S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

MEMAHAMI TENTANG DR DENGAN--

Mengembangkan filosofi pemulihan bencana

Jelaskan prinsip-prinsip dasar perencanaan pemulihan bencana

Jelaskan dan membangun kesinambungan bisnis dan pemulihan bencana fungsi

Memahami langkah-langkah perencanaan pemulihan bencana

Memahami peran TI dan manajemen jaringan dalam pemulihan bencana

1

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

BENCANA DAN PEMULIHAN BENCANA

Bencana pemogokan

Kehidupan sehari-hari dipenuhi dengan insiden yang dapat mengganggu bisnis

Sebuah rencana pemulihan bencana memungkinkan untuk:

Kelangsungan bisnis saat bencanaPemulihan operasi yang normal

2

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

MENGEMBANGKAN FILSAFAT DISASTER RECOVERY ?

Sebuah filosofi pemulihan bencana berakar pada: Keinginan organisasi untuk melindungi dan

melestarikan citra publik positif Aset fisik organisasi Kehidupan para karyawan organisasiGambar mencakup: Tingginya kadar kepuasan pelanggan Iman pemegang saham Pemangku kepentingan lainnya untuk sebuah

organisasi

3

S U M B E R K E P U S TA K A A N : W W W .K U R O S K I . N E T / D A 2 0 1 / D I S A S T E RR E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

ORGANIZATIONS AND DISASTERSMany organizations have suffered

through a disaster

The ones that have not are not immune

Out of 250 organizations surveyed, three of every 10 organizations surveyed for this book have been through a disaster

4Sumber dari : www.kuroski.net/DA201/disasterRecovery/Chapter%2001.ppt

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

DISASTER RECOVERY PLANNING

Proses menilai risiko bahwa organisasi menghadapi :

Mengembangkan, mendokumentasikan, menerapkan, menguji, dan memelihara prosedur

Meminimalkan kerugian setelah bencana

5

S U M B E R K E P U S TA K A A N : W W W .K U R O S K I . N E T / D A 2 0 1 / D I S A S T E RR E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STATUS OF DISASTER RECOVERY PLANNING

Nearly three of every four organizations have a disaster recovery plan in place

Disaster recovery planning is still a new process in many organizations

6

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

DISASTER RECOVERING PLANNING PROCESS

Too many people consider disaster recovery planning a mechanical process

There are certainly tedious and laborious aspects to developing a plan

Organizations have cultures, spirits, and images that permeate relationships with

The organizationCustomersBusiness partnersThe public at large

7

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

CUSTOMERS

A customer’s view of an organization is crucial to the organization’s success

Marketing managers hope customers see products as high quality and a good value

New customers are difficult and costly to gainLess costly to keep current customers satisfiedCustomer satisfaction is a prime marketing toolA good public image is an asset that takes

years to achieve and considerable diligence to maintain

8

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STOCKHOLDER AND INVESTOR RELATIONS

Maintaining investor faith is extremely important

Institutional investor confidence is importantConsiderable effort is exerted to develop the

faith and trust of investorsEfforts to maintain faith are less expensive than

those required to regain lost faithOrganizations want to be viewed in the most

positive light possibleBackup computers, emergency networks, and

temporary quarters are only tools

9

DISASTER RECOVERY PLANNING

Intensified since September 2001

Three of every 10 organizations surveyed report that their spending for disaster recovery planning has increased

One of every 10 organizations reports that spending has increased dramatically

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / D I S A S T E R R E C O V E R Y / C H A P T E R

% 2 0 0 1 . P P T 10

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

DISASTER RECOVERY PLANNING

11

PLANNING PRINCIPLES

A solid plan requires the support and participation of

Upper-level managementAll business unit managersLegal counselDirectors of all functional departments such as Human Resources, Facilities Management, IT, and Corporate security

Assessing risk requires time consuming, detailed analysis

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / D I S A S T E R R E C O V E R Y / C H

