Prince George’s Community College NewOptMarketing Plan Evaluation Paper Assignment We have to perform a tabletop exercise for the two scenarios the profes

Prince George’s Community College NewOptMarketing Plan Evaluation Paper Assignment

We have to perform a tabletop exercise for the two scenarios the professor provided in the attachment (BC-DRP Disaster Scenarios for Evaluation Test by Groups).
Evaluation Guide

—-This is draft by one team member from the Last week work, can you please provide your opinion.( Group1_Phase2_Draft_Plan.docx)

We have to determine how well Group 7 BC/DR plan can be executed to handle the disaster scenario. We also have to make recommendations for improvements to Group 7 BC/DR plan.

sample student evaluation: Student_phase_3_evaluation_plan.docx

Evaluate Group 7 BC/DR plan( This what you USE): BCP_DR DraftV4 Group 7 to be evaluted by Group 1.docx

Assignment guidelines: IFSM 432 Phase 3 Evaluate Plan – Group Assignment.docx BCP-DR Project Scenario for NewOptMarketing.docx NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
NewOptMarketing
Business Continuity and Disaster
Recovery Plan
1
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
IFSM 432
Emergency notification contacts
Name
Address
Home
Patrick
Maryland

Ross
Maryland

Joseph
Maryland

Adeel
Maryland

Mobile phone
Revisions control page
2
Date
Summary of changes made
Changes made by (Name)
4/16/20
First Draft
Group 1
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
1. Purpose
The purpose of this business continuity and disaster recovery plan is to prepare
NewOptMarketing in the event of extended service outages caused by factors beyond our control
(e.g., natural disasters, man-made events), and to restore services to the widest extent possible in
a minimum time frame. All NewOptMarketing sites are expected to implement preventive
measures whenever possible to minimize operational disruptions and to recover as rapidly as
possible when an incident occurs. This includes disaster recovery processes to recover and
protect NewOptMarketing in the event of a disaster.
The plan identifies vulnerabilities and recommends necessary measures to prevent the impact of
a disaster that may affect the operation of the company, with an objective of guaranteeing
business continuity and smooth recovery from a disaster. It is a plan that encompasses all
NewOptMarketing system sites and operations facilities.
2. Scope
The scope of this plan is limited to identification of possible vulnerabilities, identifying the roles
and functions of the recovery team, developing a risk response and making diverse
recommendations that would aid in disaster recovery at NewOptMarketing Company.
Nonetheless, the limitation of this plan is that this is a business continuity and disaster recovery
plan, as opposed to a daily problem resolution procedures document.
3. Plan objectives




3
Serves as a guide for the NewOptMarketing recovery teams.
References and points to the location of critical data.
Provides procedures and resources needed to assist in recovery.
Identifies vendors and customers that must be notified in the event of a disaster.
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
● Assists in avoiding confusion experienced during a crisis by documenting, testing and
reviewing recovery procedures.
● Identifies alternate sources for supplies, resources and locations.
● Documents storage, safeguarding and retrieval procedures for vital records.

