Disaster Recovery Plan

The majority of the administrative elements and many of the academic programs are heavily dependent and integrated with data processing to the extent that continued operation without data processing would require extensive alteration in methods of doing business. In the event that data processing services are interrupted for any extensive period of time, it is necessary that the University have a plan for continuing operations and reestablishing automated data processing. A disaster recovery plan is a written contingency plan for responding to a disaster which has disrupted the data processing facilities. Its purpose is to provide a general guide based upon preplanned actions which will reduce decision making during the recovery process and enable resumption of normal operations in the most cost effective manner. The plan includes but is not limited to the following: a disaster project team with a list of basic responsibilities for the team members, a list of offices and programs in order of assessed critical dependence upon automated data processing (ADP), risk assessment of types of disasters, recovery priorities and operations, requirements analysis, plan update criteria and review schedule, hardware and software inventory, support agreements with agencies and vendors.

The planning is both a positive management tool and is required by Texas State Law. Since the threat of hurricane is the single most risk to our campus, the University Hurricane Plan will take precedence where any conflict might arise with this plan or methodologies. The Assistant Vice President for Technology is responsible for preparation of the preliminary disaster recovery plan. The Administrative Council will review the plan for the purpose of acceptance as University policy and recommend approval or recommend appropriate changes required for approval. The President, by law, is the authority responsible for disaster recovery planning. Each office that might be impacted by an extended outage is required to assign a representative to the University ADP disaster recovery team. The representative will be the

trainer/liaison between the recovery and planning team, and the office or department. Each office is encouraged to prepare an operation methodology plan for its own needs should automated resources be unavailable for more than two days or during critical events. Project Team The Project Team consists of a Computer Center, Microcomputer Services, Media Services, Electronic Maintenance staff, and a representative from each critical department and Physical Plant. The project team is divided into the following sub-elements: Damage Assessment, Systems and Applications Software, Operations, and a Management Group. The Damage Assessment Team is led by the ADP Manager of the Computer Center (backup leader is Network Manager). Other team members include the Physical Plant representative, Coordinator of Media Services, Electronic Maintenance, and the Coordinator of Microcomputer Services. The team is responsible for performing the damage assessment following a major or catastrophic disaster. The team is responsible for: identifying the extent of the damage to all systems including mainframes, microcomputers, media, and maintenance facilities, determining the condition of equipment, supply salvage, assessment of operational capability, definition of restoration requirements, scheduling and supervising salvage and restoration, scheduling and supervising staff as required within each primary area of responsibility.

The Systems and Applications Software Team is led by the Senior Applications Programmer. The Team members are the application programmers/analysts, user representatives, and system operators. The team members support the members of the damage assessment team and are primarily responsible for software alterations required to allow use of secondary sites. The team members will also serve on the operations team as required. The team is responsible for providing a general overview of second site requirements. The Operations Team is led by the Senior Operator. All operations staff are members. The team members and responsibilities overlap with the Systems and Applications Software Team. Computer members of the Damage Assessment Team are to join the Operations Team as damage assessment winds down (usually within 48 hours). The Team is responsible for:

establishing emergency production procedures at the secondary site, operating the secondary site if required, recreate as closely as possible original site operations including backup, security, data entry, information distribution and user assistance functions, advising users of the disaster and recovery and operations procedures, assisting users in recovery operations, assisting programmer/analysts in program recovery.

Media Services will form a separate operations team. The team will be led by the Classroom Services Supervisor. The team will restore basic services, salvage equipment and if possible visually record general and specific damage to assist in determination of damage cost. Microcomputer Services will form a separate operations team. The team will consist of all members of the Microcomputer Services staff and will be led by the senior laboratory assistant. The team will assist users in recovery of and initial operation of the office operation systems. The team will relocate operational microcomputers to critical areas as directed by the management group. The management group will be led by the Assistant Vice President for Technology and the backup leader is the Coordinator of Media Services. Other group members are the section managers of Media and Computer Services. The management group will first participate with the Damage Assessment team as needed. The major functions of the group are to: supervise and coordinate the entire recovery process and allocate resources, certify non recoverable items, procure replacement items and supplies, identify repair requirements and arrange for repairs, act as vendor liaison, adjust the recovery plan as needed, make management decisions.

Risk Assessment Types of Disasters The degree of impairment can extend from a minor disruption to total destruction of the ADP system. Loss of hardware, software, data files, critical personnel or any combination can have severe impact upon the ability of the University to maintain most management and some curriculum functions. For purposes of planning, disasters are defined as: Minor In general, the lowest level of outage that allows for recovery within twenty-four hours with existing resources and does not result in significant deviation from normal production. Major A situation which interrupts ADP operations to the extent that agency operations are impacted and recovery requires additional resources but can be accomplished on site Catastrophic A situation which interrupts ADP operations to the extent that agency operations are impacted and recovery requires additional resources, operations must be moved to and or provided by a secondary site or agency while rebuild occurs

Probable Disaster Disaster electrical hurricane water vandalism fire tornado Degree minor major major minor to major major catastrophic Probability high moderate moderate low low low