Disaster Recovery Plan - Business Continuity Plan Template

ISO 27000 ( formerly ISO 17799 ) - Sarbanes-Oxley - HIPAA - PCI-DSS Compliant

OrderDownload Table of ContentsLessons Learned

DRP BCP Audit Program

This Disaster Recovery Plan (DRP) can be used as a Disaster Planning template for any enterprise. The Disaster Recovery template and supporting material have been updated to be Sarbanes-Oxley and HIPAA compliant.  The Disaster Planning Template comes as a Word document and includes:

  • Disaster Recovery Plan and Business Continuity Template
  • Business and IT Impact Analysis Questionnaire
  • Work Plan
  • Disaster Planning Audit Program
  • Incident (Media) Communication Plan/Policy

Features include:

  • Disaster Recovery PlanningCompliance with ISO 27000 ( ISO 27001, ISO 27002, and ISO 27031), Sarbanes-Oxley and HIPAA standards
  • Web Site Disaster Recovery Planning Form
  • Department Disaster Recovery Activation Workbook
    • Quick Reference Guide
    • Team Alert List (Form)
    • DRP Team Responsibilities
    • DRP Team Checklist
    • Critical Function(s) Definition
    • Normal Business Hour Response Procedures
    • After Hours Response Procedures
    • DRP Location(s) Definition
    • DRP Recovery Procedures
    • Notification Procedures
    • Notification Call List (Form)
  • Updated Business and IT Impact Analysis Questionnaire
  • Vendor Disaster Recovery Questionnaire
  • Vendor Phone List Form Updated
  • Key Customer Notification Form
  • Critical Resources to be Retrieved Form
  • Business Continuity Off-Site Materials Form
The premium edition contains full multi-page job descriptions for:
  • Chief Information Officer
  • Chief Security Officer
  • Chief Compliance Officer
  • VP Strategy and Architecture
  • Director Disaster Recovery and Business Continuity
  • Director e-Commerce
  • Director Media Communications
  • Manager Disaster Recovery
  • Manager Disaster Recovery and Business ContinuityDisaster Recovery Coordinator
  • Disaster Recovery - Special Projects Supervisor
  • Manager Database
  • Capacity Planning Supervisor
  • Manager Media Library Support
  • Manager Site Management; and
  • Pandemic Coordinator

The DRP template is over 200 pages and includes everything needed to customize the Disaster Recovery Plan to fit your specific requirement.  The electronic document includes proven written text and examples for the following major sections of a disaster recovery plan:

  • Plan Introduction
  • Business Impact Analysis - including a sample impact matrix
  • DRP Organization Responsibilities pre and post disaster - drp checklist
  • Backup Strategy for Data Centers, Departmental File Servers, Wireless Network servers, Data at Outsourced Sites, Desktops (In office and "at home"), Laptops and PDA's.
  • Recovery Strategy including approach, escalation plan process and decision points
  • Disaster Recovery Procedures in a check list format
  • Plan Administration Process
  • Technical Appendix including definition of necessary phone numbers and contact points
  • Job Description for Disaster Recovery Manager (3 pages long) - entire disaster recovery team job descriptions are available.
  • Work Plan to modify and implement the template.  Included is a list of deliverables for each task. (Risk Assessment and Vulnerability Assessment)
There is a extensive section that show how a full test of the DRP can be conducted.  It includes

  • Disaster Recovery Manager Responsibilities
  • Distribution of the Disaster Recovery Plan
  • Maintenance of the Business Impact Analysis
  • Training of the Disaster Recovery Team
  • Testing of the Disaster Recovery Plan
  • Evaluation of the Disaster Recovery Plan Tests
  • Maintenance of the Disaster Recovery Plan

Click on the link below to get the DRP/BC sample pages now and make it a part of your disaster recovery toolkit.

OrderDownload Table of ContentsLessons Learned

Testimonial - Dave Baker - City of Hamilton - I have found the DRP template invaluable!

Testimonial - Bob Rifenbury -MCSE/CCNA Lauch Testing Lab - The DRP Template saved me about 6 months of work!

Testimonial -  Kelly Keeler - Martin's Point Health Care - I have received and I began using the template immediately. IT IS GREAT! Made this process a snap for me. Cut my documentation time down from.  weeks to hours! This document has made, what began to be an overwhelming process turn into a snap!