4. Assumptions
● Key people (team leaders or alternates) will be available following a disaster.
● A national disaster such as nuclear war is beyond the scope of this plan. Each support
organization will have its own plan consisting of unique recovery procedures, critical
resource information and procedures.
● All the electronic information generated by the company should be stored in backup
hosted at the regional offices as well as in the headquarters.
5. Disaster definition
Any loss of utility service (power, water), connectivity (system sites), or catastrophic event
(weather, natural disaster, vandalism) that causes an interruption in the service provided by
NewOptMarketing operations. The plan identifies vulnerabilities and recommends measures to
prevent extended service outages.
5.1 Business Continuity definition
Business continuity entails the maintenance of an enterprise function or fostering a quick
resumption of operation in case of a major disruption caused by a natural calamity, fire or attack
on a company system by cybercriminals.
4
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
6. Recovery teams
·
Emergency management team (EMT)
·
Disaster recovery team (DRT)
·
IT technical services (IT)
6.1 Team member responsibilities
·
Each team member will designate an alternate
·
All of the members should keep an updated calling list of their work team members’
work, home, and cell phone numbers both at home and at work.
·
All team members should keep this plan for reference at home in case the disaster
happens after normal work hours. All team members should familiarize themselves with the
contents of this plan.
6.2 Instructions for using the business continuity plan
The business continuity plan (BCP) is used to restore interrupted business services. The Plan
provides directions and procedures that the business must follow if faced with a crisis.
The business should review the plan annually and practice the plan to get better at knowing what
to do in the event of an emergency through drills and exercises.
7. Invoking the plan
5
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
This plan becomes effective when a disaster occurs. Normal problem management procedures
will initiate the plan and remain in effect until operations are resumed at the original location or a
replacement location and control is returned to the appropriate functional management.
8. Disaster declaration
The senior management team, with input from the EMT, DRT and IT, is responsible for
declaring a disaster and activating the various recovery teams as outlined in this plan.
In a major disaster situation affecting multiple business units, the decision to declare a disaster
will be determined by NewOptMarketing senior management. The EMT and DRT will respond
based on the directives specified by senior management.
9. Notification and Justification
Regardless of the disaster circumstances, or the identity of the person(s) first made aware of the
disaster, the EMT and DRT must be activated immediately in the following cases:
·
One (1) or more systems and/or sites are down concurrently for five (5) or more hours
·
Five (5) or more systems and/or sites are down concurrently for five (5) or more hours
·
Any problem at any system or network facility that would cause either of the above
conditions to be present or there is certain indication that either of the conditions are about to
occur
6
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
NewOptMarketing IT technician(s) may be able to fix the system(s) immediately (e.g., switch to
secondary ISP, turn on generator) and may not need to contact the EMT and DRT. A system
being down for five or more hours is too long, in that case, EMT and DRT should be activated.
10.
External communications
Corporate public relations personnel are designated as the principal contacts with the media
(radio, television, and print), regulatory and government agencies, the company employees and
their families, suppliers, stakeholders, and customers, and other external organizations following
a formal disaster declaration.
11.
Emergency management standards
Data backup policy
Full and incremental backups preserve corporate information assets and should be performed on
a daily basis for audit logs and files that are irreplaceable, have a high replacement cost, or are
considered critical. Backup media should be stored in a secure, geographically separate location
from the original and isolated from environmental hazards.
Department-specific data and document retention policies specify what records must be retained
and for how long. All organizations are accountable for carrying out the provisions of the
instruction for records in their organization.
7
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
IT follows these standards for its data backup and archiving:
Tape retention policy
Backup media is stored at locations that are secure, isolated from environmental hazards, and
geographically separate from the location housing the system.
Billing tapes
·
Tapes greater than 7 years old are destroyed every six months.
·
Tapes less than three years old must be stored locally off-site.
·
The system supervisor is responsible for the transition cycle of tapes.
System image tapes
·
A copy of the most current image files must be made at least on a daily basis
·
This backup must be stored offsite.
·
The system supervisor is responsible for this activity.
Off-site storage procedures
·
Tapes and disks, and other suitable media are stored in environmentally secure
facilities.
·
Tape or disk rotation occurs on a regular schedule coordinated with the storage vendor.
·
Access to backup databases and other data is tested annually.
Emergency management procedures
8
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
The following procedures are to be followed by system operations personnel and other
designated NewOptMarketing personnel in the event of an emergency. Where uncertainty exists,
the more reactive action should be followed to provide maximum protection and personnel
safety.
Note: Anyone not recognized by the IT staff as normally having business in the area must be
challenged by the staff who should then notify security personnel. Security Personnel will
then ask the individual for proper credentials, or they will be escorted from the premises.
These procedures are furnished to NewOPtMarketing management personnel to take home for
reference. Several pages have been included to supply emergency contacts.
In the event of any situation where access to a building housing a system is denied, personnel
should report to alternate locations. Primary and secondary locations are listed below.
Alternate locations
Baltimore, MD

Attempt to contact your immediate supervisor or management via telephone. Home
and cell phone numbers are included in this document
Philadelphia, PA

Attempt to contact your immediate supervisor or management via telephone. Home
and cell phone numbers are included in this document
Cincinnati, OH

