Business Continuity and Disaster Recovery Plans
This Business Continuity and Disaster Recovery Plan (BCDRP) provide all the necessary information that need to be acted upon in case of a disaster within a pharmaceutical firm to achieve business continuity and disaster recovery. Every business faces risks and uncertainties for disasters.
Disasters that are prevalent in pharmaceutical industries include technical failure of computing and electrical devices, fire, natural calamities and drug shortage. Disasters are classified as those caused by humans and those caused out of natural factors such as fire, tornado, hurricane and floods. Additionally, the disasters can cause long-term or short-term loss impact on the firm depending on its effect. Research claims that most of the drug shortages are as a result of the natural calamities which destroy the raw materials and drugs stored in major pharmaceutical industries for distribution to other businesses. Disasters can also lead to the destruction of facilities such as computing and electric devices and media, thereby halting or completely rendering the pharmaceuticals services non-functional (Ciottone, 2006).
This paper in intended to provide two purposes: firstly to identify all necessary information for pharmaceutical’s ability to tolerate a disaster and secondly, to describe the relevant procedures needed to recover the firm and enhance its continuity in case of a disaster occurrence. The major priority in case of a disaster is to save lives of employees and all other persons within the premises before undertaking the secondary measures. The next objective of this BCDRP will involve returning the business back to normal functioning after bringing the individuals to safety by; ensuring that the business operates after the disaster, preventing loss of Information Technology (IT) resources downtime minimization. The document will also describe its maintenance and testing processes.
This plan accounts for several areas in IT such as Network and system infrastructure, telephony, data backup storages, data input and output devices, database systems, computers, software systems and IT documentations. The document does not consider the personnel, non-IT, employees/human resources, land and building related disasters.
If the need for changes arises, this document should get updated by the recovery team and a copy of it with a version number indicated.
|Person||Role||Date of Change||Version Number||Description|
When a disaster occurs in the pharmaceuticals company, some the IT department will provide assistance to several groups as discussed. First, the disaster recovery lead will be the decision makers, in all efforts pertaining disaster recovery. He/she will function differently from recovery team to ensure that he/she makes unbiased decisions. The disaster management teams, on the other hand, are to ensure that they oversee all the processes in disaster recovery. They are the first to act by evaluating the extent of the disaster and identify the necessary procedures to ensure business restoration and continuity and disaster recovery (Fulmer, 2008).
The facilities team will oversee IT systems and physical assets, ensure they do not get destroyed, assess the extent of damages and manage the repairs after the disaster. The network team is responsible for analyzing damages to network infrastructures such as Local Area Network (LAN) or Wide Area Network (WAN). They may work together with the other IT teams to ensure things get back to normal. Other IT groups include the server (managing ad assessing server status) and applications team who specialize in ensuring that the pharmaceuticals software get protected. Additionally, the company’s data will be in the hands of database and backup team during disaster occurrence and recovery (Goh & Leo, 2004).
The Senior Management Team shall be responsible for other decisions that cannot get achieved by Disaster Recovery Lead such as relocation to the primary site and development of new storage center. The communication teams are responsible for passing information to all individuals during the disaster. They will ensure that all those within and outside, but have the connection with the pharmaceutical company get all communications. The table below shall be used to provide details of the persons involved, their role and contact.
|Person’s Name||Role/Title||Telephone||Mobile Phone||Address|
The firm shall first provide the standby facility that gets needed in case of disaster interruption. A standby facility is a building situated in a different location from the main facility. Since the disaster might hit a location severely, the standby site needs to be situated at a different location whereby which is different from the primary location regarding natural conditions, and infrastructure, if possible. The standby facility should be in use by IT and recovery teams only when the recovery leader states so. The facilities shall have all necessary resources such as parking spaces, bathroom, kitchen, office space, servers and storage facilities and BCDRP copies. The Leaders should provide map location and multiple ways or travel to the standby facilities (Rittinghouse & Ransome, 2005). During the disaster, the recovery teams may need necessary resources to transport them to the standby facilities. The document shall state the transport providers as follows.
|Taxi Company||Contact Phone||Contact Address||Location|
Communication during disaster
This section provides the communication procedures and processes involved in the disaster. The communication teams are the ones involved in this process to ensure that the clients, employees, management, other teams and even media (if possible) get informed throughout the disaster (Watters, 2014).
