Walton Hi-Tech Industries PLC.

Disaster Recovery Planning (DRP)

VERSION HISTORY

VERSIO REVISION
APPROVED BY DESCRIPTION OF CHANGE AUTHOR
N DATE

V01
Mohammad 30-Jun-22 First Revision Ali Abbas
Elhamul Islam
Introduction
In the case of IT system, what we mean by disaster is the partial or complete shutdown of IT system or
service due to technical, man-made or natural disaster. Nowadays all organizations are dependent on IT
system services due to which any kind of disaster can disrupt the normal operations of the organization
and stop it completely. For this reason, there should be a detailed policy on how to recover from any type
of disaster. The policy will detail what to do after a disaster and who will be responsible for what.

Risk and Business Impact

In many Disaster Recovery Planning (DRP) projects, IT is responsible for determining the value and
criticality of all data, software, and hardware. Accurate assessments, however, cannot occur unless IT
communicates with the business owners of those assets. In order to fully assess the risks to assets from a
disaster, it is imperative to conduct a Risk and Business Impact Analysis (RBIA). This research note
proposes an analysis of:
• Risks that the business faces outside of the technical arena. Outside influences may include
equipment failure, fire, power outages, physical security breaches, flood, storms, civil unrest, terrorism,
sabotage, and labor disputes.
• Risks with regard to technical aspects of the business. This includes penetration testing and
vulnerability assessment.
• Dollar impact of disasters. Recovery is a business issue, so this exercise focuses on the business
units of the enterprise.
While technology is certainly involved, the bottom line is the cost associated with an interruption of
service and the impact it has on the business. A well-crafted RBIA provides justification for the
expenditures necessary for developing a thorough DRP.

Aspect of Walton Hi-Tech Industries PLC

Walton Hi-Tech Industries Plc is a technology driven company where all operations are controlled
through software so any kind of IT disaster will severely disrupt the normal operations of the company
and may even bring it to a standstill. In this situation, the necessity of Walton Hi-Tech Industries Plc's IT
Disaster Policy is unquestionable. A company's IT disaster policy depends on the company's system
infrastructure and should be policed accordingly.

System infrastructure of Walton Hi-Tech Industries PLC

We will now give a brief description of the company's system infrastructure as part of Walton Hi-Tech
Industries Plc's IT Disaster Policy. All systems of Walton Hi-Tech Industries Ltd. are operated from
different independent data centers. Which are located in three different locations namely Chandra
Headquarters 01, Chandra Headquarters 02 and Dhaka Corporate Office Data Center. The mentioned data
centers are being used as DC, NDC and DR. It can be mentioned here that the databases used with the
three data centers are automatically synchronized with each other with the help of the latest technology in
a very short time. Also a backup of the entire system is kept once a day at a specific time.
According to the IT system infrastructure of Walton Hi-Tech Industries Plc we can divide the possible
types of disasters into the following categories.

1. The main data center or DC is affected.

2. Main data center or DC and NDC both are affected.
3. At the same time, three data centers are affected.
4. If backup storage is affected.

We will now describe what to do for the above three types of disasters.

1. The main data center or DC is affected.

Recovery Point Objective (RPO)

If for any reason our main data center i.e. DC is affected or shut down then our primary objective is to
start the nearest data center i.e. NDC. Since the data is automatically synchronized with DC and NDC, it
is possible to restart our system normally without any data missing.
 Recovery Time Objective (RTO)

Launching all services from NDC datacenter within minimum 10 minutes to maximum 30 minutes.
Implementing Officer & Responsibilities

SL Officer Name Section Responsibilities

Mohammad Elhamul Islam System Infrastructure &
1 Monitor overall process.
(47591) Cyber Security
Launching of services from NDC in
Md. Yousub Hasan Biswas coordination with concerned support
2 DBA
(2658) vendor representatives in a timely
manner
System Infrastructure &
3 Debabrota Gain (43035) Ensure of necessary servers and storage.
Cyber Security
System Infrastructure &
4 Md. Ashekur Rahman (28053) Ensure of necessary core networks.
Cyber Security
Walton Software Check system status and confirm to
5 Utpal Bhowmick (11156)
Development system administrators.
Check system status and confirm to
6 Md. Ali Abbas (12977) Oracle EBS
system administrators.
Mohammad Shiblee Sadique Check system status and confirm to
7 Oracle EBS
(10267) system administrators.
Ensure of necessary access networks
8 Amish Barua (7262) IT Support & Services
and user feedback.
Ensure of necessary access networks
9 Md. Shamim Reza (13522) IT Support & Services
and user feedback.
2. Main data center or DC and NDC both are affected.
Recovery Point Objective (RPO)

