As a part of virtually every regulatory environment enforceable today, companies should have a solid plan in place to account for disasters and to function smoothly in a worst case scenario. Additionally, larger companies are required to ensure that their vendors have solid plans in place as well as testing those plans.
What exactly is Disaster Recovery and Business Continuity (DR\BC)? It's the plan that details what a company is going to do should situations occur that could possibly result in a negative impact to the company. This plan should cover as many aspects of possible disasters but also be realistic to what actual disasters can affect the company. For example, if a company is based in Phoenix, Arizona (the desert) then that company likely doesn't need to care about hurricanes or tsunamis. Conversely, a company in Canada likely doesn't need to concern itself with sandstorms.
Good DR\BC plans will cover various phases of incidents, escalation protocols, activation protocols, communications, records management, testing and apply the plan to possible incidents that could affect the company.
Additionally, a good company company will want to test the DR\BC plan at least annually as well as constantly refine the plan for accuracy and relevancy. One area that is often overlooked is the addition of subordinate companies or vendors that the company depends upon and the importance of their inclusion and participation into the plan. By testing and revising the plan, companies have the ability to determine necessary changes as well as put remediation activities into place that can greatly reduce risk.
Arrakis has been creating and implementing DR\BC plans for numerous companies of all sizes as well as support testing of the plan to help tease out improvements to the plan. Lastly, Arrakis can be a trusted advisor during a companies disaster situation to help reduce risk.
Another area commonly requested by Arrakis clients is to implement technical measures so companies will be better prepared should the DR\BC plan is activated. Implementing the Arrakis custom VPN solution or the using our Desktop as a Service (DaaS) can be a huge risk reducer in a variety of areas including when disasters aren't occuring.