Firstly, the business situation will get assessed, and further damage will get prevented, and therefore before the employees enter the site, the authorities should analyze to guarantee the safety of the premises. The facilities team is the first team to analyze the situation after it gets pronounced as safe, and later they will submit reports, followed by the Disaster Recovery Lead, Networks, Servers, and Disaster Management teams who will also submit their reports. All the teams must analyze all the areas of their concern while also focusing on how they can prevent further damage and which steps should be taken to protect.
Standby Facility Activation
The facility shall get authorized for activation after the Recovery Lead analyzes and states that the primary site shall not function any longer or shall operate to ensure that the business operations gets sustained. Later on, the team shall be commissioned to ensure that the standby facility is functional once again and later on the Recovery Lead shall meet with other team leaders to analyze the next procedures. The steps include determination of affected systems and their criticality, recovery measures, recovery measures and determination of requirements needed to restore the business (Wallace & Webber, 2011).
When the disaster occurs in the pharmaceutical company, the plan below shall provide the procedures and processes involved during disaster recovery. The section contains information on how to restore the firm back to normal functioning.
The top priority shall get given to the repair of the building before other things. The facilities shall be returned to normal after a variable period, depending on size and impact of the damage. The location of organization’s systems and resources should get identified so that the recovery teams can locate easily and transfer the necessary facilities to the recovery site (Hiles, Noakes-Fry & Hiles, 2014). The IT systems that need to get relocated back to the site are as indicated below. Those that got destroyed by the disaster include:
|Number||IT Facility||Components (ordered)|
During disaster occurrence, some facilities got destroyed, and therefore they need to be bought and replaced. The IT facilities team shall analyze the facilities on their list that were present before the disaster, match the list with the facilities after the disaster, and if there are those that got destroyed, they should be budgeted for and bought.
Additionally, if the buildings were destroyed together with the computing and network infrastructure, the company shall incur a great additional cost that includes planning a new infrastructure and building. The firm shall ensure that its backup and data storages are restored, the employees resume the work, and the firm progresses with the normal functioning (Gustin, 2010).
Plan, Testing, and Maintenance
The information provided in this document is subject to change depending on nature of problems to address even though the document is as accurate and complete as possible. For example, the facilities needed for recovery purposes may need change. Therefore the plan needs to be changed and tested to eliminate errors while addressing them.
The BCDRP will get updated and often upgraded under the supervision of Disaster Recovery Lead. The maintenance includes ensuring that team lists are updated, ensuring that all changes are reflected, organization’s goals are achieved and ensuring that all information are relevant and updated (Snedaker & Rima, 2014).
The pharmaceutical company shall ensure that the BCDRP is functional. It should get tested after five months to ensure it is still operational. The testing processes shall involve parallel testing and walkthroughs. In parallel testing, we perform a test in conjunction with checklist test. In the walkthrough, the testing team shall verbally analyze the effectiveness, weakness, and bottlenecks of the plan (Hiles, 2004).
Ciottone, G. R. (2006). Disaster medicine. Philadelphia: Elsevier Mosby.
Goh, M. H., & Leo, Y. N. (2004). Implementing your business continuity plan. Singapore: GMH Continuity Architects.
Gustin, J. F. (2010). Disaster & recovery planning: A guide for facility managers. Lilburn, GA: Fairmont Press.
Hiles, A. (2004). Business continuity: Best practices: world class business continuity management. Brookfield, Conn: Rothstein Catalog on Disaster Recovery.
Snedaker, S., & Rima, C. (2014). Business continuity and disaster recovery planning for IT professionals. Waltham, MA: Syngress.