Immediate Vault Immediate Access

Building Effective IT Disaster Recovery Plans

No matter how well-managed IT infrastructure is, there is always the risk that a tiny hiccup could ultimately turn into a real emergency. Given the increasing reliance on technology tools and access to business-critical data to continue operations, every business should have an effective IT disaster recovery plan in place to minimize disruption when disaster strikes. Risk professionals must consider and plan for this situation with regular testing and run-throughs to ensure that all team members understand the recovery plan and know their responsibilities.

As natural disaster season begins, risk professionals should assess the risks and mitigation strategies in place to minimize disruption and losses. The following tips can help ensure that IT disaster recovery plans are as effective as possible:

Plan in the Risk Management Context

Instead of thinking too much about what a disaster would mean for your company, frame your recovery plan in the context of risks. Start by examining which risks your company faces, and what steps you can take to minimize each one. This will ensure that all teams are fully aware of what the risks are, and how they can make a difference in eliminating potential problems.

Prioritize Communication

Nothing exacerbates a disaster like a communications breakdown, so all good recovery plans should focus on communication. The onset of an IT disaster could impact communication systems, so plan an alternative way of communicating with teams in the event of an emergency. Ensure that all team members know the backup communication method, and that everyone understands who they need to contact to inform them of the situation. 

Protect Data Continuity and Backups

Data continuity planning is critical to minimize losses during a crisis. At its essence, data continuity ensures companies have alternative processes and infrastructure in place to allow key IT operations to remain intact, taking into account both hardware and software. A first step is often to invest in failover systems across multiple locations as well as backup generators and power supplies, and ensuring you keep them all in working order.

Data continuity also involves backing up all important data and storing it in a location away from potential disruption. Methods range from server replication to continuous protection (continually backing up data on a separate server). For data back-ups, businesses often choose disk-to-tape or disk-to-cloud models. Either way, the most crucial element of backing up data is knowing what to replicate and what to leave. Archiving everything available can mean greater expense, but being selective can increase the risk of losing information. The rule of thumb is that, as a minimum, any backed-up data should be capable of restarting business operations from scratch.

Define Acceptable Downtime 

The amount of downtime that a company can feasibly take varies considerably depending on the company’s size and the products or services it provides. Think about how a disaster could affect your company, then decide on the steps that you’d need to take in different potential scenarios. In most cases, a few minutes of downtime rarely constitutes a total disaster, so focusing on recovery plans that can get systems back up and running as quickly as possible will help keep losses as low as possible. Cloud-based technology can be very helpful in such disaster scenarios since data is off-site and services stay operational even if your physical location is impacted.

8 Steps to Create Strong Disaster Management Plans

A core responsibility of any risk professional is planning for any possible disasters your business might face. These could be man-made, such as a data breach or accidents involving machinery, or natural, like a tornado or flood.

Disasters and crises affect different organizations in different ways—one company might consider something a catastrophe, while another may not even notice a change in its workflow. It is important to look at your own business operations and evaluate what you would consider a crisis. Generally, business crises fall into one of three categories:

  1. A danger to the physical safety of employees or customers
  2. Loss of income or means of making income
  3. Events or people negatively affecting your business reputation

In many cases, the crisis may fall into more than one of these categories. An accident in the workplace that is hazardous to employees can impact the company’s income because the factory has to shut down. This can also negatively affect the company’s reputation if it turns out that the company did not provide a safe working environment.

With even the best risk management programs, no organization can avoid all disasters completely. Risk mitigation often comes down to crafting the best plans possible for the moment disaster inevitably strikes. These eight steps can help risk professionals develop strong crisis and disaster response plans:

1. Define The Types of Crises You Could Face: There is not a one-size-fits-all approach to a crisis management plan. Working out what is likely to affect your business specifically can relate to your geography—areas that get hit by severe storms or earthquakes must include those potential disasters, and what knock-on effects they may cause. For example, storms may cause flooding, loss of power, or blocked roads that make it difficult to reach your premises. The type of crisis can also be specific to your industry. Employees in a manufacturing facility are likely at greater risk in a physical disaster than those working in a tax consultancy, for example. Security should also be a consideration. Is your business likely to get robbed of cash or equipment? Do you have high-profile proprietary information that makes you more likely to be the victims of cybercrime?

