, and even fines. It is
imperative to us here at Team Bin to make sure nothing of the sort ever befalls Harris and
Heartfield manufacturing. It is our goal to see that when disaster strikes, you are back on
your feet in the shortest amount of time possible continuing to shine in the eyes of thepublic, and perhaps even receiving commendation and an even more positive public
image for your outstanding response to disaster. In the long run I feel that if and when
you were to encounter a disaster the cost of implementation on this hand would be paid
back several times over.
Summary of Experiences:
Overall I have had a very good experience with this class. I enjoyed how it was
able to not only present the material but also forced me to express what I learned in a
creative real world scenario. It has given me a confidence that I could in fact help a smallcompany in dealing with a disaster. I would also like to say that I believe a large part of
the classs success was your continued willingness to take suggestions from us as we
worked our way through the course. I believe in this fashion you will be able to make the
course better and better with every passing semester. As I posted on the website the only
gripe I have about the course was the huge amount of work all due right at the end. I
think that this cover page, final, and standard weekly work/quizzes are more than enough
for an already truncated week. As I stated in an email I sent to you I think that the best
way to lighten the load would be to assign the individual projects to earlier weeks and
perhaps tie them closer to the chapter you assign them with, instead of being a project
that is better done after finishing the class, but of course this is just my opinion. I think
that the weekly projects were very nicely assigned for the most part and I think I got a lotout of the reading by actually having to show you hands on what I had learned. I also
enjoyed that the quizzes were short and to the point and could be taken as many times as
you needed as Ive found that many of the quizzes in the classes Ive taken so far have
been riddled with problems and occasionally wrong answers. Lastly, the group aspect of
the class worked out ok for me and Greg but I believe this may be just because it was the
two of us and that we were both compatible. I can foresee that you may have some
resistance to the group format since most of us are doing these classes on line so that we
can fit school around work and other obligations that would prevent us from keeping to a
strict schedule. I think this would have proved quite difficult if there were more of us in
the group trying to find common times to meet. Since it was just Greg and I however we
were mostly able to just wait to find each other on line. Also, I would suggest to the classusing an instant message service to keep in touch as it has proved invaluable to Greg and
I in getting together and collaborating on the projects.
8/6/2019 Cont Oh Template
4/40
Table of Contents
Page 1: Project 1.1 Company SummaryPage 2: Project 1.2 Mission Statement
Page 3: Project 2.1 Memo Regarding First MeetingPage 4: Project 2.2 Websites for Assistance with Disaster Recovery
Page 5: Project 3.1 Facility Exposure Inventory SheetPage 6: Project 3.2 Heavy Equipment Exposure Inventory Sheet
Page 7: Project 3.2 Light Equipment Exposure Inventory SheetPage 8: Project 3.2 Installed Systems Exposure Inventory Sheet
Page 9: Project 3.2 Information Technology Exposure Inventory Sheet
Page 10: Project 3.2 Office Equipment Exposure Inventory Sheet
Page 11: Project 4.3 Human Resources and Support Analysis SheetPage 12: Project 4.4 Corporate Security and Support Analysis Sheet
Page 13: Project 5.3 Emergency Operations Center Information Sheet
Page 14: Project 5.4 First Alert Information SheetPage 15: Project 6.2 Emergency Service Contact Procedure Checklist
Page 16-17: Project 6.3 Procedures for Contacting Public WorksPage 18: Project 7.2 Computer Incidents Reporting to Law Enforcement AgenciesPage 19: Project 7.3 Reporting Hacking Incidents to End-User Departments
Page 20: Project 8.2 Hazardous Materials Procedure Checklist
Page 21-22: Project 8.3 Procedure for dealing with art, antiques, and collectibles
Page 23: Project 9.2 Implementation SchedulePage 24: Project 9.4 Analysis of the value of UPS
Page 25: Project 10.2 Procedure Walk-through SheetPage 26: Project 10.4 Shutdown Procedure Evaluation Sheet
Page 27: Project 11.4 Sources of Information for Political and Social ConditionsPage 28: Project 11.5 Ongoing Training
Page 29-30: Project 12.3 Neutralizing Negative Dynamics of Local CommunityPage 31-32: Project 12.8 Communities and Dealing with Disasters in the Long Term
Page 33-36: Individual Project Backup Project
8/6/2019 Cont Oh Template
5/40
Team BIN:
Harris and Heartfield Manufacturing
I would like to introduce you all to our new client Harris and HeartfieldManufacturing. Harris and Heartfield are a small family owned manufacturer of metal
parts and have asked for our help in devising a disaster recovery plan for their company.Harris and Heartfield, which I will hereafter refer to as H&H, was founded by the current
owners grandfathers Matthew Harris and Henry Heartfield. The current owners BrandonL. Harris and Tony Heartfield stressed to me that they were very concerned about
keeping their companys excellent reputation for manufacturing high quality parts anddelivering orders on schedule and would like to make sure that this standard of excellence
can be continued in the event of a disaster. The entire management team expressedconcern about being able to stay competitive over the next several decades and most
importantly being able to fulfill orders under any circumstances that may arise. We have
been asked to help due to the fact they do not believe the board of investors, whilebusiness savvy, will not spend the necessary money for backup costs unless we canprovide a convincing argument that the plan will provide a positive return.
The company while originally founded in 1942 for defensive contracting purposesnow only receives 60% of its revenue from defense contractors due to consolidation
within the US defense industry. The additional revenue comes from manufacturingspecialized metal parts for heavy equipment and from orders for replacement parts that
the company has manufactured from the past and for custom orders for the developmentof prototype equipment.
H&H currently has 200 employees at its single location in Carlsbad, Californiaand their equipment has been broken down as follows:
Administrative Department: 20 employees All have desktop computers
connected to the LAN.Research and Design Department: 15 engineers All use Sun Microsystems
workstations connected to the LAN.
Servers: 3 servers for administrative functions, 6 servers support design and
manufacturing.Shop Floor: Variety of machining equipment, half of which are computerized.
With all of this information in mind, I am confident that our team can come up
with a plan to satisfy their board of directors and keep H&H safe from disaster. I look
forward to working with all of you to achieve this goal.
8/6/2019 Cont Oh Template
6/40
Mission Statement
The purpose of this manual is to provide general guidelines in the event Harris and HeartfieldManufacturing must recover from a disaster.
The steps outlined in the following pages will allow Harris and Heartfield Manufacturing to:1. Rebuild should a disaster destroy your business data2. Remain operational during and after a disaster3. Provide exceptional service to employees/customers affected by the disaster.
The disaster recovery plan was first discussed, and implemented by Harris and Heartfield
Manufacturings Disaster Recovery team, Team Bin, and will be overseen by team leaderTimothy Edwards.
The guidelines of this plan are designed to reduce and control damage, and prioritize effortsneeded to return to normal business functions:
First, you must conduct an analysis of the critical data, to determine data needed to be recovered,in the event of a disaster. During this analysis you will require inputfrom all departments identifyingthe critical data for Harris and Heartfield Manufacturings survival.
Second, the backup of critical data should be inventoried, and transferred to an independentdisaster facility, other then Harris and Heartfield Manufacturings base location. This data would bemade available for Harris and Heartfield Manufacturing for maintenance, and use.
Third, take time to review the critical data, and construct a schedule to keep those programs ascurrent as possible. Also a plan should be made for a full-scale meeting between all concernedpersonnel from your organization and that of your disaster recovery vendor to focus on the futuredirection of your plan and its implementation.
