SCSU has procedures in place to provide backup and recovery of major data sets such as e-mail and files stored on major file servers. In addition, SCSU has detailed inventory records of technology components and campus locations for those components. These concepts form the basis for plans and procedures to recover from events that disrupt the normal flow of activity on campus. SCSU, however, does not have an up-to-date, full disaster recovery or business continuity plan that manages the risks associated with major disasters that potentially could have a significant negative impact on SCSU’s long-term success.
SCSU has become increasingly dependent upon multiple technologies for day-to-day operations. The disruption of the normal functioning of these technologies, due to a disaster of any size, would have a profound impact on SCSU’s mission. Disaster recovery plans and business continuity plans attempt to prepare for such a disruption of service, to put in place a strategy to deal with the disruption, to recover in a prioritized and well-planned manner, and to minimize the risks posed by such service disruption.
The scope of a disaster may be large or small and originate from a number of possibilities. A small disaster might consist of a fire or flood in a single workspace. A large disaster might consist of the physical loss of one or more buildings due to a storm, explosion, or terrorist attack. These are just examples of possible disasters. The uncertainty of future events makes planning for possible disasters a difficult and fuzzy exercise. However, this uncertainty does not diminish the necessity for such planning.
Disaster recovery planning usually takes the form of
While such plans are often overlooked or pushed to the bottom of the priority lists, it is critical to have such a plan for the university.
The primary goal is to develop a comprehensive technology disaster recovery plan for SCSU that speaks to the orderly and planned continuing of the university’s mission in the event of a disaster. The plan will
TLTR will establish a security committee comprised of people from LR&TS, CIS-AdC, and Facilities to develop a comprehensive technology disaster recovery plan for SCSU.
One-time costs estimated at $5,000 will be required to arrange for the services of a professional disaster recovery consultant to provide initial structure and direction for this initiative. This cost includes selecting the methodology and the technology (software) to support the plan content.
Substantial time and effort will be invested in this initiative by those charged with planning, compiling, and maintaining the required information.
Costs may be associated with providing service-level agreements with vendors and/or other MnSCU institutions or State agencies to arrange for backup facilities, equipment, and network connectivity.
On-going costs will be needed to maintain the plan and to do the required testing of the plan to ensure viability of the plan over time.
Revised: May 2003