2. Triggering the Plan: Including levels of urgency in your plan will help people responding to the crisis pinpoint how significant the event is, and how much of the plan must be put into action. A step-by-step approach for specific scenarios can be helpful and cover dealing with man-made and natural disasters in different ways. The risk for each will be unique to the situation and knowing when and how to trigger a response is key. The plan should include how and when to escalate the response should the crisis worsen, as well as how to identify when the crisis has passed. It can be helpful to use red, yellow and green system to indicate severity and urgency, and this classification approach is easy to adapt to any scenario.

3. The Base of Operations Location: Accidents or natural disasters may cause your usual place of business to close temporarily or permanently. In your plan, designate a backup command center in an alternate location for dealing with the crisis until you can get back to work. This location can be your company’s operations hub, a point for gathering after a crisis, or where you know your sensitive and important data backs up. If a natural disaster has made travel dangerous or roads impossible to navigate, you will also need a virtual base of operations—some possibilities include message boards, chat apps or email. With so many employees working remotely because of COVID-19, this may be easier to implement now.

4. The Chain of Command: Ensuring a clear chain of command so that there is no arguing or confusion when people and the business are at risk. Wherever possible, appoint a back-up for each person in charge so if someone cannot perform their duty, it falls to the next in line.

5. Internal and External Communication: When a crisis compromises an office or business, communication can become tricky. Have a clear set of rules for how you get information to and from your employees, what information you must and must not share with those outside of the company, and how to achieve that. This part of your crisis management plan can save lives and stop rumors from spreading.

6. Necessary Resources: Though this will depend on the nature of the business, consider first aid and safety equipment if you are likely to have injuries or get cut off because of poor weather. Also, think about alternate communication methods if mobile phone towers go down or the electricity gets cut, as well as access to your sensitive data, such as employee contracts and supplier agreements.Include all necessary resources you would need to operate and highlight any alternate replacements. For example, if a storm knocks out your power, you may have a generator.

7. Training: It is no good putting a crisis management plan together and not giving the relevant people the training they need to execute it. For example, the people you name as first aid providers or unit leaders need to know what is expected of them and undergo the necessary training. If you have safety equipment on your premises, like fire extinguishers or emergency release valves for machinery, you need to educate all stakeholders how these work.

8. Testing the Plan: Finally, test that your plan actually works. Review it with staff and conduct safety drills regularly—every two months at least. Look for any weak points or flaws in the plan before an actual crisis.While it may not be possible to anticipate everything a disaster brings, you can set up several response plans and test each one individually. These plans can tie in with your standard safety drills, or stand alone, depending on the nature of the event anticipated.

A crisis management plan is integral to every business, no matter its size, scope, or sector. By preparing for various potential disasters, you can take action when needed without putting your organization, employees, or yourself at unnecessary risk. 

Hurricane Laura Leaves Destruction—and Pandemic-Related Recovery Challenges

Hurricane Laura made landfall in the United States at 1 a.m. on Thursday, hitting Louisiana and Texas as a Category 4 storm with maximum sustained winds of 150 miles per hour and what National Hurricane Center officials called “unsurvivable” storm surge. In such ferocious wind, thousands of homes and businesses were damaged or completely destroyed, hundreds of thousands were left without power and, as of Thursday evening, at least four people had been killed.

While forecasters initially expected the storm to lose intensity before reaching land, it rapidly intensified this week, becoming one of only 10 hurricanes to make landfall in the continental U.S. with winds over 150 mph since modern recordkeeping began in 1851. After windspeeds nearly doubled on Wednesday, officials in Texas and Louisiana ordered several hundred thousand people in the storm’s path to evacuate, but many were either unable to leave or chose not to. Increasingly severe storms in the area in recent years may have left some feeling prepared or resigned to ride out the storm.