If for any reason our main data center i.e. DC and NDC both are affected or shut down then our primary
objective is to start all services from Disaster Recovery Site (DR). Since the data is automatically
synchronized with DC,NDC and DR it is possible to restart our system normally without any data
missing.

 Recovery Time Objective (RTO)

Launching all services from DR Datacenter within minimum 30 minutes to maximum 50 minutes.

Implementing Officer & Responsibilities

SL Officer Name Section Responsibilities

Mohammad Elhamul Islam System Infrastructure &
1 Monitor overall process.
(47591) Cyber Security
Launching of services from DR in
Md. Yousub Hasan Biswas coordination with concerned support
2 DBA
(2658) vendor representatives in a timely
manner
System Infrastructure &
3 Debabrota Gain (43035) Ensure of necessary servers and storage.
Cyber Security
System Infrastructure &
4 Md. Ashekur Rahman (28053) Ensure of necessary core networks.
Cyber Security
Walton Software Check system status and confirm to
5 Utpal Bhowmick (11156)
Development system administrators.
Check system status and confirm to
6 Md. Ali Abbas (12977) Oracle EBS
system administrators.
Mohammad Shiblee Sadique Check system status and confirm to
7 Oracle EBS
(10267) system administrators.
Ensure of necessary access networks
8 Amish Barua (7262) IT Support & Services
and user feedback.
Ensure of necessary access networks
9 Md. Shamim Reza (13522) IT Support & Services
and user feedback.

3. At the same time, three data centers are affected.

Recovery Point Objective (RPO)

Having three different data centers hit or shut down at the same time is a rare occurrence, yet we need to
factor this into our planning. If any such incident ever occurs in which our three data centers are unable to
operate simultaneously, then our primary objective is to start our backup services on a priority basis as
per the Business Impact Analysis report. In this case, there is a possibility of missing data from the time
of backup to the time of disaster. However, in the case of such a big disaster, we have to accept this.
 Recovery Time Objective (RTO)

In case of such a major disaster, we will take minimum 12 hours to 24 hours to start all services from the
backup system.
Implementing Officer & Responsibilities

SL Officer Name Section Responsibilities

Provide related approval of all necessary
1 Management Committee NA
activities and services.
Mohammad Elhamul Islam System Infrastructure &
2 Monitor overall process.
(47591) Cyber Security
Mohammad Mohasin Sarder Supply Chain
3 Purchase emergency instruments..
(30679) Management
Launching of services from NDC in
Md. Yousub Hasan Biswas coordination with concerned support
4 DBA
(2658) vendor representatives in a timely
manner
System Infrastructure &
5 Debabrota Gain (43035) Ensure of necessary servers and storage.
Cyber Security
System Infrastructure &
6 Md. Ashekur Rahman (28053) Ensure of necessary core networks.
Cyber Security
Walton Software Check system status and confirm to
7 Utpal Bhowmick (11156)
Development system administrators.
Check system status and confirm to
8 Md. Ali Abbas (12977) Oracle EBS
system administrators.
Mohammad Shiblee Sadique Check system status and confirm to
9 Oracle EBS
(10267) system administrators.
Ensure of necessary access networks
10 Amish Barua (7262) IT Support & Services
and user feedback.
Ensure of necessary access networks
11 Md. Shamim Reza (13522) IT Support & Services
and user feedback.

4. If backup storage is affected.

Under our current management of IT system infrastructure if our all data centers including backup sotage
systems are affected or destroyed in some way, it is not possible to continue our ongoing services,
although this will be a very rare event. In this case, subject to the approval of our respected management,
at least one backup may be kept at a different location in the data center of a national or internationally
recognized company so that we can restart our system services from the said backup.