SIPRNet COOP Plan Template by 1yrySd

VIEWS: 0 PAGES: 12

									[Company] IT COOP Plan Template               Version 1.0
(date)




        INFORMATION TECHNOLOGY
           DISASTER RECOVERY
               CONTINUITY
                   OF
            OPERATIONS PLAN




                            (Comapny Name)
                                  (Address)




                     FOR OFFICIAL USE ONLY
[Company] IT COOP Plan Template                                     Version 1.0
(date)




All personnel are reminded that this document contains sensitive information, is
FOR OFFICIAL USE ONLY and is protected by the Privacy Act. It is to be used
only to company personnel in response to an emergency situation or catastrophic
natural or man-made event. Unauthorized use of this information may constitute
an invasion of privacy.




                                       i
[Company] IT COOP Plan Template                                        Version 1.0
(date)



The attached document is the (site) IT COOP Plan. This plan is intended to provide
policy and guidance to (site) staff and administrative personnel in the event of an
emergency. This document has been coordinated with appropriate (site) personnel and
changes as appropriate have been made.




Date: _______________              Reviewed by: _________________________




Date: _______________              Reviewed by: _________________________




Date: _______________              Reviewed by: _________________________




Date: _______________              Approved by: _________________________




                            For Official Use Only
                                         ii
[Company] IT COOP Plan Template                                                                        Version 1.0
(date)




                                         TABLE OF CONTENTS

1       IT COOP PLAN OVERVIEW ............................................................................. 5

1.1     Introduction and Objectives ............................................................................... 5
1.2     Assumptions and Strategy ................................................................................ 5
1.3     Management Responsibilities............................................................................ 5
2       RISK ANALYSIS AND ASSESSMENT .............................................................. 5

2.1     Analysis Scope and Assumptions ..................................................................... 5
2.2     Assets to be Considered ................................................................................... 5
2.3     Analysis Teams AND RESPONSIBILITIES ....................................................... 6
2.4     Analysis Activities.............................................................................................. 6
2.5     Assessment Activities ....................................................................................... 6
2.6     Recommendations to Management ................................................................... 6
3       IT CRISIS MANAGEMENT OVERVIEW ........................................................... 6

3.1     IT Crisis Management Team ............................................................................. 6
3.2     Crisis Notification Process ................................................................................. 6
3.3     Notification and Recall ...................................................................................... 7
3.4     Damage Assessment and Evaluation ................................................................ 7
3.5     Disaster Recovery Plan Activation .................................................................... 7
3.6     Selection and Transport of Offsite Storage Files ............................................... 7
4       RECOVERY TEAMS AND RESPONSIBILITIES ............................................... 7

4.1     Team Introduction ............................................................................................. 7
4.2     IT Crisis Management Team ............................................................................. 8
4.3     IT Emergency Operations Team ....................................................................... 8
4.4     IT Capability Initial Assessment Team............................................................... 8
4.5     IT Disaster recovery Coordinator....................................................................... 8
4.6     IT Administrative Support Team ........................................................................ 9
4.7     Backup Site Recovery Coordination Team ........................................................ 9
4.7.1   UNIX Systems Administration Recovery Team ................................................. 9
4.7.2   NT/Windows 2000 Systems Administration Recovery Team ............................. 9
4.7.3   LAN Administration Recovery Team.................................................................. 9

                                      For Official Use Only
                                                         iii
[Company] IT COOP Plan Template                                                                           Version 1.0
(date)



4.7.4   Database Recovery Team................................................................................. 9
4.7.5   Application Recovery Team .............................................................................. 9
4.8     Primary Site IT Restoration Coordination Team ................................................ 9
4.8.1   Facilities (Salvage/Disposal/Restoration) Team ................................................ 9
4.8.2   Hardware Installation Team .............................................................................. 9
4.8.3   Unix Systems Administration Restoration Team .............................................. 10
4.8.4   NT/Windows 2000 Systems Administration Restoration Team ........................ 10
4.8.5   LAN Administration Restoration Team ............................................................ 10
4.8.6   Database Restoration Team ........................................................................... 10
4.8.7   Application Restoration Team ......................................................................... 10
5       PRIMARY SITE RESTORATION OVERVIEW ................................................ 10

