Disaster recovery planning checklist.

While some disasters can't be prevented most be anticipated. This checklist should help your organizations prepare for disasters systematically.

STEPS TO TAKE

* Appoint a disaster recovery chairperson with the authority to act in the event of any major disaster and a committee to work with him or her to determine the strengths and weaknesses in each area of the office.

* Prepare a list of appropriate emergency telephone numbers and distribute it to each employee. Be sure to include police, fire, medical emergency and utility company telephone numbers.

* Arrange a cardiopulmonary resuscitation (CPR) demonstration and first-aid courses. Contact your local Red Cross for assistance. If an in office demonstration is not possible, send two or three employees, from different departments and shifts, to receive such training.

* Conduct an annual company disaster plan meeting. Brief employees on the procedures they should take in the event of a disaster. If possible, a fire or earthquake drill should be a part of this meeting.

* Make sure insurance covers office equipment, software and key employees and that it is adequate.

* Maintain a current list of data processing hardware and software. Such a list is important for insurance purposes and will assist the company in preparing for the contingency of off-site processing.

* Back up data files routinely and test the back-up media periodically.

* Develop a relationship with a local computer hardware vendor. Many vendors are willing to provide loaner hardware at little or no cost in the event of a disaster. Such a relationship can speed recovery from hardware failure or loss.

* Locate two or three possible areas off the premises where temporary operations could resume for a limited time in the event of a disaster. Such locations could be in a mobile trailer, hotel room or other suitable place.

GENERAL GUIDELINES 

* The disaster recovery committee should have a list of employees with home addresses and telephone numbers.

* Employees should be able to contact members of the disaster recovery committee in case of emergency. This could be accomplished by telephone or, in the event of phone or power failure, by reporting to a designated location.

* Committee members should maintain a current list of outside sources whose services would be used in the disaster recovery process (for example, computer vendors and the telephone company).

* The committee should communicate bimonthly, or more often if necessary, to determine how the acquisition of new equipment affects its plans.

This checklist was adapted from the American Institute of CPAs information technology division's practice aid Computer Disaster Recovery Planning Guide.