Finally, plan a simulated disaster recovery test once a year. These tests should be conducted as ifa disaster actually hit your operation.
8/6/2019 Cont Oh Template
7/40
1
MemorandumTo: Department Heads of Harris And Heartfield Manufacturing
CC: Brandon L. Harris and Tony Heartfield
From: Team BIN
Date: 7/17/07Re: First Disaster Recovery Meeting
Disaster Recovery Meeting
Date: 6/18/04
Time: 10:30
Location: Central Conference Room
I would like to start by greeting you all and welcoming you to the disaster recoveryplanning process.As you all by now know your company has hired our team to provide a
disaster recovery plan in order to ensure that your company is able to maintain their excellentservice standards in the face of any unforeseen disasters. In light of this we have set up our
first meeting with you, the department heads. With this in mind I am sending out this memoto inform you all of what to expect and how to prepare for the first meeting. The first step isto assign a secondary representative from your department to the disaster recovery planning
team. You will be the primary representative for your department and be a full member ofthe team, while the alternate will be a secondary member. It is our belief that the secondary
member will greatly help with scheduling conflicts as well as improving team stability. It isimportant that this secondary representative be a manager with the same compete
understanding of the department and authority to make decisions as you do. It will beimportant that you both take the time to keep each other informed of all planning and
department issues. We have been ensured that your efforts will be both supported andrewarded by Tony Heartfield who will be your main executive contact, or what we like to
call the champion. As far as your individual department is concerned you are responsible forconducting all specific departmental research in order to help in the establishment, evaluation
and implementation of the corporate plan. While you may be concerned about actuallygetting the time and interest needed from your already busy employees, Mr. Heartfield has
set up a rewards program that will ensure a 2-5% bonus to their annual pay depending on theemployees involvement in the process. The first task to be completed at the start of the
meeting will be the creation of a skills inventory. All of you will be required to submit aform with your applicable skills to this inventory so that we can better determine which team
members have previous experience in disaster planning and who will prove most useful inthe process ahead of us. When the list is compiled it will be readily available from your
corporate website. It would be beneficial if all of you could conduct initial assessments in
your own departments as well so that we can mark appropriate employees as potentialresources to help out other departments. A complete agenda of this first meeting will be sentout 2 weeks before the meeting occurs. Thank you all for your time, we look forward to
working.
CONFIDENTIAL
8/6/2019 Cont Oh Template
8/40
5 Websites for assistance with d isaster recovery
1. http://www.livevault.com/pdf/customers/SBACaseStudy_103102.pdf
This website requires you to download a PDF file, about the US Small Business Administration.This article describes this U.S. government agency that provides financial, technical andmanagement assistance to help Americans start, run and grow their businesses..2. http://www.sbaonline.sba.gov/disaster_recov/index.html
This website also is about the Small Business Administration. It goes into further detail, regardingquestions, how to apply, state by state updates, financing, and business opportunities. The sitegives a glossary of many terms related to disaster recovery, and many others.
3. http://www.ibhs.org/business_protection/
The Institute for Business and Home Safety describes in detail, different programs for differenttypes of disasters. It has brochures, and files to download, to educate you about home andbusiness disaster recovery plans. You can also subscribe to newsletters, about the different plans.
4. https://disasterhelp.gov/portal/jhtml/index.jhtml
Disaster Help describes in detail, all the different disasters, and the plans implemented to helprestore you back to normal. The site lists different resources to find more information, as well asask question yourself. It allows you to link to different states, and their policies dealing with disaster
recovery.
5. http://epix.hazard.net/internet_sites.html
This site is actually very informative. It lists, and describes, all the emergency agencies, around theworld, and if you spoke the language, allows you to link up with that specific countries website fordisaster recovery.
8/6/2019 Cont Oh Template
9/40
Carlsbad, CA Carlsbad, CAAddress: 1345 Business St
Business processes performed at facility: The fabrication of specialized metal parts for use in defense equipment, heavy equipment, replacement parts
and rotot e e ui ment.
N/A
N/AN/A
5/23/055/23/055/23/055/23/055/23/05
N/A
5/23/045/23/045/23/045/23/04
Products or parts
Yes No N/AYes No N/AYes No N/AYes No N/AYes No N/AYes No N/AYes No N/AYes No N/A
Light equipmentInstalled systems
Information technologyOffice equipment
Next Update:
Physical facilitiesPersonnel
Heavy equipment
N/AN/A
5/23/04
Exposure inventories attached: Status
(Select one)
Last Updated:
Main fax number: 555-555-6413Main e-mail: [email protected]
Disaster recovery contactName: Tony Heartfield
Address: 25 Personal Ave
Telephone: 555-555-2265Fax number: 555-555-7982E-mail: [email protected]
Facility name and locationName: Harris and Heartfield Manufacturing
Main telephone: 555-555-3492
Facility Exposure Inventory Overview Sheet(Form number FEIOS01)
Facility number: 1 Number of buildings: 1Number of employees: 200
8/6/2019 Cont Oh Template
10/40
1 Mills 2 Machining & Boring of Parts Carlsbad, California2 8 Lathes 4 Fabric ation of Bushings & Tools Carlsbad, California3 17 Lathes (Southbe nd 17"x60") 4 Fabric ation of Bushings & Tools Carlsbad, California4 Tool Cutter/G rinder 5 Sharpe ning Ream ers, Drills, Spec ial Tooling Carlsbad, California5 Vertical CNC Mill
1Machining Parts
Carlsbad, California
6 Horizontal CNC Mill 1 Machining Parts Carlsbad, California7 EDM Mac hine 1 Cutting High Strength Steel Carlsbad, California8 6 Carbide Grinder 2 Tooling Sharpe ner Carlsbad, California9 Jig Bore 2 Prec ision Hole Boring Carlsbad, California