5.1     Primary Site Salvage, Repair, Reconstruction and Restoration ....................... 10
5.2     Transition of Operations Back to Primary Site ................................................. 10
6       IT COOP PLAN MAINTENACE AND TRAINING............................................. 10

6.1     Training ........................................................................................................... 11
6.2     IT Coop Plan Maintenance .............................................................................. 11
6.3     IT Coop Plan Exercise .................................................................................... 11
6.4     IT COOP Plan Revision and Distribution ......................................................... 11


Appendix A – Critical and Non Critical Applications/Systems




                                       For Official Use Only
                                                           iv
(Site) IT COOP Plan Template                                                     Version 1.0 (date)

                                    For Official Use Only


1 IT COOP PLAN OVERVIEW

1.1       INTRODUCTION AND OBJECTIVES
         List the overall objective of the [Company] IT COOP
         List major objectives of [Company] IT COOP


1.2       ASSUMPTIONS AND STRATEGY
         List assumptions and strategy for:
         Severity of the interruption to [Company] IT processing capability
         Three levels based on projected IT infrastructure downtime in reference to teams and
          procedures to perform the appropriate response for the three levels (High, Medium and
          Low)
         Are there full backups of all data and software and copies taken offsite and stored at a safe
          distance in a secure facility?
         Does the documentation provide guidance on the timeframe within which a disaster must
          be declared or COOP activated?



1.3       MANAGEMENT RESPONSIBILITIES
         Level of management support throughout the organization.


2 RISK ANALYSIS AND ASSESSMENT

2.1       ANALYSIS SCOPE AND ASSUMPTIONS
         Describe the Risk Analysis and Assessment process
         How often is the Risk Analysis and Assessment for the site IT function performed
         Are controls identified and implemented


2.2       ASSETS TO BE CONSIDERED
         Are all IT assets will be considered in the IT risk analysis process




                                                    5
(Site) IT COOP Plan Template                                                        Version 1.0 (date)

                                      For Official Use Only
          IT assets should include personnel, utilities, systems hardware and software,
           telecommunications hardware and software (for servers, desktops, portable computing
           devices, etc.), computer security, storage access and protection


2.3       ANALYSIS TEAMS AND RESPONSIBILITIES
          Has a Risk Analysis and Assessment (RA&A) Team been established
          Members of the team
          Responsibility of team and members


2.4       ANALYSIS ACTIVITIES
          List the IT assets that have threats, risks and controls identified


2.5       ASSESSMENT ACTIVITIES
          Include a risk/threat matrix that relates the risk to specific threats
          Show Levels of vulnerability to be identified by high or low number of risks associated with
           each threat.


2.6       RECOMMENDATIONS TO MANAGEMENT
          Process for the RA&A to present management of the results and recommendations


3 IT CRISIS MANAGEMENT OVERVIEW

3.1       IT CRISIS MANAGEMENT TEAM
          Identify members of the IT Crisis Management Team (CMT)
          Authority of the IT CMT
          Responsibility of the IT CMT
          Identify and IT Control Center and possible locations depending upon type of disaster.


3.2       CRISIS NOTIFICATION PROCESS
          Describe process for notifications of disasters or emergency situations that affect the site
           (in part or all of it)




                                                       6
(Site) IT COOP Plan Template                                                     Version 1.0 (date)

                                    For Official Use Only
3.3       NOTIFICATION AND RECALL
         Notification process during business hours
         Notification process during non-business hours
         List public radio/TV stations that should be monitored


3.4       DAMAGE ASSESSMENT AND EVALUATION
         Describe the role of the IT Capability Initial Assessment Team once a disaster has been
          declared


3.5       DISASTER RECOVERY PLAN ACTIVATION
         Process for DR plan activation


3.6       SELECTION AND TRANSPORT OF OFFSITE STORAGE FILES
         Process to have the backup tapes and other vital data stored at the offsite storage facility
          transported to the alternate processing facility


4 RECOVERY TEAMS AND RESPONSIBILITIES
4.1       TEAM INTRODUCTION
         Define the teams involved in the site IT recovery effort
         Associated responsibilities of each team.
         listing of all phone numbers of the team members
         Teams and positions to be defined for the recovery of the IT infrastructure Use all that are
          applicable):
          IT Crisis Management Team
                  IT Emergency Operations Team
                           IT Capability Initial Assessment Team:
                           IT Disaster Recovery Coordinator
                           IT Administrative Support Team
                           Recovery Teams:
                                  Backup Site Recovery Coordination Team
                                  UNIX Systems Administration Recovery Team
                                   NT/Windows 2000 Systems Administration




