SACRAO 2012T2.08 Technical Disaster Recovery

2012 SACRAO

National Park Community CollegeHot Springs, AR

4,156 Students231 Faculty and Staff173 Adjunct Faculty

Dr Allen B MoodyAssociate Dean for Academic Affairs

bmoody@npcc.edu

Rich Mountain Community College

April 9, 2009

Rich Mountain Community College • Classes at the Mena campus resumed at Rich Mountain Community

College April 20, 2009 – 11 days later. • 70% of classes could be held on campus. Rich Mountain is using two

separate locations for the other thirty percent of classes. • Chancellor Wayne Hatcher reported that the Arkansas Disaster

Insurance was providing excellent coverage with up to eighty percent or more coverage of expenses for damage.

• ADHE has requesting additional funds through the Federal Stimulus program.

• AATYC member colleges have helped the campus with its immediate classroom/computers needs and related staff support.

• The biggest concern at the present time is for the faculty/staff and students that suffered due to the tornado. Eight (8) faculty/staff members lost their homes and belongings. We are not sure of the total number of students that suffered a loss.

• Rich Mountain is committed to providing counseling to those faculty/staff and students in need.

• Rich Mountain has set-up a task force of four (4) to five (5) individuals to coordinate the efforts to collect furniture and other necessary supplies for those that lost everything in the storm.

2009 LegislationThe Arkansas Campus Security Enhancement

ActTask Force Timeline

2009 2011

Aug.19, 2009First Meeting at ADHE

Sep.1, 2009Task Force to Receive Safety Plans From Each Institution For Review

Sep.1, 2010Provide Written Review &

Guidelines

The Task Force shall meet at least quarterly;

The Task Force shall cease to exist by December 31, 2010

Has an Emergency Plan been developed for each of the following emergencies:

32%

36%

49%

56%

63%

81%

85%

92%

100%

100%

0.0% 50.0% 100.0%

Pandemic Flu

Campus Sponsored Mass Transportation/Accident

Flood

Earthquake

Threat of Terrorism

Hazardous Materials

Active Shooter

Bomb Threat/Explosion

Fire

Tornado

0102030405060708090

100

Email Website TextMsg

PASystem

Reverse911

Methods to initiate campus-wide emergency notification (%)

Need a continuity of operations plan

Step One: Policy

• Without policy, having technology in place is pointless

• What policies are needed?– Campus emergency response plan– Information Technology emergency response plan– Departmental emergency response plan

Campus Emergency Response Plan• Public document usually maintained by Campus

Police/Public Safety/Security department• Includes public versions of all departmental and

administration wide disaster recovery plans• Details the following, at a minimum:

– Definition of “major” and “minor” emergencies and “disaster”

– Roles of all of the major players– Emergency response command center– Who is authorized to respond to news media– How rebuilding after an emergency/disaster will be

handled– Training and rehearsal

• Reviewed annually

What is Data?• Paper records• Digital records• All that stuff you have in your head but never

put on paper• How is it stored?

– Filing cabinets, cardboard boxes, under the coffee cup

– CD/DVD– Hard drive– Network storage– “The Cloud”

Replication of data to an off-site location, which overcomes the need to restore the data (only the systems then need to be restored or synchronized). This generally makes use of storage area network (SAN) technology

Replication of data to an off-site location, which overcomes the need to restore the data (only the systems then need to be restored or synchronized). This generally makes use of network attached storage (NAS) or storage area network (SAN) technology

NAS vs. SAN• NAS = Network Attached Storage

– External hard drive connected to a network– Small hard drive array connected to a network– Accessed via a network drive icon on the computer– NOT an enterprise level solution

• SAN = Storage Area Network– Large storage array– Used by servers– Users don’t even know it’s there– Very expensive, massive storage capacity

Cloud StorageHigh availability systems which keep both the data and system replicated off-site, enabling continuous access to systems and data

Online backup systems are typically built around a client software program running a schedule, typically once a day, and usually at night. The program collects, compresses, encrypts, and transfers the data to the remote backup service provider's servers

Online backup systems are typically built around a client software program running a schedule, typically once a day, and usually at night. The program collects, compresses, encrypts, and transfers the data to the remote backup service provider's servers

“The Cloud”

Phase I – Analysis and EvaluationInclude timeline, resources, and expected outputRisk Assessment and Business Impact Analysis Onsite and Offsite Backup and Recovery ProceduresAlternate site location selection

Phase II – Plan Development and TestingDevelopment of Disaster Recovery PlanTesting the planImplementation of the DRP

Phase III – Monitoring and MaintenanceMaintenance of the Plan through updates and reviewPeriodic inspection of DRPDocumentation

Immediate Reaction for the Office Evacuation of the Facility Secure critical data Gather all work in process and all unprocessed workKey personnel to assist in evacuation List of disabled, pregnant, individuals or those who have medical problems Gather at a Pre-Determined location Department head counts Notification of missing staff Remain in location until called upon for disaster relief or released

Recovering from a Disaster