Testimonial - Juan Stamos - Mexico City Corporation - We had a DRP in place, but needed a more user friendly structure.  The Disaster Recovery Template (Gold edition) has that structure.  It was very easy to quickly move our DRP into Janco's DRP Template -- a real added value.

* Update service is for 12 months unless it is purchased within 30 days of the purchase of the Template.  Janco reserves the right to validate purchase of the customer was made for the template.


This template is not for resale or re-distribution - Disaster Recovery Planning Template Disaster Recovery Guide


OrderDownload Table of ContentsLessons Learned





Disaster Recovery Planning News

Cloud impacts disaster recovery plans

Adopting cloud technology requires weighing its benefits against the technical complexities and adoption hurdles that come along with it. While organizations can reap the benefits of cloud technology by building their own infrastructure, service providers can deliver economies of scale when it comes to cloud infrastructure, operating costs, managed security, and high availability.

Outsourcing Template

The Practical Guided for Cloud Outsourcing Template includes -- Sample Cloud Outsourcing Contract along with a Service Level Agreement and other tools to facilitate the cloud  outsourcing process. The template includes Janco's exclusive Business and IT Impact Questionnaire.

Order Cloud Outsourcing Template    Sample Cloud Outsourcing Contract

The template is delivered electronically in WORD and/or PDF format.  Included are two 3 page job descriptions - Cloud Application Manager and Cloud Computing Architect. Sarbanes-Oxley issues are addressed directly, along with an ISO 27001 and ISO 27002 audit program.

  • Cloud Outsourcing Template
  • - more info

    Backup endpoints are critical for business continunity

    When considering endpoint backup options, be sure you're making the right decisions. Protecting data on endpoints has become more challenging because of recent trends like exponential data growth, the rise in endpoints, BYOD, and SaaS applications. Protect your corporate endpoint data by avoiding these common backup mistakes:

    • Relying solely on desktop backup puts over a quarter of enterprise data at risk
    • Neglecting the end-user experience causes users to disable intrusive backup
    • Comparing upfront costs alone may mean you pay more long term
    Disaster Recovery Security Cloud DRP Security Incident Communication Policy Security Audit Program
     Order Disaster Plan TemplateDisaster Plan Sample

    - more info

    Communications key to business continuity

    Many business managers have found out the hard way the missed opportunities of not implementing a cloud-based communications solution. Winter snow storms and hurricane Sandy have opened CIO's eyes to the vulnerability and limitations of the premises-based communications system. Many firms on the East Coast just were not able to get back in business after those events.

    • 43% of companies experiencing disasters never reopen, and 29% close within two years.
    • 93% of businesses that lost their data center for10 days went bankrupt within one year.
    • 40% of all companies that experience a major disaster will go out of business if they cannot gain access to their data within 24 hours.
    Disaster Recovery
     Order Disaster Plan TemplateDisaster Plan Sample
    - more info

    After a breach event - what to do

    One of the greatest assets of the vast majority of organizations consists of digital bits of information, not their physical holdings. Increasingly, data stored in databases, file management systems, flat files, spreadsheets, and other information storage formats is the linchpin for enterprise success. Intellectual property, transactions, and records to name a few are fueling business because that information is the currency upon which business operations function. Organizations are creating and using data at an unprecedented level, as represented in the demand for storage capacity.

    After a data breach, following five steps:

    • Know what you have and prioritize by risk levels
    • Define what "good" looks like
    • Harvest system state information from your production systems
    • Perform a reference node variance analysis to identify compromised systems
    • Remove suspect systems from the environment and return to a trustworthy state

    Order Security ManualTable of Contents

    - more info

    Winter weather can cause business interruptions

    Disaster Recovery and Business Continuity plans need to consider natural weather and events. The effects that natural events have on the environment directly and indirectly may be harmful to people. Forest fires and volcanoes harm air quality. Hurricanes and floods can contaminate water supplies and damage wastewater facilities. Any of these can spread contaminated materials into the environment.

    Weather Disasters
     Order Disaster Plan TemplateDisaster Plan Sample
    - more info

    Disaster Recovery Digest - current articles on Disaster Recovery and Business Continuity

    Disaster Recovery Digest - current articles on Disaster Recovery and Business Continuity.