10 3 Ton A rbo r Press 1 Bearing, Bushings & Sleeve Installation & Remova l Carlsbad, California11 Drill Press 1 Hole Drilling Carlsbad, California12 MIG Welding Equipm ent 3 Welding Steel Carlsbad, California13 TIG Welding Equipm ent 3 Aircraft Welding Carlsbad, California14 Oxy-Ace tylene Welding Equipment 4 Brazing, Cutting & Silver Solder Carlsbad, California15 Airc rafte r Turn Tab le 1 360 Degree Rotating Table Carlsbad, California16 Glassbead Blast Cabinet 3 Cleaning for Welding Carlsbad, California17 Forklift 2 Shipping / Rec eiving / Wareho using Carlsbad, California18 Pallet Jacks 4 Shipping / Rec eiving / Wareho using Carlsbad, California19 Table Saw 2 Shipping / Rec eiving / Wareho using Carlsbad, California20 Freight Sca le 1 Shipping / Rec eiving / Wareho using Carlsbad, California21 30 & 50 Gallon Drum Grabber 1 Shipping / Rec eiving / Wareho using Carlsbad, California22 Banding Tool 3 Shipping / Rec eiving / Wareho using Carlsbad, California23 Mobile Shipping Foamer 2 Shipping / Rec eiving / Wareho using Carlsbad, California24 Autoclave 1 Composite Fabrication a nd Repair Carlsbad, California
25 Large A utoclave 1 Composite Fabrication a nd Repair Carlsbad, California
26 Dual Zone Hot Bond Table 1 Composite Curing up to 450 Degrees Carlsbad, California
27 Dual Zone Hot Bond Units1
Portable Composite Curing up to 450 Degrees Carlsbad, California28 10 X 10 Walk-in- Freezer 2 Prepreg & Adhesive Storage, 0 to-10Degrees Carlsbad, California
29 Low Tempera ture Curing Room 2 Low Temp Curing of Com posites & Paint up to 180 Degree Carlsbad, California
30 HEPA Filtered Clean Room 1 1,500 Sft Humidity Controlled Carlsbad, California
31 Digital Scales 2 Weight & Balance of Flight Controls and weighing of Resins Carlsbad, California
32 12 x 30 Curing Oven 1 All Curing of Composites & Paint up to 500 Degrees Fahrenheit Carlsbad, California
Quantity Purpose Alternate locationEquipment type
Heavy Equip me nt Exposure Inve ntory Shee t - HEEIS01
8/6/2019 Cont Oh Template
11/40
1 12 Press Brake 10 Sheetmetal Parts Fabrication Carlsbad, California2 12 Sheetmetal Shear 10 Metal Cutting Carlsbad, California3 4 Leaf Brak e 5 Sheetmetal Parts Fabrication Carlsbad, California4 4 Sheetmetal Shear 5 Metal Cutting Carlsbad, California5 2 Sheetmetal Brake 3 Sheetmetal Parts Fabrication Carlsbad, California6 Trace- A-Punch 3 Sheetm etal Parts Trac er Carlsbad, California7 5 Band Saws 5 Metal Cutting Carlsbad, California8 Throatless Shear 10 Metal Cutting Carlsbad, California9 Angle Shear 10 Metal Cutting Carlsbad, California
10 Turret Punc h 5 Metal Punching Carlsbad, California
11 3 & 6 Sheetm etal Rollers 2 Metal Contouring Carlsbad, California12 A Squeezes 5 Pneum atic Riveting Tools Carlsbad, California13 C Squeezes 5 Pneum atic Riveting Tools Carlsbad, California14 Various Drill Motors 1 Pneum atic Hole Drilling Tools Carlsbad, California15 Hand Squeezes 5 Hand Riveting Tools Carlsbad, California16 Pop Rivet Guns 10 Hand Riveting Tools Carlsbad, California17 Rivet Cutters 5 Rivet Cutting Tools Carlsbad, California18 T Head Crimp ing Tools 5 Sheetmeta l Hand Crimping Tools Carlsbad, California19 7 Angle Polishers 3 Metal Polishing Carlsbad, California20 Multi-meters 3 Wiring Test Me ters Carlsbad, California21 Rivet Shav ers 3 Rivet Hea d M illing Tool Carlsbad, California22 Torque Wrenc hes 5 Fastener Torq uing Carlsbad, California23 Grease Guns 3 Parts Lubric atio n Carlsbad, California24 Cherrymax Guns 5 Pneum atic Blind Fastener Installation Tools Carlsbad, California25 ERC Sheet Me tal Shrinker, Mo del #1447 1 Sheetmeta l forming mac hine Carlsbad, California26 Universal Specialties Expander 1 Sheetmeta l machine Carlsbad, California27 Rivnut Kits 3 Rivnut Installa tion Tools Carlsbad, California28 Safety Kleen Green Mac hine 1 Parts Cleaning Equipment Carlsbad, California29 Aircraft Com ponent Fixtures n/a For A320,727,737,757,747,DC-9,DC-10,MD80,MD90,MD11 Carlsbad, California
Equipment type Quantity Purpose Alternate location
Light Equipment Exposure Inventory Sheet - LEEIS01
8/6/2019 Cont Oh Template
12/40
1 Backup Exec 1 Backup and storage of data Carlsbad, California2 Authentication 1 Windows NT domain authenticat ion Carlsbad, Cal ifornia
3 Panasonic DBS Telephone System1
Internal telephone PBX Carlsbad, California4 ADP Payroll 1 Payroll system Carlsbad, California5 1 voicemail Carlsbad, California6 MS SQL Server 2000 1 Database for DevTrack system Carlsbad, California7 DevTrack 1 Defect and project tracking system database Carlsbad, California8 MKS Source Integrity 1 Software version control Carlsbad, California9 Perforce 1 Software version control Carlsbad, California
10 Allegro 1 Engineering Design Software Carlsbad, California11 Orcad 1 Engineering Design Software Carlsbad, California12 Pspice 1 Engineering Design Software Carlsbad, California13 SPECCTRA 1 Engineering Design Software Carlsbad, California14 Pro/ENGINEER 1 Engineering Design Software Carlsbad, California15 1 Provides card key access to building Carlsbad, Cal ifornia16 Simplex fire alarms system 1 Alerts for all zones in building for fires Carlsbad, California
Equipment type Quantity Purpose Alternate loc ation
AVT CallServer X80 Voicemail
Northern Computers N_1000-IIMain door Ac
Installed System s Exposure Inventory Shee t - ISEIS01
8/6/2019 Cont Oh Template
13/40
1 Dell PowerEdge 4600 6 ERP, MS SQL Server 2000 Carlsbad, California2 Dell PowerEdge 4300 1 MS Exchange Server Carlsbad, California
3 Dell PowerEdge 23001
File Services Server Carlsbad, California4 Compaq ProLiant 6000 2 Primary and Backup Domain Controller Carlsbad, California5 Dell OptiPlex Gxa 1 Tape Backup Server Carlsbad, California6 HP SureStore DDS4 Tape Drive 1 Carlsbad, California7 WatchGuard Firebox II 1 Firewall/VPN Appliance - Network Equipment Carlsbad, California8 Cisco 2601 Router 1 AT&T Internet Router- Network Equipment Carlsbad, California9 Cisco 2501 Router 1 AT&T Frame Router- Network Equipment Carlsbad, California
10 APC Symmetra Power Array 10 Uninterruptible Power Supply Carlsbad, California11 3Com Superstack (10) 1 24-Port 10Mbps Data Hubs Carlsbad, California12 Sun Workstations 15 Carlsbad, California13 20 Administrative Workstations Carlsbad, California
Information Tec hno log y Exposure Inventory Shee t - ITEIS01
Equipment type Quantity Purpose Alternate loc ation
Dell Dimension 2400 Workstations
Tape Backup Autoloader Drive
R&D Engineers Workstations
8/6/2019 Cont Oh Template
14/40
1 45 Storage Carlsbad, California
2 15 Portable handling of Tools Carlsbad, California
3 5 Workstations Carlsbad, California4 150 Workstations Carlsbad, California5 200 Paper storage Carlsbad, California6 1 Meetings Carlsbad, California7 1 Shred paper Carlsbad, California8 3 Printing documents Carlsbad, California9 10 Sending info via fax Carlsbad, California
10 4 Copying documents for filing Carlsbad, California
Equipment type Quantity Purpose Alternate location
