1. Introduction: the personnel, equipment, software systems, and databases which comprise the Information Systems Department are necessary in order for the business to function in an effective manner. The purpose of this plan is to provide guidance in recovering from any disaster which might befall these to minimize downtime, loss of information, and to assist users in accomplishing their individual processing requirements.



2. Authority: The implementation of this disaster recovery procedure is the responsibility of the computer Director or his/her designee. The Disaster Recovery Team (see attachment A) will convene as soon as possible after a disaster has occurred to assess damages and make recommendations to the Director.



3. Distribution: This plan will be distributed to and used by those persons responsible for its implementation and operation. These individuals are identified in attachment A. This document will be maintained and updated by the Information Systems Department whenever significant changes occur.



4. Backup Procedures: A back up of daily transactions will be done every evening. A copy will be maintained within the IS Department and one weekly transaction copy will be maintained at a location away from the facility known as "off-site backup location". The location will be available on a need to know basis including company president and IS Director.



5. Basic Recovery Plan Requirements: The basic requirements for the Recovery Plan are as follows:

• Disaster recovery team.
• Disaster recovery documentation.
• Backup computer facilities & storage.

1. Disaster Recovery Team: The Disaster Recovery Team (see Attachment A) has been established and organized to assess the damage to the computer facilities, to control and coordinate recovery/backup actions, and to make recommendations to the Information Systems Director. The team will consist of a cross section of persons responsible for one or more of the following functions:

• Recovery administration
• insurance notification
• supplies
• organization
• Systems software (vendor contacts)
• Applications software (company contacts)
• Communications
• Operations (company/user interactions)
• Facilities
• Hardware

Proposed System Recovery Schedule (Same facility):

• Day 1 Convene the disaster recovery team and assess damages, contact vendors, discuss options.
• Day 2-4 Restore programs and data, test integrity of programs and data. Begin restoring communications and networking capabilities.
• Day 5 Restore partial operation to priority departments.
• Day 6-8 Determine priority of data processing.
• Day 8-14 Take delivery and setup new equipment. Restore full communications and networking capabilities. Work with departments to verify data and operations of applications.

Proposed System Recovery Schedule (other than same facility) would include the retrieval of data from off-site backup tape location.

1. Disaster Recovery Plan Review: The following steps will be taken to insure that the Disaster Recovery Plan is current, feasible and effective:

• Every year the Disaster Recovery Team will be convened to review the Plan and Attachments.
• Updates or revisions will be made at this time.
• The content of the off-site disaster backup tape storage will be subjected to unannounced periodic audits by the IS Director. Results of the audit will be documented and filed with the Disaster Recovery Plan materials.

Attachment A

Disaster Team:

Lisa Chavez chavez@mail.mcm.edu

James Johnson johnsonj@mail.mcm.edu

Thy Bui buit@mail.mcm.edu