A P T E R % 2 0 0 1 . P P T12

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

PLANNING PRINCIPLES

All policies and procedures mustSupport the critical needs of business operationsComply with all relevant laws and regulationsBe understood by the parties responsible for implementing hem

Be approved by upper managementThe plan must clearly delineate and

document chain of command of the managers responsible for declaring, responding to, and recovering from a disaster

13

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

PLANNING PRINCIPLESThe disaster recovery system must facilitate

and allow control of communications among Decision makers Managers Staff External support organizations Law enforcement Emergency services Media

All policies and procedures must be available to all departments, managers, and staff during response and recovery

14

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

PLANNING PRINCIPLESAll employees involved in disaster response

and recovery must be trained to Implement documented procedures Address unanticipated problems

Procedures must be tested and rehearsedPlanners must continually evaluate new

threats and business conditions as they develop

During disaster response and recovery, the organization must

Evaluate the effectiveness of its procedures Monitor the physical safety and mental health of employees

15

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

PROCESS OF DISASTER RECOVERY PLANNING

Implementing the plan and responding to disaster is an organization-wide effort

Plan development requires many types of knowledge and skills

Every organization-wide effort is laden with social and political obstacles that need to be addressed

Each step of planning is interrelated and builds upon the others

The disaster recovery planning team is responsible for developing the plan

16

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

ESTABLISHING CONTINUITY AND RECOVERY FUNCTIONDisaster recovery function consists of

the people, departments, and support organizations that implement the plan and facilitate disaster recovery

How this function is organized depends on

The geographical dispersal of facilities within an organization

The type of facilities occupiedThe number of employeesOther factors

17

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STAFF OF AN ORGANIZATION’S DISASTER RECOVERY FUNCTIONA centralized authority or groupCoordinates the development of disaster recovery plans

Plays a role in disaster response and recoveryManagers and staff in functional

departments have enterprise-wide roles in disaster response and recovery

Department managers and representatives from business units have roles in disaster response and recovery to ensure the continued function of their business units 18

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

UNDERSTANDING THE STEPS OF DISASTER RECOVERY PLANNINGDisaster recovery planning consists of

eight major stepsSmaller organizations may be able to

develop and document a plan in a few months

In larger organizations, initial planning can take many months and sometimes years

Management and all other members of the planning team need to understand

The steps involved in developing a planHow these steps build upon each other and fit together as a whole

19

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP ONE

The first step is organizing the disaster recovery planning team

The team must be a well-rounded group that represents all the functions of an organization

Requires a high-level manager as a champion

Ideally, the champion should be the CEO or a high-level manager designated by the CEO

20

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP ONEThe team must also have a designated leader,

or two people who act as co-leadersEach participating department should assign

a primary representative and an alternate to the team for continuity

The team should be trained in disaster recovery planning

Once in place, it should establish a schedule of activities, including meeting times and dates for completing the eight steps of planning

There should be an awareness campaign about disaster recovery planning within the organization

21

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP TWOAssessing the risk that an enterprise faces is

the next stepA business impact analysis is a method of

assessing risks and determining the potential economic loss that could occur as a result of these risks

All business processes must be identified and analyzed The planning team should review legal and contractual

requirements to determine the consequences of business disruption

The results help guide disaster recovery planning and help the team develop procedures for recovering from various types of incidents

22

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

WORST DISASTERS

23

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP THREE

The third step is establishing the roles that each department, business partner, and outside service organization plays in disaster recovery

The planning team determines the contribution that each department can make to the plan and disaster recovery

Organization with multiple locations must identify local departments and employees who can participate in disaster recovery planning

The planning team also determines the role that other organizations should play in the plan

24

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP FOUR

Developing actual disaster recovery policies and procedures is the next step

Disaster recovery policies are the guidelines that govern the development of disaster recovery procedures

Disaster recovery procedures are step-by-step methods designed to restore an organizational function or business process