O'Sullivan Bookc ases
Ice be rg Snap Ease Utility ca rts
Executive desks
Xerox Copiers
Oval Conference tableHeavy-Duty ShredderHP Network PrintersPanasonic Fax Machines
Office Equipment Exposure Inventory Sheet -- OEEIS01
Metal DesksVertical filing cabinets
8/6/2019 Cont Oh Template
15/40
Timekeeping and payroll (ADP Payroll)
2000 sq feet office space
Critical
Critical
Business Processes Supported
1
Recovery
Priority of
Business ProcessRevenue Collection
1Revenue Collection
Sheet 1 of 1 Date:5/23/04
Human Resources and Support Analysis Sheet(Form number HRSS01)
System or Function Classification
8/6/2019 Cont Oh Template
16/40
Revenue Collection
Revenue Collection
Tony Heartfield
2000 sq fee t office spac e
Timo thy Edw ard s
CEO/ CTONet Sec urity/ IT
n/ a
Net Sec urity/ IT
Critical Spa ce
Business Processes Supported
1
Ranked
Sec urity
Personnel
Revenue Collection1
1
Revenue Collection
Sheet 1 of 1 Date:5/23/ 04
Corpo rate Sec urity and Support Analysis Sheet - CSSS01
Se curity Sta ff a nd offic e sp ac e Cla ssific a tio n
Gregory Murphy
8/6/2019 Cont Oh Template
17/40
Emergency Operations Center Information SheetSheet 1of 1 Date: 5/23/04
Facility number: 1Building number: 1-1Number of employees: 200
Facility name and locationName: Harris and Heartfield ManufacturingAddress: 1345 Business St
Main telephone: 555-555-3492Main fax number: 555-555-6413Main e-mail: [email protected]
Primary emergency operations center
Facility name and locationName: Harris Storage WarehouseAddress: 206 Something St
Main telephone: 555-555-2281
Main telephone: 555-555-1165
Main fax number: 555-555-1234Main e-mail: [email protected]
Alternate emergency operations center
Facility name and locationName: Holiday InnAddress: 850 Palomar Airport Rd
Main telephone: 760-438-7880Main fax number: 760-438-1015Main e-mail: [email protected]
for numerous reasons. This lar e warehouse is the ro ert of John Harris,Brandon Harris's brother. Due to the relationshi we can relocate here fornearl no cost. In addition much of the warehouse is currentl not in use
Carlsbad, CA
Carlsbad, CA
Main fax number: 555-555-4569Main e-mail:[email protected]
Contacts
Name: Rachel BlakeAddress: 850 Palomar Airport Rd
Carlsbad, CA
Carlsbad, CA
Carlsbad, CA
Comments: We believe this will prove to be an excellent emergency center
Main telephone: 555-555-1111Main fax number: 555-555-2212Main e-mail: [email protected]
Contacts
Name: John HarrisAddress: 12 Pleasant St
are numerous conference rooms where we could meet and set up ouradministrative office.
and therefore some of the more critical equipment can be relocated there.In addition there will also be room left over for a makeshift administrationoffice. Lastly it is very close to our building.
Comments: This hotel was chosen to be a backup location in the event that
John's warehouse is not available. While we do not see this as a ossiblitwe would rather be safe than sorr and have therefore set u this hotel as analternate emer enc center. While not as ex ansive as Harris Stora e there
8/6/2019 Cont Oh Template
18/40
555-555-3492 ext 103, bfritz@harrisandhea rtfield.c om
555-555-3492 ext 111, tmasters@harrisandhea rtfield.c om
555-555-3000, gm urphy @secu rityspec ialists.co m
555-555-3000, ted wa rds@secu rityspec ialists.comTimo thy Edw ard s
Network Sec urity/ IT
Network Sec urity/ IT
Network Administrator 555-555-3492 ext 122, smcd owell@harrisand heartfield.c om
Lega l Counsel
S. VP of Manufacturing
Scott McDowell
Tony Heartfield
Danny Millard
CEO/ CTO
COO/ CFO
Bob Fritz
Tom Ma sters
Gregory Murphy
555-555-3492 ext 101, thea rtfield@harrisandhea rtfield.c om
555-555-3492 ext 102, dm illard@harrisand hea rtfield.c om
Fac ility name and loc ation
Name : Harris and Heartfield Manufa cturing
Address: 1345 Business St
Main telephone : 555-555-3492
Main fax number: 555-555-6413
Main e-mail: info@harrisand heartfield.c om
Number of buildings: 1
First Ale rt Informa tion SheetSheet 1 of 1 5/ 23/2004
Fac ility numbe r: 1
Contact InformationKey Personnel Co ntac ts
555-555-3492 ext 100 or 555-555-1165, jha rris@harrisandhea rtfiel
Number of employees: 200
John Harris
Harris and Heartfield Manufacturing Carlsbad, CA
Chairman of the Board
8/6/2019 Cont Oh Template
19/40
N / A
Building # 1 Office Drawings ( Blueprints )
Description of eve nts of the d isaster reported:
Condit ion of Emer enc Service :
Building # 2 Office Drawings ( Blueprints )
Stev e Ma trix
Hugh Burdick
Sec urity Spec ialist
Sec urity Sup ervisor
Building # 2 Warehouse
Building # 1 Office s, Pap erwork, and ITEquipm ent
Instructions given to the proper emergency responders
Ce ll: 555-555-4430 Home : 555-555-7693
Ce ll: 555-555-3377 Home : 555-555-9913
Building Supervisor
Maintenance Level 5
Eme rgency Response Trained Building a nd Sec urity Staff
Rob ert Swo tia
John Steam er
Ce ll: 555-555-4554 Home : 555-555-2290
Ce ll: 555-555-9977 Home : 555-555-7654
Haz-Mat Response
Alliance Disaster & Restoration
San Dieg o, CA Phone: 858-459-3383
Vista, CA Phone : 760-598-9952
Deb ris Box
Abe rg & Son C onstruction
4626 Santa Fe Street
1487 Poinsettia Ave
10981 San Diego Mission Road
126 Windvane Lane
San Dieg o, CA Phone: 858-459-3383
Ca rlsba d, CA Phone: 760-931-2197
Ca rlsba d, CA Phone: 760-931-2197
Ca rlsba d, CA Phone: 760-931-2197
2560 Orion Way
2560 Orion Way
Police Department
Fire Department
Emerge ncy Response Service Contac t Information
Status
Contac t Personnel Contac t InformationTitle Completed Pending
Network Ad ministrator
Tony Heartfield
Dan Millard
Cell: 555-555-9876 Home: 555-555-2134
Cell: 555-555-4536 Home: 555-555-5656
Cell: 555-555-8785 Home: 555-555-6544
Emergenc y Service Co ntac t Proce dure Chec klist
John Harris Chairman o f the Board
CEO / CTO
COO / CFOTom M aste rs
Stev e Ma trix
Scott McDowell
Cell: 555-555-4430 Home: 555-555-7693
Cell: 555-555-5548 Home: 555-555-2597
S. VP of Ma nufa ct uring
Building Supervisor
Cell: 555-555-8875 Home: 555-555-0934
8/6/2019 Cont Oh Template
20/40
Procedures For Contacting Public Works
Employees authorized for contacting public works:
John Anderson Floor Manager
Mike Johnson Engineering Manager
Contact info for public works:City of Carlsbad Public Works
405 Oak Avenue
Carlsbad, CA 92008
Telephone Number:
(760) 434-2980
Fax:
(760) 720-9562
Office Hours:
Monday - Thursday 7:30 a.m. - 5 :30 p.m.Friday 8 a.m. - 5 p.m.
http://www.ci.carlsbad.ca.us/cserv/3works.html
Identification policy:
When contacting public utilities and public works departments there will obviously be no
need to specify building numbers as we currently only occupy our main facility. Ifhowever there is partial damage done it would be helpful to specify the administrative or
work areas.
