...
To meet the enterprise business objectives, respond to a major incident or disaster, and restore the organization’s critical business functions, App4Legal DWC-LLC adopt and follow well-defined and time-tested plans and procedures. Disaster recovery policy is required to respond to a major incident or disaster by implementing a plan to restore App4Legal DWC-LLC’s 's critical business functions.
...
The purpose of this policy is to ensure that IT resource investments made by App4Legal DWC-LLC are protected against service interruptions, including large scale disasters, by the development, implementation, and testing of disaster recovery/business continuity plans (DR/BCP).
...
This policy applies to all facilities of App4Legal DWC-LLC that operate, manage, or use IT services or equipment to support critical business functions.
...
- Plans for disaster recovery/business resumption/business continuity is developed by organizational management.
- Disaster recovery/business resumption plans are updated at least annually and following any significant changes to computing of App4Legal DWC-LLC
- Employees of App4Legal DWC-LLC is trained to execute the disaster recovery plan.
- Annual certification, updating and testing of the disaster recovery/business resumption plan is done.
- A competent auditor audits disaster recovery/business resumption plan.
IIII- Strategies
ALERT PHASE – A Crisis Is Discovered
- A crisis is defined as any unplanned event that significantly threatens the health and well-being of App4Legal DWC-LLC employees or assets, causes operational disruption, physical or environmental damage, or harm to the company’s public image or reputation.
...
- After initially assessing damage to their areas, members of the CMT will assemble at the [Designated Location]. In the event the primary Command Center is not accessible, all members of the CMT will assemble at [Designated Alternate Location]designated location.
- The DR Lead and Backup DR Lead will then determine, based on the initial damage assessment, whether or not to implement the Disaster Recovery Plan.
...
- The primary alternate site from a DR perspective will be for all employees to work from home or an alternate operating location of App4Legal DWC-LLC
- A secondary alternate site may be designated at some point during a crisis by the DR Lead or designee.
- During a crisis, all members of the CMT will:
- Maintain an activity log to track events relating to their role during the crisis period.
- Monitor responses from emergency service agencies and notify other personnel, as needed.
- Revise damage assessment as the situation develops and assist the DR Lead and Backup DR Lead, as needed.
...
In the event of a disaster that prevents access to App4Legal and support data processing systems at its processing centers, App4Legal DWC-LLC’s App4Legal’s return time objective (RTO) is to return to a minimum level of processing capability within 12 hours of a major incident. Data recovery protection objective (RPO) or maximum data loss due to a major outage is 24 hours. In order to protect itself from the possible loss of data in its electronic records, App4Legal DWC-LLC performs the following:
- All backup media is to be stored offsite using a secure transport.
- Application and database environments have the following backups:
- Offsite restoration of the most recent backup has been tested and verified, and could occur at any App4Legal DWC-LLC location with network connectivity.
- Application services are restored to the new location
- CMT team verifies the new enviromentnew environment
- Traffic is directed the new location
...