Others faced difficulties related to the pandemic. As Risk Management recently reported, many experts have expressed concern that the COVID-19 pandemic could significantly complicate hurricane season this year, increasing the risk to individuals and businesses and making disaster recovery more difficult. Ahead of Laura, NPR reported that emergency shelters had a hard time safely accommodating evacuees without overcrowding and had to direct many to hotels. Pandemic-related job losses may have ruled that option out for some. Mayor Nic Hunter of Lake Charles, which was particularly devastated in the storm, told NPR that he “suspects the coronavirus pandemic and economic hardship are leading many people to take pause.” The outlet also reported that experts are concerned that mass evacuations from the hurricane could lead to new outbreaks in the region.

Now, the recovery process will undoubtedly be impacted by the pandemic as well.

“The global health crisis is going to have a major impact on recovery from any major storm, including Hurricane Laura—the stress of natural disaster becomes more intense when it unfolds against the backdrop of a highly contagious viral outbreak,” John Dickson, president and CEO of flood insurance provider Aon Edge, told Risk Management in the wake of the storm on Thursday.

For example, he said, “If you think back to hurricanes like Katrina (which hit about 15 years ago almost to date) and create a mental image, you see the community banding together to respond in close physical proximity. Similar images emerged from last year’s prolonged flooding along the Missouri River. In those and other events, assembly lines formed to fill and deploy sandbags—a task impossible to do six feet apart.”

Dickson noted that technology increasingly used by insurers (also known as risktech) would be more important than ever in responding to natural disasters this year as emergency response must be balanced with safe social distancing practices.

“Smart phones and basic technology can help homeowners achieve the recommended preparation steps and stay safe during a storm,” he advised. “For example, taking pictures and videos with date and time stamps could minimize the need for on-site inspections and physical proximity to claims adjusters.”

For insurance professionals, he noted, “The insurance industry is thinking through very tactical steps to ensure policies and procedures are in place to protect those who are on the frontlines when a hurricane hits. Drone technology offers the opportunity to take photos remotely, and computer models help better quantify risk and manage work forces.”

For more insight and actionable guidance on risk management for hurricanes and other natural catastrophes, including disaster preparedness, recovery and insurance, check out the following pieces from Risk Management:

Before Disaster Strikes: How to Prepare for Natural Catastrophes
How does an organization ensure it is prepared to minimize losses and recover quickly following a natural disaster? Long before a disaster strikes and property damage occurs, the best response plans begin with careful negotiation and placement of well-defined property coverage. Read more

Key Considerations for Disaster Planning
Meticulous disaster response planning has never been more critical. When developing a plan, it is important to involve key stakeholders and review every step that your business, your network and your vendors must take if a natural catastrophe impedes operations. A strong plan should address these key questions. Read more

Weathering Hurricane Season During the Pandemic
Pandemic-related social distancing guidelines and supply shortages could make it harder for business owners to protect their properties should a storm happen, making it even more important to have an action plan in place. These key considerations can help businesses owners mitigate potential storm risks amid COVID-19. Read more

Understanding Post-Storm Business Interruption Coverage
Whether in the impacted area or beyond, businesses suffering from supply chain disruptions after hurricanes and other storms should look to their property insurance policies for contingent business interruption coverage. Read more

Natural Disaster Planning During COVID-19
As the COVID-19 pandemic continues, government authorities and disaster-response entities are over-extended and may not be able to provide assistance as readily this year. It is more important than ever that companies make backup plans and assess the potential impact of shortfalls in their disaster response protocols. Read more

The Human Element of Disaster Recovery
Crisis and disaster recovery plans offer a critical advantage when catastrophe strikes, helping mitigate the impact on facilities, information systems and equipment. Just as important, however, is considering how a disaster can affect the company’s workforce. Read more