                                                    7
(Site) IT COOP Plan Template                                                  Version 1.0 (date)

                                   For Official Use Only
                                    Recovery Team
                                   LAN Administration Recovery Team
                                   Database Recovery Team(s)
                                   Application Recovery Team(s)
                          Restoration Teams:
                                   Primary Site IT Restoration Coordination Team
                                   Facilities (Salvage/Disposal/Restoration) Team
                                   Hardware Installation Team
                                   UNIX Systems Administration Restoration Team
                                   NT/Windows 2000 Systems Administration
                                    Restoration Team
                                   LAN Administration Restoration Team
                                   Database Restoration Team(s)
                                   Application Restoration Team(s)
4.2       IT CRISIS MANAGEMENT TEAM
         Position Team Leader and members/roles
         Response to a Disaster Incident.
         Disaster Recovery Operations


4.3       IT EMERGENCY OPERATIONS TEAM
         Position team leader and members/roles
         Response to a disaster incident.
         Disaster recovery operations


4.4       IT CAPABILITY INITIAL ASSESSMENT TEAM
         Position team leader and members/roles
         Response to a disaster incident.


4.5       IT DISASTER RECOVERY COORDINATOR
         List the Disaster Recovery Coordinator responsibilities




                                                   8
(Site) IT COOP Plan Template                                    Version 1.0 (date)

                                        For Official Use Only
4.6       IT ADMINISTRATIVE SUPPORT TEAM
          List team responsibilities


4.7       BACKUP SITE RECOVERY COORDINATION TEAM
          Position team leader and members/roles
          Response to a disaster incident.
          Disaster recovery operations


4.7.1 UNIX Systems Administration Recovery Team
          List team responsibilities


4.7.2 NT/Windows 2000 Systems Administration Recovery Team
          List team responsibilities


4.7.3 LAN Administration Recovery Team
          List team responsibilities


4.7.4 Database Recovery Team
          List team responsibilities


4.7.5 Application Recovery Team
          List team responsibilities


4.8       PRIMARY SITE IT RESTORATION COORDINATION TEAM
          List team responsibilities


4.8.1 Facilities (Salvage/Disposal/Restoration) Team
          List team responsibilities


4.8.2 Hardware Installation Team
          List team responsibilities




                                                    9
(Site) IT COOP Plan Template                                                        Version 1.0 (date)

                                        For Official Use Only

4.8.3 Unix Systems Administration Restoration Team
          List team responsibilities


4.8.4 NT/Windows 2000 Systems Administration Restoration Team
          List team responsibilities


4.8.5 LAN Administration Restoration Team
          List team responsibilities


4.8.6 Database Restoration Team
          List team responsibilities


4.8.7      Application Restoration Team
          List team responsibilities




5 PRIMARY SITE RESTORATION OVERVIEW

5.1       PRIMARY SITE SALVAGE, REPAIR, RECONSTRUCTION AND
          RESTORATION
          Describe the process for restoring the primary site to normal operations
          Describe the team roles


5.2       TRANSITION OF OPERATIONS BACK TO PRIMARY SITE
          Describe overall plans/responsibilities for the transition back to the primary site
          Plans to validate both the new hw/sw configuration and the restore procedures
          Plans for final testing and backups to be taken
          After action reports from all teams

6 IT COOP PLAN MAINTENACE AND TRAINING




                                                     10
(Site) IT COOP Plan Template                                                    Version 1.0 (date)

                                    For Official Use Only
6.1       TRAINING
          Plans for conducting IT COOP Plan awareness and how often
          Who will be trained
          Type of exercises and simulation recovery exercises used to train recovery team
           members.
6.2       IT COOP PLAN MAINTENANCE
          Process for maintaining the IT COOP Plan document
          Who will conduct the annual review of the IT COOP Plan


6.3       IT COOP PLAN EXERCISE
          Process for exercise of the IT COOP Plan
          Scheduled times for exercising the IT COOP Plan
          Types of exercises to be done, where they will be done, and who will be involved in the
           exercises


6.4       IT COOP PLAN REVISION
                  Process for updating the IT COOP Plan




                                                   11

								
To top