Establish
IT Disaster Recovery
Plans to Support the Business
Commentary
With the increasing reliance on IT within the aged and community care industry
it is appropriate to ensure that the risk of losing IT services is covered from
a organisation / service and corporate perspective.
Actions
Develop and implement
information technology (IT) security and electronic data storage systems,
ensuring that the retrieval of information in the event of a disaster is assured.
These should include:
Daily information
technology storage back-up systems, either on a disc or remotely on a
server (these should be documented in job descriptions and duty lists
for those services that have systems that are manually initiated, or routinely
reported and recorded for those systems that can be programmed to self
initiate).
If this information
is stored on a disc or CD, ensure it is securely stored in a fireproof
area and accessible to key staff in the event of an emergency.
If information is
stored on a disc or CD, ensure the service has access to a functioning
laptop and portable printer (which are also stored in a fireproof area),
to facilitate retrieval of this information.
Ensure that remote
stored information technology data is accessible in the event of an emergency
(ensure key personnel know who to contact to access this, or what sites/locations
to go to facilitate this).
Maintenance of computer
server systems, to ensure reliability and data storage capabilities.
Ensure anti-viral
software and maintenance systems are operational, to protect the corruption
of data.
Ensure IT data accessing
security systems are robust, and are reactive to personnel changes.
Limit IT data access
to relevant roles with associated key areas/pathways.
An information technology
disaster recovery procedures should include:
Who is responsible
for initiating the retrieval, and who coordinates the resources associated
with this.
Location and contact
details of the external source/s of IT backups.
Accessing of computer
equipment and resources to facilitate the use of the data, which has been
backed up.
Process for remote
back up of new information stored within the IT system, in the course
of the emergency.
Security measure
and storage requirements for transportable IT systems.