download

Matakuliah : A0214/Audit Sistem Informasi
Tahun
: 2007
Pertemuan 23-24
AUDIT METHODS AND TECHNIQUES FOR OPERATIONS
Bina Nusantara
DISASTER RECOVERY PLAN
• To help a business recover in the wake of an event that disrupts
normal business operations.
Bina Nusantara
Audit of DRP Steps
1.
2.
3.
4.
5.
6.
7.
Bina Nusantara
Steps put in writing
Hot site/cold site selected
Full and incremental system backups made on a daily or weekly basis
Data backed up
Test and drills scheduled
Data and system backups stored off site
Disaster recovery chairperson and committee appointed
Audit of DRP Steps
8.
9.
10.
11.
12.
13.
14.
Bina Nusantara
Emergency telephone number listed
Critical applications identified
Operating system, utilities, and application files backed up
Insurance coverage in place
Communication plan made
13. Up to date system and operation documentation confirmed
Employee relocation plan made for alternate work site
Audit of DRP Steps
15.
16.
17.
18.
19.
20.
21.
Bina Nusantara
Food and water stocked
Key personnel positions baked up
CPR/first aid education in place
Care planned for families in an emergency
List made of hardware and software
Mission statement drawn up for disaster recovery plan
Contractual arrangements signed with cleanup crew to remove debris
DRP Tests
• Begin testing by using desk checks inspections and walk-through
• A disaster can be simulated at a convenient time. Personnel also
might be given prior notice of the test so they are prepared
• Simulate a disaster without warning
Bina Nusantara
Recovery process of the data warehouse
•
•
•
•
Identifying that the database is in an erroneous, damaged, or crashed state
Suspending normal processing
Determining the source and extent of the damage
Taking corrective action like :
– Restoring the system resources to a useable state
– Correcting the damage or removing invalid data
– Restarting or continuing the interrupted process, including the reexecution of
interrupted transactions
• Resuming normal processing
Bina Nusantara