Developing policies and procedures to recover from disasters requires attention to detail and thorough analysis

Procedures must be established for each step of disaster recovery and response

25

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP FIVE

The fifth step of the disaster recovery plan is to document the policies and procedures developed in the previous step

Part of this documentation is done in conjunction with drafting, reviewing, and approving policies and procedures

The approved documentation is included in the actual disaster recovery plan

A group must be established to manage documentation and the cycles of reviews, approvals, and updates

The document must include all contact information

26

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP SIX

Implementing the disaster recovery plan is next

During this step The final plan is distributed to all of the departments,

organizations, and employees involved in disaster response and recovery

The planning team begins to intensify the internal and external awareness programs to ensure that all parties know about the plan

Executives are briefed on the plan and their roles in disaster response and recovery

Staff in all departments are trained on general and department specific procedures

Any outside services or equipment is purchased or contracted

27

S U M B E R K E P U S TA K A A N : W W W .K U R O S K I . N E T / D A 2 0 1 / D I S A S T E RR E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP SEVEN

The next step is to test and rehearse parts of the plan, and eventually to run a live simulation of a disaster

A disaster recovery rehearsal is a live simulation in which all departments and support organizations run through the entire disaster recovery process, just as they would during an actual disaster

Managers in eight of every 10 organizations surveyed think that testing and rehearsing disaster recovery plans is beneficial

28

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

PLAN TESTING AND REHEARSAL

29

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

STEP EIGHT

The final step is often called the maintenance phase

Once the plan is developed and tested, the planning team must continually

Assess the emergence of new threats Adjust for changes in organizational structure Determine the impact of new technology on recovery procedures

In many industries, planning teams may also need to monitor changes in laws and regulations that may affect their disaster recovery requirements

When procedures are changed and documentation is updated, training requirements and staff skills must be updated as well

30

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

FREQUENCY OF PLAN UPDATES

31

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

ROLE OF IT AND NETWORK MANAGEMENT IN DISASTER RECOVERYMost organizations rely heavily on their

computer systems and communications networks

The IT and network management in every organization have essential roles in disaster recovery planning and response

Knowledgeable representatives from IT and network management need to be assigned to the team

32

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

IT REPRESENTATION

At least one representative is needed for each of the following functions:

Data center operations Network management Desktop computing Voice communications

At least one person is needed for each major IT application, including

Financial management support Supply chain systems Enterprise resource planning (ERP) Human resources support

33

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

IT REPRESENTATION

During risk assessment and business impact analysis, IT and network managers need to

Help the team answer critical questions about the potential consequences of system downtime

Assist in developing and documenting procedures for end-user departments and the IT departments that facilitate disaster response and recovery

34

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

IT REPRESENTATION

During risk assessment and business impact analysis, IT and network managers need to

Help develop and deliver training to department managers and employees who will assist in recovery procedures for computer systems and networks

Help test and rehearse procedures to ensure that their organization can effectively recover from a disaster

35

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

IT MANAGERS ROLE

IT and network managers have a key role in supporting and managing the ongoing disaster recovery plan

Plans and procedures must be updatedIT and network managers must

determine How each new upgrade or additional application affects these plans and procedures, then

Inform the staff who maintain disaster recovery documents of the necessary changes to keep the plan current

Develop new training materials as needed

36

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

CHAPTER SUMMARYDisaster recovery planning is the process of

assessing risks that an organization faces, then developing procedures to return to normal operations quickly

No off-the-shelf disaster recovery plan can possibly meet the needs of all organizations

Understanding the basic principles of disaster recovery planning can keep team members from getting lost in the long process

37

S U M B E R K E P U S TA K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / DI S A S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

CHAPTER SUMMARYThe disaster recovery function

consists of the people, departments, and support organizations that implement the disaster recovery plan and facilitate recovery

There are eight steps in the process of developing a disaster recovery plan

Most organizations rely heavily on computer systems and communication

38