Services provided by Public Works:
Engineering: Will provide construction management and inspection services.
General Services: Responsible for general maintenance of city buildings, fields, trees,and medians.
Maintenance and Operations: Responsible for the maintenance and repair of city streets,and water sanitation systems. It also manages the environmental programs such as waste
disposal, recycling and storm water protection.
How to talk to public utility workers:
When describing problems to public utility workers try to be as factual as possible. Many
public workers have extensive experience in dealing with disasters and therefore a briefand to the point description of the problem will be most helpful.
Blueprints and diagrams:
The floor manager is currently keeping all blueprints and diagrams showing public utilityhookups and shutoffs in his safe. If he is not available during the disaster the engineering
manager also possesses the necessary code.
8/6/2019 Cont Oh Template
21/40
Other people to be contacted:
The following people have extensive knowledge of the building and may be contacted asneeded.
Juan Ortiz General contractor
555-555-3214Bob Smith Plumbing/ Ventalation services555-555-7894
Tom Brody Electrical555-555-7777
John Cody IT/Network555-555-6452
8/6/2019 Cont Oh Template
22/40
1 Dell PowerEdge 4600 ERP, MS SQL Server2 Dell PowerEdge 4300 MS Exchange Server3 Dell PowerEdge 2300 File Services Server4 Compaq ProLiant 6000 Primary and Backup Domain C5 Dell OptiPlex Gxa Tape Backup Server6 HP SureStore DDS4 Tape Drive7 WatchGuard Firebox II Firewall/VPN Appliance - Netwo8 Cisco 2601 Router AT&T Internet Router- Network9 Cisco 2501 Router AT&T Frame Router- Network E
10 APC Symmetra Power Array Uninterruptible Power Supply11 3Com Superstack (10) 24-Port 10Mbps Data Hubs12 Sun Workstations13 Administrative Workstations 1345 Business Street Carlsbad, California
1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California
15
20
1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California1345 Business Street Carlsbad, California
1345 Business Street Carlsbad, California
1
1
10
1
Tape Backup Autoloader Drive
R&D Engineers WorkstationsDell Dimension 2400 Workstations
61
1
2
1
1
1
Equipment type Quantity Purpose
Information Systems
Office loc ation
Loc al Law Enforcem ent age ncie s
Sco tt Mc Dowell Network Administrator 555-555-3492 ext 122, smc do we ll@ha rrisandhea rtfield.c om
Bob Fritz Legal Counsel 555-555-3492 ext 103, bfritz@ha rrisan dhea rtfield.c om
Gregory Murphy Netw ork Sec urity/ IT 555-555-3000, gmurphy@sec urityspe c ialists.com
Timothy Edw ards Netw ork Sec urity/ IT 555-555-3000, tedwa rds@sec urityspe c ialists.com
Name: Harris and Heartfield M anufac turing
Address: 1345 Business St
Main telephone : 555-555-3492
Main fax number: 555-555-6413
Number of buildings: 2
Comp uter Incide nts repo rting to law enforc eme nt age nciesSheet 1 of 1 5/ 29/2004
Facility number: 1
Fac ility name and loc ation
Contact InformationKey Personnel Co ntac ts
Number of employees: 200
Harris and Heartfield Manufacturing Carlsbad, CA
Main e-mail: info@harrisand heartfield.c om
Polic e Department 2560 Orion Way Carlsbad , CA Phone: 760-931-2197
Ca rlsba d , CA Phone: 760-929-08115950 LaPlac e C ourt # 201FBI
Type of Com puter Crime
App lica tion- layer a ttac k(s)
Autorooter
Denial of Service DoSTCP SYN f loo d
Ping of Dea th
IP-spo ofing at ta ck(s)
TFN an d TFN2K
Stac heldraht
Packet Sniffers
Man-in-the m iddle a ttac k(s)
Network reconnaissance
Trojan Horse / Viruses
Backdoors
Passwo rd att ac k(s)
Trust Exploita tion a tta c k(s)
Port redirection attack(s)
Attacks Reported Attacks NOTReported
8/6/2019 Cont Oh Template
23/40
appropriate to contact everyone who will be affected which will most likely include adminstration, research and development, and possibly those on thework floor using computerized machines depending on the severity of the attack. When describing the outage to the user there is absolutely no need tobring up any specific details about the hack or current vulnerabilities in the system. This information should be strictly held in a need to know basis. It is
floor.
is a bad enough attack that the systems will be down for a prolongued period of time it is only necessary to inform the users that there is a security issuewhich is being delt with as quickly as possible, further description of the attack is both unnesecarry and discouraged. When identifying the computers thatwill be down, they can be broken into Admin which will deal with Administrations 20 windows computers and 3 servers, R&D which will deal with Researchand Developments 15 sun microsystem computers and 6 servers or finally as Floor which will deal with the computer controlled equipment on the work
Main telephone: 555-555-2277Main fax number: 555-555-6663Main e-mail: [email protected]
Procedure explanation: In the event of a hacking incident where end-users of our network will experience downtime, they must be notified. It will be
Disaster recovery contactName: John JacksonAddress: 1345 Business St
Carlsbad, CA
Main fax number: 555-555-6413Main e-mail: [email protected]
Facility name and locationName: Harris and Heartfield ManufacturingAddress: 1345 Business St
Reporting hacking incidents to end-user departmentsPage 1 of 1 Date: 5/30/04
Disaster Recovery Procedure:
advisable that the users be told that the systems are going through some neccesary tests and maintenance and will be back up as soon as possible. If it
Facility number: 1Building number: 1-1
Number of Buildings: 1Number of employees: 200
Carlsbad, CAMain telephone: 555-555-3492
8/6/2019 Cont Oh Template
24/40
N / A
Haz Mat service d uties include :
Tom Ma sters
Stev e Ma trix
Scott McDowe ll
Cell: 555-555-4430 Home: 555-555-7693
COO / CFO
Cell: 555-555-5548 Home: 555-555-2597
S. VP of Manufacturing
Building Sup ervisor
Cell: 555-555-8875 Home: 555-555-0934
Cell: 555-555-9876 Home: 555-555-2134
Cell: 555-555-4536 Home: 555-555-5656
Cell: 555-555-8785 Home: 555-555-6544
Hazardous Ma terials Proce dure Chec klist
John Harris Cha irman o f the Board
CEO / CTO
Hazardo us Mate rials Contac t Information
Status
Contac t Personnel Contac t InformationTitle Completed Pending
Netwo rk Administrator
Tony Heartfield
Dan Millard
2560 Orion Wa y
2560 Orion Wa y
Police Department
Fire Depa rtment
Vista , CA Phone: 858-586-6215
Carlsbad, CA Phone:858-346-2900
Ca rlsba d, CA Phone: 760-931-2197
Ca rlsba d, CA Phone: 760-931-2197
Eap -Environme nta l Svc .
