Please enable JavaScript.

Coggle requires JavaScript to display documents.

4:16 (1) (Types of Tests (Checklist review (preliminary step to a real…

- - - - Recovery checklists are distributed to all members of a recovery team to review and ensure that the checklist is current
  - - - identify enhancements, constraints and deficiencies.
      - to assess its effectiveness
  - - - most rigorous form of testing but is expensive and potentially disruptive.
- - - - • IT systems
      - • Networks
      - • IT processing sites
      - • Organization structure (headcount, roles, positions)
      - • IT processes and procedures
  - - - when the IT DRP is put to action, which scenarios are covered by the plan
        
        [loss of the IT system, loss of the processing site, loss of the office
    - - (for instance, emergency response plan or crisis management plan or BCPs for different lines of business)
    - - (i.e., where and when the recovery should take place [the same site or backup site], what has to be recovered [IT systems, networks, etc.], the order of recovery)
- - - - • Develop test objectives.
      - • Execute the test.
      - • Evaluate the test.
      - • Develop recommendations to improve the effectiveness of testing processes and recovery plans.
      - • Implement a follow-up process to ensure that the recommendations are implemented.
    - - stretching the objectives and success criteria of previous tests so as to build confidence and minimize risk to the business. figure chaar 6tris
    - - test should be scheduled during a time that will minimize disruptions to normal operations, such as long weekends
    - - • Verify the completeness and precision of the response and recovery plan.
      - • Evaluate the performance of the personnel involved in the exercise.
      - • Appraise the demonstrated level of training and awareness of individuals who are not part of the recovery/response team.
      - • Evaluate the coordination among the team members and external vendors and suppliers.
      - • Measure the ability and capacity of the site to perform prescribed processing.
      - • Assess the vital records retrieval capability.
      - • Evaluate the state and quantity of equipment and supplies that have been relocated to the recovery site.
      - • Measure the overall performance of operational and information systems processing activities related to maintaining the business entity.
    - - Pretest
        
        pretest consists of the set of actions necessary to set the stage
        for the actual test,
        
        transporting and installing required backup equipment, gaining access to the recovery site, accessing recovery documentation, etc
      - Test
        
        test is the real action of the disaster recovery test. Actual operational activities are executed to test the specific objectives of the plan.
        
        Applications are failed over; data entry and business processing should take place.
        
        Evaluators should review staff members as they perform the designated tasks. This is the actual test of preparedness to respond to an emergency.
      - Posttest
        
        cleanup of group activities
        
        phase comprises assignments
        
        restoring the applications back to the
        primary location
        
        returning personnel to their normal locations
        
        returning all resources to their proper place
        
        deleting all company data from third-party systems.
        
        disconnecting equipment
        
        formally evaluating the plan and implementing
        indicated improvements
      - At every phase of the test, detailed documentation of observations, problems and resolutions should be maintained.
        
        serves as important historical information that can facilitate actual recovery during a real disaster.
        
        aids in performing detailed analysis of the strengths
        and weaknesses of the plan.
  - - - Results should be recorded and evaluated quantitatively, as opposed to an evaluation based only on verbal descriptions.
        
        resulting metrics used to improve the plan
    - - • Time
        
        Elapsed time for completion of prescribed tasks.
        
        response time estimated for every task in the escalation process. Was the RTO met?
      - Data
        
        Were all data required data recovered? Was the RPO met?
        
        Was the recovery point aligned (where required) across all inter-connected applications?
      - Amount
        
        Amount of work performed at the backup site by clerical personnel and the amount of information systems processing operations
        
        Does the recovery site allow the required throughput?
      - Percentage and/or number
        
        number of critical systems successfully recovered can be measured with the number of transactions processed
      - Accuracy
        
        Accuracy of the data entry at the recovery site versus normal
        accuracy (as a percentage).
        
        accuracy of actual processing cycles by comparing output results for the same period processed under normal conditions