|
The purpose of a Disaster Recovery Planning project is to
protect the computer systems and data of an enterprise by planning the recovery
of company systems in the event of natural or unnatural disasters.
Disaster
Recovery planning problems are serious – the solutions are hard.
This methodology defines how systems can meet goals and needs with
minimum risk, determines where true risks exist and then finds ways to minimize
those risks inexpensively.
A Disaster Recovery project accomplishes three goals. First, it determines where
true risk exists, defines the impacts of the risk on business operations, and
develops strategies for minimizing exposure to risks. Second, it defines the
activities required to implement the strategies and to acquire the services to
support those activities. Third, it develops and tests a detailed Disaster
Recovery Plan and Procedures.
|
Protection to
minimize exposure disasters.
|
The Business Impact Analysis (BIA) comprises the heart of the
disaster recovery planning process. It is here that the disaster recovery
planner determines what is important and in what time frame for inclusion into
the Disaster Recovery Plan and what is not relevant to that effort. The BIA
determines how far to go in protecting the people, information and equipment
that constitute the organization and its functions so that all survive to
flourish another day. This analysis uncovers the truly important functions
requiring fast recovery. It also
helps minimize cost by identifying functions that can be recovered more slowly.
|
The GCC is a
superior alternative.
|
The Miora Generalized Cost Containment (GCC) Model, developed by
Michael Miora, CISSP-ISSMP, FBCI is a modern and superior
alternative to the more conventional risk assessment methods. The GCC estimates
the total cost of outages as a function of time after an event. This model is
significantly simpler than the conventional method: it is easier to build,
simpler to explain, and less costly to perform. The GCC estimates the cost of an
outage for each function and applies that cost to the total disaster cost after
the maximum allowable down time has been exceeded.
The
Miora Generalized Cost Containment (GCC) Model summarizes at a glance the
effects of loss of functions. The Law of Large Numbers helps assure that the
overall estimate is reliable. Insurance reimbursements, legal liabilities, and
overall management objectives can moderate these loss figures. Losses are
calculated based upon three types of loss: tangible and direct, tangible and
indirect, and intangible.
|
The GCC™ solves
the ROI problem. |
|