12.
Attempt to contact your immediate supervisor or management via telephone. Home
and cell phone numbers are included in this document
Response Scenarios
In the event of a major catastrophe affecting a NewOptMarketing facility, immediately notify the
direct manager of that specific site/department.
9
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
In the event of a flood causing damage to web servers
In the event of web services being down due to to a flood, follow these procedures:
Procedure
STEP
ACTION
1
Safely evacuate building
2
Employee should notify direct manager
3
Notify emergency services
4
Emergency services will shut water off
5
Emergency services will make sure it is safe to
move equipment away from affected area
6
Ensure data is backed up
7
Recover data from last unaffected backup
date/time
8
Restore services to affected site once the disaster
is cleaned up
In the event of a severe storm that causes a power outage
In the event of a power outage caused by a storm, tornado or other natural cause, follow these
procedures:
10
NewOptMarketing
Procedure
13.
Rel. 1, Ver. 0 4/16/2020
STEP
ACTION
1
Sound an alarm stating there is an emergency
2
Seek shelter and follow guidelines stated under
FEMA for the specific natural disaster
3
Listen to local news outlets, or follow the storm
track on your smart phone, follow the instructions
from local storm experts
4
Notify management of disaster/outage
5
Ensure backup generator is operational
6
Follow backup and recovery procedures
Plan review and maintenance
This plan must be reviewed semiannually and exercised on an annual basis. The test may be in
the form of a walk-through, mock disaster, or component testing. Additionally, with the dynamic
environment present within NewOptMarketing, it is important to review the listing of personnel
and phone numbers contained within the plan regularly.
The hard-copy version of the plan will be stored in a common location where it can be viewed
by site personnel and the EMT and DRT. Electronic versions will be available via
NewOptMarketing network resources as provided by IT. Each recovery team will have its own
directory with change management limited to the recovery plan coordinator.
11
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
14.
Alert/Verification/Declaration phase
(0-2 hours)
Flow Diagrams
The following work diagrams correspond to each specific risk factor and is based on each step
in the response protocol within 0-2 hours
Flood affecting web services:
12
NewOptMarketing
Safely
Evacuate
Rel. 1, Ver. 0 4/16/2020
Employee
notifies
management
Notify
emergency
services
Emerge
ncy
Services
shut
water off
Ensure
area is
safe to
move
equipment
Tornado or Severe Storm causing power outage
13
Manage
ment
notifies IT
Ensure
data is
backed
up
Recovery
data/rest
ore
services
NewOptMarketing
Sound
alarm
Rel. 1, Ver. 0 4/16/2020
Seek shelter
Follow local
news or
experts on
what to
do/track
storm
Notify
Manage
ment
Notify
IT
Ensure
generato
r is
working
Backu
p/Rec
over
data
Plan checklists
The following information should be available to all NewOptMarketing employees at all times
Flood Causing Web Service Outage
Step
Required data, forms, or other tools or information
1
Proper safeguarding of IT equipment during a flood
2
Floor diagram marking pipe diagrams/water shut off valves
3
Building maintenance
4
Emergency contact numbers
14
NewOptMarketing
5
Rel. 1, Ver. 0 4/16/2020
IT contact info
Severe Storm/Tornado causing power outage
Step
Required data, forms, or other tools or information
1
Proper safeguarding information for IT equipment during a severe storm
2
Floorplan showing proper storm safe areas
3
Procedure outlining proper tornado/storm drills
4
Emergency services contact info
5
IT contact info
15.
Notification of incident affecting the site
On-duty personnel responsibilities
If in-hours:
Upon observation or notification of a potentially serious situation during working hours at a
system/facility, ensure that personnel on site have enacted standard emergency and evacuation
procedures if appropriate and notify the EMT, DRT, and or IT team.
15
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
If outside hours:
IT personnel should contact the EMT and DRT.
Provide status to EMT and DRT
Contact EMT, DRT, and/or IT and provide the following information when any of the following
conditions exist:
– Power outage
– Flood
– Any problem at any system or location that would cause the above condition to be present
or there is certain indication that the above condition is about to occur.
The EMT will provide the following information:
·
Location of disaster
·
Type of disaster (e.g., fire, hurricane, flood)
·
Summarize the damage (e.g., minimal, heavy, total destruction)
·
Meeting location that is a safe distance from the disaster scene
·
An estimated timeframe of when a damage assessment group can enter the facility (if
possible)
·
The EMT will contact the respective market team leader and report that a disaster
involving voice communications has taken place.
The EMT and/or DRT will contact the respective NewOptMarketing team leader and report that
a disaster has taken place.
16
NewOptMarketing
16.