Foss Environmm enta l
4626 Santa Fe Street
101 Coppe rwood Way
2244 s. Santa Fe Ave
1839 Water Street
Haz-Mat Response
Hazco
San Dieg o, CA Phone: 858-459-3383
Oc ea nside , CA Phone:760-722-7655
Building Sup ervisor
Maintenance Level 5
Eme rgenc y Response Trained Building a nd Sec urity Staff
Rob ert Swo tia
John Steam er
Ce ll: 555-555-4554 Hom e: 555-555-2290
Ce ll: 555-555-9977 Hom e: 555-555-7654Ce ll: 555-555-4430 Hom e: 555-555-7693
Ce ll: 555-555-3377 Hom e: 555-555-9913
Building # 2 Warehouse
Building # 1 Office s, Pap erwork, and ITEquipm ent
Instructions given to the proper emergency responders
Conditions of Hazardous Materials removal :
Building # 2 Office Drawings ( Blueprints )
Stev e Ma trix
Hugh Burdick
Sec urity Spe c ialist
Sec urity Sup ervisor
Descri tion of Hazardous Materials:
Building # 1 Office Drawings ( Blueprints )
8/6/2019 Cont Oh Template
25/40
Procedure for dealing with art, antiques, and collectibles:
Employees responsible for art/antiques/collectables:
Mike Sanders Research and Development Supervisor
Melissa Garrett Office Manager
Contact information for contractors:
Michelles Art and Antiques
2645 Business RoadCarlsbad, CA
Phone: 555-555-9911Fax: 555-555-6466
Email: [email protected]
Conditions upon which contractors should be contacted:
Any time a disaster occurs in which employees need to be evacuated from the building it
is likely our art and antiques will need to be moved as well. As a rule of thumb if thedisaster stands a chance at damaging the building, the contractor must be called.
How to describe events:
When describing a disaster try to be as specific and thorough as possible. Let them knowwhat the problem is and where the valuable are located in relation to the disaster.
How to identify facilities:
Since we have one building an identification of facilities will not be necessary. Howeverany details that can be given about the specific area of damage would be beneficial.
Instructions to give responders about entering our facility:
Responders should be told about any possibly dangerous machines that may have beenleft on as well as all exits from the building and a general layout. There should be
someone from security staff to accompany them.
Items to provide responders upon arrival:
Upon arrival the responders should be given blue prints of the building on which
locations of our antiques and artwork can be mapped out. The respondents should also begiven any important paperwork regarding our collection.
Employees to provide assistance to responders:
Michael Green Head of SecurityJacob Kole Security
Documentation on the acquisition and value of our collection:
8/6/2019 Cont Oh Template
26/40
All documentation is currently being kept with our office manager Melissa Garrett and
she should be seen if such documentation is required by the responders.
How to secure art/antiques/collectables:
Our collection should be transferred by the responders to Harris Storage Warehouse
where a special section has been set aside to hold our collection for as long as necessary.
8/6/2019 Cont Oh Template
27/40
Determine priority of data processing, Restore full communications and networking capabilities. Work with departments to veri
of a pp lica tions.Month # 6
Complete training for 75% of employees, Restore programs and data, test integrity of programs and data. Begin restoring c
networking capabilities.Month # 4
Complete training for 100% of all employees. Restore partial operation to priority departmentsMonth # 5
Deploy new e quipment, sign c ontract s, launch training p rograms, and initiate awa reness ca mp aignMonth # 2
Finish de ploying e quipm ent, c om plete training for 50% of em ploye es, distribut e a wa reness ma terials to a ll em ploMonth # 3
Time Fram e Expe c ted Progress
Convene the disaster recovery team and assess damages, contact vendors, discuss options. Purchase required equipment, i
c ontrac tors, estab lish liaisons with em ergen cy service s and law enf orce me nt, de sign training pMonth # 1
8/6/2019 Cont Oh Template
28/40
Analysis of the value of UPSFactor Sample DataA. Times per year that power for servers is lost.B. Number of hours needed to restore server with no UPS installed
31
G. Number of years for ROI (F/E) 7.083333333
3$40.00120$850.00
C. Minimum hours per year of nonavailability (AxB)D. Labor corst to restore server per incident (Bxlabor cost for IT staff @ $40/hr)E. Cost per year (DxC)F. Cost to deploy a UPS
8/6/2019 Cont Oh Template
29/40
Walk-through te st questions Test results ( fill in c ircle )
Procedure audited:Harardous Materials Date the procedure was last updated: 6-4-200
Ade uate as wri tten
Chan es needed as indicated
N / A
Not testable
Are the steps in the procedure adequate to execute it?
Did any specific instructions not work in the proc edure? Adequa te as written
Changes needed as indicated
N / A
Not testable
Did all of the app ropriate personnel respond w hen exec uting the proced ure? Adequa te as written
Changes needed as indicated
N / A
Not testableHave other procedures changed that affect the execution of this procedure? Adequa te as written
Changes needed as indicated
N / A
Not testable
Recomm ended c hanges in the proced ure: NONE
Print walk-through tester's name: Tony Heartfie ld
Walk-through tester's signature:
Walk-through tester's job title: CEO/ CTO
Phone num ber:555-555-3492 ext 101 Date:6-4-2004
8/6/2019 Cont Oh Template
30/40
Was the procedure effective?If answered no to above was there human error?
Yes No N/A
Does the procedure requre several pieces of equipment to be shutdown in sequence? Yes No N/A
If ou answered no to above, where and when did human error occur?There was absolutely no human error. Everyone did an outstanding job following procedure.
If ou answered no, but the roblem was not because of human error what went wron ?
Was the procedure fast enough for employees to shutdown and evacuate? Yes No N/A
Yes No N/AYes No N/A
If ou answered no, but the roblem was not because of human error what went wron ?The shutdown sequence went very smoothly, I believe we are more than prepared for an actual disaster.
Was the sequence properly executed? Yes No N/A
Shutdown Procedure Evaluation Sheet
Type of mock disaster: Earthquake Date of mock disaster: 6-6-04
As stated previously there were no problems.
Did supervisors and employees respond to the shutdown alarm in a timely fashion? Yes No N/AWere the shutdowns implemented according to procedures?
8/6/2019 Cont Oh Template
31/40
San Diego, CA 92120
Carlsbad, CA 92008Phone: (760)-931-2145
Mr. BuilderSheet Metal Workers International Association
Phone 2: (202)-647-6575
Agent JohnsonFBI San Diego Division9797 Aero Dr. San Diego, California 92123Phone: (858)-565-1255Fax: (858)-499-7991Alternate:Detective Omally
Phone: (619)-265-0501Fax: (619) 265-0084
Police Department of Carlsbad2560 Orion Way
U.S. Department of State2201 C Street NW
Phone 2: (760)-931-2115Security conditions and alerts:
4594 Mission Gorge PlaceWashington, DC 20520Phone: (202)-647-4000
Phone: (202)-647-4000Phone 2: (202)-647-6575Shifts in economic and social conditions:Ms. Jones
Mr. AndersonU.S. Department of State2201 C Street NWWashington, DC 20520
9797 Aero Dr. San Diego, California 92123Phone: (858)-565-1255Fax: (858)-499-7991General security conditions and alerts:
FBI San Diego Division
Sources of Information for Political and Social Conditions
Internal terrorist threats: Specific threats against a facility, organization, or management:Agent Smith
8/6/2019 Cont Oh Template
32/40
After implementing a disaster recovery plan to a company, there are many ways to
maintain training for your companies staff. Many courses teach staff, the methods in
identifying vulnerabilities and takes appropriate countermeasures to prevent and mitigate
failure risks for an organization. It also provides the networking professional with a
foundation in disaster recovery principles, including preparation of a disaster recovery
plan, assessment of risks in the enterprise, development of policies, and procedures, and
understanding of the roles and relationships of various members of an organization,
implementation of the plan, and recovering from a disaster. All top-level decision-
makers, long-range planners, contingency planners, risk managers, auditors, MIS
directors, disaster recovery task force members...and anyone responsible for the safety
and security of an organizations employees, equipment, records and facilities. Also,
team attendance is encouraged.Assess your companys current level of emergency
readiness.