    Disaster Recovery
     Order Disaster Plan TemplateDisaster Plan Sample
    1. 10 Backup Best Practices supplementing a disaster recovery and business continuity solution with the cloud 10 Backup best practices -  supplementing a disaster recovery and business continuity back-up solution with the cloud Backup best practices are used by many CIOs...
    2. Importance of Business Continuity ...
    3. Top 10 tips for Disaster Recovery in a Small Business – best way to protect your data Disaster Recovery for a Small Business Baseline for best practices defined in Janco’s Disaster Recovery Business Continuity Template. As requirements for avoiding downtime become increasingly...
    4. Business Continuity Plan Has to be in Place Now Business continuity plan is something that every organization needs to have in place before a disaster happens.  Every day somewhere in the world disasters are...
    5. IBM Business Continuity Plan Services Business Continuity Services Video Business continuity video is good overview of what IBM thinks about this...
    - more info

    Disaster Recovery Business Continuity Articles

    Disaster Recovery SecurityDisaster Recovery Business Continuity Articles:

    1. Options for a data center disaster recovery strategy Data Center disaster recovery strategy – options A critical component of a disaster recovery business continuity is the data center disaster recovery strategy — Hot...
    2. Data Center Recovery Strategy  Data Center Recovery Strategy driven by cost – risk considerations Creating a Data Center Recovery Strategy – When considering the impact of the loss of...
    3. Google data center security & disaster recovery This is a great video on physical security as well as the the software security. This is a great primer which all CIOs and Data...
    4. Data Center Servers are Critical For Business Continuity Business Continuity and Data Center’s issues Business transactions delivered from the data center pose major challenges to business continuity.   Data center infrastructure and the...
    5. Cloud storage aids disaster recovery and business continuity  Cloud Storage is a next step to implement after the disaster recovery plan is created Cloud storage is a next step after the CIO creates a...

     Order Disaster Plan TemplateDisaster Plan Sample

    - more info

    Disaster Planning Digest - Current Topics

    Disaster Planning Digest - Current Topics

    Business Continuity - Disasters Happen

    1. Should Disaster Recovery Plans Depend on SSD Storage Can Disaster Recovery Plans depend on SSD storage Disaster Recovery depends on stable storage of data and modern storage technology (SSDs, No-SQL databases, commoditized RAID...
    2. Disaster Recovery High Risk Users Disaster Recovery High Risk Users There are three types of high risk users in disaster recovery and business continuity planning. They are: People who do...
    3. Inexpensive drones will be a new security risk Inexpensive drones are here now Drones are now available that cost less than $1,000 and can be used by almost everyone.  These devices raise security...
    4. Disaster Recovery Misconceptions Disaster Recovery — What are the major misconceptions when a disaster occurs with IT systems? Can your systems can not support your company’s day-to-day operations?...
    5. Disaster recovery re-insurance will be in short supply Recent events in Boston is causing many CIOs and risk managers to re-evaluate disaster recovery plans and review the insurance components of the business continuity...

     Order Disaster Plan TemplateDisaster Plan Sample

    - more info

    Disaster Recovery has to be more responsive

    In the past, one- or two-day outages were trouble. Today, a few hours downtime can cripple your organization. It's not just employees who are affected; partners and customers also link to your IT through email and database applications. Losing your data or critical systems can mean:

    • Revenue loss from the inability to conduct business
    • Lost customer trust or confidence
    • Financial penalties for violated SLAs
    • Legal or financial penalties for compliance lapses
    • Excessive recovery and repair costs for lost systems and data

    Order DRP BCPSample DRP BCP

    - more info

    Developing a Disaster Recovery Testing Process

    Most real disasters are much less well-structured than a test - so if you can't make the test work when you can plan for it in advance and stage everything just right, what chance will you have if the big one hits?

    Preparing for Disaster
     Order Disaster Plan TemplateDisaster Plan Sample

    One way to get a workable DR plan is to do some up-front scenario analysis after the BIA is done and build up a set of layered responses to incidents of increasing severity. For the least serious impacts you can engineer high availability solutions - essentially disaster avoidance strategies. For disasters you can't avoid, you can build routine operational processes (things like rolling cluster upgrades, managed application failover, deliberate load shifting) that let you practice for a real problem, so your people are familiar with most of the work they'll need to do in a disaster. That will also exercise most of the technologies you'll need and ensure they're working reliably - and that the disaster won't be their first use.

    - more info