Ensuring Insurance Recovery After a Hurricane Loss
These seven tips can help policyholders resolve disaster insurance claims in the wake of hurricanes and other natural catastrophes. Read more

Hurricane Preparation and Recovery Tips for Businesses

hurricane dorian disaster preparation

The first Atlantic hurricane of the season is rapidly approaching the mainland United States, with experts currently expecting Hurricane Dorian to make landfall in Florida on Sunday. For businesses both in the storm’s path and beyond, it is important to take the opportunity to consider how to protect property from hurricane damage before and after storms. The Congressional Budget Office estimates that, on average, hurricane damage costs $54 billion annually, and even at this late date, there is always more businesses can do to try to mitigate such losses and damage to their property and operations.

One of the simplest steps is having an accurate replacement cost and business income valuation. If valuations were conducted previously, consider how long it has been and any significant changes, such as assets or location. It is also important to document the property before a storm arrives, including taking photos and videos, or even using 3D-mapping technology to record a detailed account of an entire space, building or structure. Most importantly, confirm with the insurer that the policy is current and that the terms, conditions, and limits are all well understood.

Creating and practicing a detailed disaster plan is another important step. Business owners can use risk modeling programs, which run a range of potential scenarios digitally to flag issues and create a more holistic plan. If digital modeling is unavailable, walking through or rehearsing plans can help identify potential issues. For example, built-in hurricane shutters are great, but if they are not tested ahead of time and then malfunction in the hours before a storm, it may be too late to find an adequate solution. When tailoring the disaster response plan, also consider the available coverage to limit out-of-pocket expenses after a storm. Coordinating with your insurance professional is the best way to minimize uninsured expenses.

One critical factor for any business disaster plan is how to protect data, including business data as well as plans and building layouts. House these valuable documents in a secure location in case of physical damage to the main data storage unit or computer drives. Insurance companies will likely request very specific information to process any claim, so speak with an insurance company adjuster in advance to determine what types of documents they need for filing a claim, then store those in an easily accessible online portal.

Create a business continuity plan that addresses how to expedite recovery or avoid interruption, potentially including employing an off-site workforce, creating an alternative workspace, and locating backup suppliers.

online pharmacy periactin with best prices today in the USA

It should also always include a communication plan so that key players remain connected.
buy amoxicillin online https://royalcitydrugs.com/amoxicillin.html no prescription

Business owners should engage with critical vendors and emergency responders in advance to assist with loss mitigation, temporary repairs, and restoration. Following a wide-spread catastrophe, these vendors are in high demand and having a preexisting relationship will help.

Once the storm passes, the first step must be communication: contact everyone to address safety concerns and identify their needs. Phone lines and internet service are often unreliable following a storm, and business owners should be prepared to use multiple forms of communication, from texts to emails and applications that use Wi-Fi.

After reestablishing contact, quickly document the damage (ideally in both photos and videos) since demonstrating the extent and cause of loss becomes increasingly difficult over time. Policyholders should notify their broker and insurance company of the loss immediately, and once damage is documented, policyholders must reasonably and with due diligence preserve and protect property and commence restoration while mitigating future risk. For example, if a structure suffers roof damage, but no action is taken to “reasonably and quickly” provide temporary cover, rain damage following the storm may not be covered as part of the storm’s damage.

Finally, it is critical to log all logistical and monetary details.

online pharmacy sinequan with best prices today in the USA

After a hurricane, there may be challenges accessing damaged areas, so retain all notices, civil orders or police mandates concerning any access limitations to later provide the insurance company. An insurance company cannot expect a policyholder to put a tarp on a roof if access was prohibited. Likewise, policyholders should track all expenditures. After a disaster, the price of restoration services can increase dramatically, so acquire and keep multiple estimates of any cleanup, construction, or emergency service needed. Having these estimates will allow policyholders to assert the cost was both reasonable and necessary and receive reimbursement.

Hurricane season is already here but it is not too late to take preparative steps to help protect your business from the often unpredictable effects of storms. The only things business owners can control are the steps to help prevent and recover from damages.