Rel. 1, Ver. 0 4/16/2020
Decide course of action
Based on the information obtained, the EMT and/or DRT need to decide how to respond to the
event: mobilize IT, repair/rebuild existing site (s) with location staff, or relocate to a new facility.
Each location will maintain a cold standby facility that is established in each district with links to
each of the data centers.
The IT staff will have to remain mobilized in order to bring cold standby facilities online. When
the facilities have regained online status, The IT Staff can then notify EMT/DRT and the
observed damage assessment done will then be applied following the correct direction in line to
restore all operations.
If at any period the company is unable to continue operation, The management will make a
damage assessment and will then make a decision to secure a temporary contract of all the
facilities in order to re-establish operations. These locations and facilities are to be brought back
online:
1. Philadelphia
a. Company Headquarters
b. Data Center 1
c. Data Center 2
2. Cincinnati
a. Data Center 1
b. Operations Facility
c. Data Center 2
3. Baltimore
a. Data Center 1
b. Operations Facility
c. Data Center 2
Once it is determined if a facility has the possibility of being repaired/brought back online in the
time of two weeks, the cold standby location will be brought online and allow minimal
operations to continue. All customers will be notified that NewOpt Marketing is temporarily
unavailable because of an issue that is causing a delay in operations. NewOpt Marketing is trying
17
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
its best and working hard to bring operations back online as soon as possible. Anticipate a delay
in shipment of orders placed and delivery of all products. As soon as the primary facility is back
to normal operational hours, all operations will continue as usual and the cold standby location
will proceed back to its cold standby state.
If the main facility and the cold standby facility both become damaged, The management will
address these other two cold standby facilities to come online and they will continue the
operations until the damaged facility are able to be brought back online. All employees at the
damaged facility are separated into two cold standby facilities in place. All customers will be
notified that NewOpt Marketing is temporarily unavailable because of an issue that is causing a
delay in operations. NewOpt Marketing is trying its best and working hard to bring operations
back online as soon as possible. Anticipate a delay in shipment of orders placed and delivery of
all products. As soon as the primary facility is back to normal operational hours, all operations
will continue as usual and the cold standby location will proceed back to its cold standby state.
If its determined a facility is not able to be repaired or brought back online past two weeks but
within one year, including the local cold standby facility is also not damaged, all of the cold
standby facilities will be brought online and the operations of the unfunctional facility are to be
dispersed within the cold standby facilities. Employees at the damaged facility will be dispersed
amongst the three cold standby facilities toward the continuation term of operations. Customers
will be notified that NewOpt Marketing has had an issue that has temporarily caused a delay in
operations. NewOpt Marketing is trying its best and working hard to bring operations back
online as soon as possible. Anticipate a delay in shipment of orders placed and delivery of all
products. As soon as the primary facility is back to normal operational hours, all operations will
continue as usual and the cold standby location will proceed back to its cold standby state.
17.
Inform team members of decision
If a disaster is not declared, the location response team will continue to address and manage the
situation through its resolution and provide periodic status updates to the EMT/DRT.
18
NewOptMarketing
Rel. 1, Ver. 0 4/16/2020
If a disaster is declared, the EMT and/or DRT will notify IT Tech Services immediately for
deployment.
Declare a disaster if the situation is not likely to be resolved within predefined time frames.
The person who is authorized to declare a disaster must also have at least one backup person who
is also authorized to declare a disaster in the event the primary person is unavailable.
Contact general vendors

Computer Software Vendors
Computer Hardware Vendors
Utility Companies
Internet Service Company
Security Company
Network Company
18.
Disaster declared: Mobilize incident
response/Technical services teams/Report to
command center
Once a disaster is declared, the DRT is mobilized. This team will initiate and coordinate the
appropriate recovery actions. Members assemble at the designated location as quickly as
possible.
Since we have vicinities in Maryland and Pennsylvania and both locations aren’t too far from
each other, This puts a high possibility that weather or a natural disaster can affect these
locations at the same time, which can present them as unfit applicants for backup comma…
Purchase answer to see full
attachment

Submit a Comment