Disaster recovery planning works with business continuity planning to make up the entire BCDR process.
How to build a disaster recovery plan
The disaster recovery plan process involves more than simply writing the document. Before writing the
DRP, a risk analysis and business impact analysis can help determine where to focus resources in the
disaster recovery process.
The BIA identifies the impacts of disruptive events and is the starting point for identifying risk within the
context of DR. It also generates the RTO and RPO. The RA identifies threats and vulnerabilities that could
disrupt the operation of systems and processes highlighted in the BIA.
The RA assesses the likelihood of a disruptive event and outlines its potential severity.
A DRP checklist should include the following steps:
establishing the range or extent of necessary treatment and activity -- the scope of recovery;
gathering relevant network infrastructure documents;
identifying the most serious threats and vulnerabilities, as well as the most critical assets;
reviewing the history of unplanned incidents and outages, as well as how they were handled;
identifying the current disaster recovery procedures and DR strategies;
identifying the incident response team;
having management review and approve the DRP;
testing the plan;
updating the plan; and
implementing a DRP or BCP audit.
Disaster recovery plans are living documents. Involving employees -- from management to entry-level --
increases the value of the plan.
Another component of the DRP is the communication plan. This strategy should detail how both internal
and external crisis communication will be handled. Internal communication includes alerts that can be
sent using email, overhead building paging systems, voice messages and text messages to mobile
devices. Examples of internal communication include instructions to evacuate the building and meet at