A MODEL FOR DATA CENTRE DISASTER RECOVERY PLANNING

Abstract

Application of computers and use of computer-based information systems has increased dramatically in Singapore during the last five years. Prolonged disruptions in computer services due to disasters will adversely impact organizations which rely on computers for their operations. This dissertation reviews the current status of penetration of computers in Singapore and the need for having adequately tested disaster recovery plans in organizations. It develops a model for disaster recovery planning consisting ten stages: (1) disaster identification, (2) asset identification, (3) asset valuation, (4) risk assessment, ( 5) resource identification, ( 5) alternate recovery strategies, (7) management commitment, (8) plan development and documentation, (9) plan testing, and (10) plan implementation and maintenance. These ten stages are explained in detail in Chapters 3 and 4. This ten-stage model is used to design and implement disaster recovery plan in a large government organization with $20 million investment in computer hardware. After a study of the needs of the organization and alternate recovery strategies, commercial recovery strategy offered by a third-party was chosen. The actual procedures and forms developed for the organization under this strategy are included as appendices. The main considerations in choosing the strategy and difficulties faced in developing and implementing the plan are discussed. This study has several limitations. First, the test conducted with the third-party back-up centre was limited to testing the compatibility of hardware and limited test of recovery of a few applications. Second, the study addresses the information systems domain. In order to provide total disaster protection, the plan should include non-computer procedures and media. Last but not least, data on disasters in Singapore was not available to make qualitative analysis of probabilities of disasters.