| Research has shown that only about 30% of | | | | databases, make configuration changes, restore |
| small businesses have a disaster recovery plan. I | | | | files from tape, create new user accounts, any |
| believe this is because business owners don't have | | | | special needs for each application, and the |
| a clear idea on what needs to be done. | | | | personnel who know how to do these tasks. |
| The main purpose of any disaster recovery plan | | | | Make a copy and store one off site. |
| is to protect business critical data from being lost. | | | | - Store all of your backup tapes and business |
| Business critical data includes any key business | | | | critical software and manuals at your off site |
| information that could not be recovered if it were | | | | facility. Remember to include copies of software |
| destroyed. Examples include customer contact | | | | purchased online and downloaded on all computers |
| information, financial records, products and job | | | | and laptops. Also, remember to update these |
| specifications, or any other data you deem | | | | when you upgrade your operating systems and |
| important. Successful disaster recovery plans | | | | software. |
| focus on keeping this business critical data backed | | | | - Check the security and accessibility of your off |
| up and accessible at all times. | | | | site storage. Who has keys, what are their |
| Disasters aren't always hurricane sized. A poorly | | | | business hours and will they be available if an area |
| timed server crash can do as much damage, and | | | | wide disaster occurs? |
| is more likely to occur. The tasks listed below | | | | - Review your IT and phone service level |
| should help you get started on building a disaster | | | | agreements and compare them with your |
| recovery plan that will keep your business critical | | | | business needs. If a server crashes, can you live |
| data safe in any type of disaster. | | | | with a 12 hour response time from the vendor? |
| - Make sure you get a full backup of all of your | | | | - Enforce procedures that ensure your data and |
| electronic files, email messages, and any other | | | | data equipment are secured physically and |
| irreplaceable customer data every night. Don't | | | | electronically via controlled access doors and |
| forget to back up laptops that traveling | | | | Internet firewalls. |
| employees are using. Critical customer data is | | | | - Consider buying several emergency laptops. On |
| often stored on these assigned laptops. | | | | these laptops, install and configure your business |
| - Make sure these backups are moved to an off | | | | critical applications and then store them off site. |
| site storage facility on a daily basis. | | | | Test and use them periodically and remember to |
| - Rotate and catalog your back up tapes on a | | | | keep them updated as your business software |
| weekly basis, and replace them every so often | | | | changes. |
| with new tapes. | | | | - Create a document that includes locations for |
| - Run a restore test on that data at least once a | | | | where to set up alternative office space, who to |
| month. If you can't restore the data that has | | | | contact immediately after the disaster, and where |
| been backed up, it won't do you much good. | | | | to get new servers and computers. Include all |
| - Keep your backup hardware up to date. Nothing | | | | business critical contacts, such as your employee |
| would be worse than having current back up | | | | home numbers, your insurance agent, telephone |
| tapes, experiencing a disaster and the loss of | | | | company, Internet broadband provider, IT |
| your tape drive, then finding that the technology | | | | consultant, and the post office. Having this |
| is so out of date that you can't buy another | | | | information will help immensely if you have to |
| similar tape drive to read those tapes. | | | | transfer your critical services to a new location. |
| - Make a list of all of your operating systems and | | | | - Review your insurance policy. Does it provide |
| applications and include the version numbers, | | | | for loss of income after a disaster? What kinds of |
| license numbers and configuration details. Consider | | | | disasters are covered? A disaster recovery plan |
| creating a "run book" which includes this | | | | is critical to the health of your small business. |
| information plus screen shots of the configuration | | | | Following the tasks on the list above will go a long |
| screens of your backup software, firewall setup | | | | way in keeping your business critical data safe. |
| and network drives, at least. The run book should | | | | The bottom line is this: if your business critical |
| also include details about specific IT activities, for | | | | data is accessible after a disaster, your business |
| example, how to load operating systems, install | | | | will be one of the 6% that survive the aftermath. |
| desktop software, access and synchronize | | | | |