Intelligent CIO Africa Issue 53 | Page 46

FEATURE : DISASTER RECOVERY

Disaster planning in the wake of increased threat vectors

Typically , Disaster Recovery planning involves an analysis of business processes and continuity needs . Before generating a detailed plan , an organisation often performs a Business Impact Analysis ( BIA ) and Risk Analysis ( RA ), and it establishes recovery objectives . Industry pundits share with us insights and look at a step-by-step plan , precautions organisations should take to minimise the effects of a disaster .

A

Disaster Recovery ( DR ) plan is a documented , structured approach that describes how an organisation can quickly resume work after an unplanned incident . A DR plan is an essential part of a Business Continuity Plan ( BCP ). It is applied to the aspects of an organisation that depend on a functioning IT infrastructure .
A DRP aims to help an organisation resolve data loss and recover system functionality so that it can perform in the aftermath of an incident , even if it operates at a minimal level . The step-by-step plan consists of the precautions to minimise the effects of a disaster so the organisation can continue to operate or quickly resume mission-critical functions .
As cybercrime and security breaches become more sophisticated , it is important for an organisation to define its data recovery and protection strategies . The ability to quickly handle incidents can reduce downtime and minimise both financial and reputational damages . Furthermore , DR plans allow organisations to ensure they meet all compliance requirements , while also providing a clear roadmap to recovery .
Nasser Bostan , Head , Security Sales , Middle East and Africa , BT , said since the onset of the pandemic companies , regardless of size and industry or sector , have made changes across virtually all areas of their infrastructure . Bostan said this rapid shift towards more digitally-led processes have seen gaps emerge in their cybersecurity posture .
He said while the cloud has injected organisations with work from anywhere capabilities , the more prevalent its use and the more disparate the workforce have become , the more operational risks emerge that directly impact on the efficacy of Disaster Recovery solutions . “ Disaster Recovery is no longer just about the data , systems and processes that are in place , but must account for individuals who are accessing the network environment from virtually any devices and geographic location ,” he said . “ This has changed the risk profile of a company that must now treat remote employees as individual network endpoints . Now , more than ever , key organisational data is stored on and accessed from the cloud . In addition to the risks this can create , it also creates confusion about where data is stored , whose responsibility it is to safeguard it and how policies must be updated to reflect the ‘ new normal ’”.
Muhammad Khaled , Senior Solution Engineer , Middle East , Acronis , said while the COVID-19 pandemic affected people , it also prompted a heavier reliance on technology than ever before : “ We may never see anything like COVID-19 again , but the effects on IT will likely be long-lasting . Businesses pivoted almost immediately to remote work and online e-commerce ,” he said . “ In the case of remote work , business-related devices moved outside of the regular IT infrastructure , creating a whole series of planning scenarios that IT departments may not have previously considered , including but not limited to : maintaining regulatory compliance , backup and recovery of remote devices , protecting the supply chain , changes in documentation , automation and
46 INTELLIGENTCIO AFRICA www . intelligentcio . com