Disaster Recovery Principles and Practices

by April J. Wells, Charlyne Walker, and Timothy Walker

Chapter 8 Testing the Disaster Recovery Plan

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 2

Chapter 8 Objectives

 Explain the necessity of practicing the DR plan

 Describe the different kinds of tests that can be performed

 Explain reasons for testing  Determine the impact of testing activities  Understand the need for change control  Describe methods of change control

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 3

Introduction

 This chapter will help you  Prepare for the DR test  Conduct the test  Learn from the test

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 4

Rehearsing the DR Plan

 Reasons for testing  Evaluate backup procedures  Evaluate recovery procedures  Provide recovery training  Keep recovery plan current

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 5

Rehearsing the DR Plan (cont.)

 Impact on organization  Business must continue as usual

 Systems cannot be impacted by testing  Recovery personnel must have normal job duties

covered by others

 Costs of testing  Transportation to recovery site, housing, meals, etc.

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 6

Rehearsing the DR Plan (cont.)

 Develop criteria for  Success/failure of plan  Defining scope of disaster

 Develop procedures for  Determining when recovery can be done on site  How to move people to off site recovery location

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 7

Rehearsing the DR Plan (cont.)

 Create step-by-step process  Breaking into sections

 Allows partial testing  Minimizes business disruptions

 Allows anyone to perform the recovery

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 8

Rehearsing the DR Plan (cont.)

 Types of tests  Checklist

 Non-intrusive  Lists associated with systems recovery  Basis of step-by-step instructions  Add to DR plan documents

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 9

Rehearsing the DR Plan (cont.)

 Types of tests (cont.)  Simulation

 Non-intrusive  Pretends to test recovery of systems  Often provided by software vendors

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 10

Rehearsing the DR Plan (cont.)

 Types of tests (cont.)  Parallel

 Recovers system on parallel hardware  Minimizes impact to production system  Can be done during downtime

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 11

Rehearsing the DR Plan (cont.)

 Types of tests (cont.)  Full interruption

 Full recovery testing  Most costly (backup site, duplicate hardware/software,

etc.)  Successful test assures recovery in actual disaster

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 12

Rehearsing the DR Plan (cont.)

 Write test scenarios  Developed by functional area  Use step-by-step process  Use document to record success/failure of each

step in testing

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 13

Rehearsing the DR Plan (cont.)

 Update the plan  When hardware/software is added/removed  After testing (what works, what needs to change)  Minimally on annual basis

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 14

Applying Change Control

Change control: process of documenting/approving changes to DR plan

 Must pass through change control board  Make changes when they occur (systems,

etc.) or are needed (updates as a result of tests, procedure changes, etc.)

 Schedule regular reviews for any missed changes

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 15

Manage/Document the DR

 Stakeholders  Contact internal during drills  “Mock” contact external parties  Keep copies of communication with DR

documents

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 16

Manage/Document the DR (cont.)

 Define goals  Set goals up front  Ensure goals are measurable  Set time limits to plan steps

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 17

Manage/Document the DR (cont.)

 Report  Conduct analysis of testing  Prepare formal report for organization  Use report for future planning

© 2006 by Pearson Education, Inc. Chapter 8 Testing the Disaster Recovery Plan 18

Summary

 You should now know  Why DR testing is necessary  How to prepare for DR testing  Why and how to document changes to the DR

plan  How to manage and document the recovery