How You Will Benefits:
Understand the benefits of an integrated, enterprise-wide recoveryapproach
Develop policies and procedures for responding to specific emergencies Safeguard employees, equipment and sensitive inform
There are numerous courses and seminars to keep everyone at your company constantly
updated, with current disaster recovery methods.
8/6/2019 Cont Oh Template
33/40
Neutralizing negative dynamics of local community members
In the face of a disaster it is clear that every social group we will interact with will
have their own fears, opinions and plans about a disaster. This is why we feel it is
important to deal with any negative dynamics a social group may bring to the table. In
this session we will be dealing specifically with the dynamics of local community
members. I would like to stress the fact that this company prides itself as being part of the
community here and we should take great care in producing a positive image among the
other members. Below are three guideline steps to neutralizing any negative dynamics in
the community that may occur during a disaster. We believe that if these guidelines are
implemented correctly we can achieve both assistance with recovery efforts and
resources from the community to speed our recovery.
1) Act quickly and professionally at all times when following the recovery plan.While this may seem an obvious step, I cannot stress its importance enough. It is
imperative that things be done quickly during a disaster however you must take
care at the same time to maintain a professional demeanor. If things are not done
quickly it is inevitable that the community will begin to look upon us unfavorably
as we will look both lazy and unprepared, leaving us open for public criticism,
which will only hurt our recovery. On the flip side, if we act too quickly and
throw professionalism to the wind, we will look panicked and this feeling will be
quickly spread throughout the community, so a balance must be found. A quick
and professional response to the situation will not only boost confidence about our
ability to handle the problem but may also draw support and praise from the local
community.
2) Be informative to the public during the disaster.When dealing with a disaster it is important to keep in mind that we are part of
this community. This means that we must share with the rest of the community
what is going on in terms of the disaster, its impact, and our efforts to recover. If
things are kept from the community they will form their own opinions of what is
being done which may not always be positive. It is also unlikely that the
community will come to our aide if they are not informed on exactly what is
going on and what types of help we require. By communicating all of this to the
community and showing we are a team player, the community should in turn offer
its services and expedite our recovery.
3) Assure the public that things are going smoothly and plans are in place.It is very important that our public relations department takes care to assure the
community that recovery operations are going smoothly and that we have a tested
plan in place to deal with the problem. Without this insurance it is possible that
the public may panic and cast a negative shadow on our efforts. If the public
8/6/2019 Cont Oh Template
34/40
knows however that we are following a well made and rehearsed plan and that we
were prepared and able to deal with the problem, they are far more likely to help.
8/6/2019 Cont Oh Template
35/40
After researching the internet for information, on how communities deal with disasters long-term.
Devastating acts, such as the terrorist attacks on the World Trade Center and the Pentagon, have
left many concerned about the possibility of future incidents in the United States and their potential
impact. They have raised uncertainty about what happens next, increasing stress levels.
Nevertheless, there are things you can do to prepare for the unexpected and reduce the stress that
you may feel now and later should another emergency arise. Taking preparatory action can
reassure you and your children that you can exert a measure of control even in the face of such
events. Every year, millions of Americans are affected by both human-caused and natural
disasters, such as earthquakes, floods, hurricanes, tornados, and wildfires. Survivors face the
danger of death or physical injury and the possible loss of their homes, possessions, and
communities. Such stressors place survivors at risk for behavioral and emotional readjustment
problems. Harris and Hartsfield should ask themselves three questions. What psychological
problems might one experience as a result of surviving a disaster? What factors increase the risk
of readjustment problems? What can survivors do to reduce the risk of negative psychological
consequences and to best recover from disaster stress?
Most disaster survivors only experience mild, normal stress reactions, and disaster experiences
may even promote personal growth and strengthen relationships. However, as many as one out of
every three disaster survivors experience some or all of the following severe stress symptoms,
which may lead to lasting Posttraumatic Stress Disorder (PTSD), anxiety disorders, or depression.
Treatment for PTSD typically begins with a detailed evaluation and the development of a treatment
plan that meets the unique needs of the survivor. Generally, PTSD-specific treatment is begun only
after the survivor has been safely removed from a crisis situation. If a survivor is still being exposed
to trauma (such as ongoing domestic or community violence, abuse, or homelessness), is severely
depressed or suicidal, is experiencing extreme panic or disorganized thinking, or is in need of
drugs or alcohol detoxification, it is important to address these crisis problems as a part of the first
phase of treatment.
Sometimes people need extra help to deal with a traumatic event. People directly affected by this
tragedy, young children, people who have been through other traumatic events, and people with
8/6/2019 Cont Oh Template
36/40
emotional problems are more likely to need professional help. A person may need extra help
coping if a month after the attack. There are all kinds of help, given by many different
organizations. If given time communities and or businesses will bounce back from disasters,
without major psychiatric problems.
8/6/2019 Cont Oh Template
37/40
Backup Project
Dear Shelley Keating,
One part of Harris and Heartfields disaster recovery plan which I feel requires anextra amount of attention is the backup of critical computer data. At the present time thecompany has 20 desktop computers running Windows XP, 15 Sun Microsystem
computers, 3 administrative servers and 6 design and manufacturing servers. It isimperative to have these computers back up as soon as possible after a disaster and to
keep all information stored on them as safe as possible. The administrative computersand servers for example are filled with important human resources information, billing
information, our large customer database, and are also the driving force behind ourwebsite and the collection of its forms from potential clients, all of which play a crucial
role in day to day operations. The Sun Microsystem machines and the servers thatsupport them play a crucial role in all research that goes on in our facility and they
currently house many of our trade secrets and detailed CAD drawings of our productsthat are used for production. The servers are also directly responsible for keeping almost
half of our machinery operating and simply can not be down if business it to continue asnormal. In light of the importance of these computer systems I have come up with a
backup plan which I believe will both speed up recovery after a disaster and keep yoursystems running at the best of their ability, all while maintaining cost effectiveness. We
will look at the backup plan in three groupings: Hardware, Software and Offsite backup.A good place to start the backup plan is in the hardware field. I suggest that for
optimal computer protection and ease of backup, that we employ RAID arrays in theservers, as well as backup drives and finally a UPS system. The first step we will look at
for the backup plan is the implementation of a RAID array on each of the servers. A
RAID array is simply a grouping of multiple hard drives that work together to act as onedrive with a single letter designation. This setup, depending on the type used, canprovide increased reliability, increased speed, or both. RAID arrays are currently
grouped in 7 types ranging from 0 to 6, however RAID 0, 1, and 5 are the types we willbe considering for implementation. Raid 0 is a form of raid array also known as striping
and it uses two or more hard drives in order to spread out the blocks of data to be written.It will start by writing a set amount of data to the first drive and then continue to move on
to the remaining drives writing that same amount to each. The advantage of this methodwould be increased speed from the drives due to the fact that servers will then have to
wait a shorter amount of time to write the data. The major disadvantage of this methodhowever is the fact that there is no type of redundancy and therefore if one drive fails we
could lose access to all data in all disks which would prove to be catastrophic. Raid 1also uses two hard drives but instead of using them to increase speed it uses the second
disk to provide complete redundancy. This process, which is also known as mirroringwrites the exact same data the two hard drives making a mirror image of the first drive
which is where this type got its name. The advantage to this is quite obvious as if onedrive were to fail we would still be able to retrieve all of our data off of the second. This
method however is also not without its downside. Due to the fact that the data must bewritten to both drives simultaneously read and write access to the data will be
8/6/2019 Cont Oh Template
38/40
considerably slowed. The final type of RAID, known as RAID5 is the perfectcombination of the methods discussed above and is the method that I would personally
like to see implemented. RAID 5 combines the best of both worlds by using three harddrives and striping them while at the same time backing up the data in a method known
as parity. The parity bits are also striped across the disks and when one disk fails data
from that disk can be recovered from the bits on the other two. Also since all data isbeing striped we will not be sacrificing disk speed. The only downfall of course wouldbe the cost of the third hard drive. It is clear to see however that this is the best option
and justifies the jump in cost due to the fact that we can not suffer a loss of speed due tomirroring because of the large throughput needed for our CAD work, and at the same
time could never afford to completely lose the data stored on any one of our servers. Thenext type of hardware upgrade I would like you to consider is the addition of back up
drives to the servers as this will give another form of redundancy in our data and keep usfrom ever losing critical information. I have singled out tape drives as being the only
method available to us due to the relatively small mount of data that can by otherremovable media such as zip disks and cd-roms. We currently have a choice of three
types of tape drives, namely Travan, DAT, and DLT. The most modern Travan drivescurrently can hold about 10 GB, which sadly is no where near the amount of space we
will be requiring for backup. The only positive aspect of these tapes would be their lowcost. DAT tapes use a completely digital backup process and are currently very popular
in the backup world. They can currently hold up to 24 Gigabytes, are fairly priced andare acceptably fast due to SCSI connections. The final type of tape, which I am
recommending for our current backup plan, is the DLT due to its absolutely massivecapacity of 200GB. In addition to its bigger size, DLT also offers faster speeds and better
reliability. All of these positives however come at a higher price which I have taken intoconsideration. I believe that due to the critical nature of our data and the massive
amounts of space we will need to store it, especially with the CAD applications it is thebest logical choice. The last point I will argue is our need for a UPS system. We have
been given an excellent deal on a system and believe that it is worthwhile for manyreasons. I have included a chart showing ROI on the system in our disaster recovery
guide but will state again here that the device will pay for itself completely within 7 yearsif we are able to maintain our low number of 3 power outages a year. While this may
seem like a long time to wait for a return on the investment I would like to bring up oneother major point that was not taken into account in that calculation. With half of our
machinery being controlled by the servers an hour bringing back up the server will notjust produce cost in the form of IT staff to bring it back up, but in a large amount of lost
productivity.The next section of backup we will deal with is that of software. I have broken
the selection down to three programs, Dantz Retrospect Professional 6.0, Nova Backup6.6, and Windows 2000 itself. Dantz Retrospect Pro, which I will now refer to as DRP, is
a very thorough backup program filled with features. Not only will DRP backup the dataitself it will also store personalized options in order to provide a complete system
rollback instead of just a simple reloading of data and programs. The program alsosupports all of the suggested tape drives as well as many other backup options such as cd-
rom and DVD as well as hard drive locations. When backing up DRP also provides acomplete integrity check with will compare every bit of backed up data with the original
8/6/2019 Cont Oh Template
39/40
to completely eliminate the chance of corrupted data. The software also offers the optionof compression which while taking more time, can cut the size of the archive by 25 to 40
percent. The company also has a very helpful and informative website. However, whilean integrity check is indeed a good concept, it completely destroys the speed at which the
program backs up data and reviewers have found that it can take up to an hour to backup
just 563MB of data which is completely unacceptable for our situation giving the largefile sizes we will be working with. A cheaper alternative to DRP is Nova Backup. NovaBackup provides and even larger amount of backup devices to its support list and even
includes its own antivirus software to scan files before it allows them to be passed forbackup which I feel to be a creative idea, it is not really necessary and will just slow
things down since our files are already being scanned for viruses on a regular basis. Theprogram also makes a complete snapshot of the hard drive which will be very helpful if
transferring information to a new server. The main disadvantage of this softwarehowever is its inability to backup only changed files, which is unacceptable. Due to the
large amount of data we currently posses I feel that it would be foolhardy to waste to thetime and resources to do a complete system backup every time. The final piece of
software and the one which I personally recommend is the backup software found withinWindows 2000 itself. The tools that are provided with Windows 2000 will also support
our requested backup mediums while at the same time providing some major advantagesover the other software that is being considered. One of the main advantages is the
option of five different backup options which represent different variations of full andincremental backups, giving us much broader options when considering a backup plan.
In addition to this the tools also provide the ability to schedule our backup plan to occurat scheduled times and therefore requires less cost due to less IT staff being needed. As
an added benefit the tape backups can be done from either the server or a workstation.Finally simple economics come into play; these tools are free and will require absolutely
no extra spending as the others would.The last type of backup we will consider is that of offsite backup. Offsite backup
is very important due to the fact that no matter how well thought out our other backupplans are a serious disaster that destroyed the building would also destroy our data. To
counteract this I have narrowed down three potential off site options, Digital PointBackup, Amerivault, and lastly the storage of our tapes at our offsite safe at Harris
Storage Warehouse. Digital point backup is a company which provides a completelyautomated backup process. DP backup will send our data in an encrypted form to their
servers and will give us web access to view our backup history and set options.Amerivault, my personal choice offers all that DP backup does plus much more.
Amerivault compresses the data to be backed up to reduce transmission time and sends itencrypted every night automatically with its Tier 1 connections to its off site location. In
fact even when it arrives at Amerivault's location it remains under a strict 6 levels ofencryption which will keep even our most valuable trade secrets safe. In addition to this
Amerivault also generates complete audits of the nightly backup procedure which can beviewed as needed. As if this wasnt enough Amerivault also takes great care in providing
a solid storage environment by employing both UPS and diesel generators, 24 hoursecurity around the building and a state of the art fire detection and suppression system.
Another huge benefit to Amerivault is that all data sent to them is actually mirrored attwo separate locations 300 miles apart which will put to ease the fear of any disaster
8/6/2019 Cont Oh Template
40/40
affecting them at the same time. In addition the buildings themselves are built to carrierspecification. The final option which I will present is that of simply carrying the tapes to
Harris Storage and depositing them there in a vault. While this would clearly be thecheapest choice I would discourage it for several reasons. First, it allows quite a bit of
room for human error, as the tapes could be lost, misplaced, or the employee could just
forget to take them. Also the warehouse is nowhere near as secure as the facilities atAmerivault, and is close enough in proximity to us that if the disaster was major thewarehouse could be affected as well.
In summary, I propose that our final backup plan consist of RAID 5 arrays, DLTtape drives, a UPS system, Windows 2000 built in backup tools, and Amerivaults offsite
storage service. I believe that this plan will protect your data through even the worst ofdisasters and will provide your company with the type of security it needs to continue the
unparalleled service it has become known for through any unfortunate event that maycome its way.
Sincerely,
Timothy Edwards