Create an ITDR Recovery Plan

Before creating a new disaster recovery plan, it is important to navigate to your team’s Side Room to ensure that the plan is listed in the correct area.

Navigate to your team’s Side Room:

There are several ways to get to your side room. Options include:
From your Default Home page
  1. Click on the 3 horizontal bars in the upper left-hand corner to open the navigation bar
  2. Towards the bottom of the bar, there is a list of Rooms which you have access to
  3. Search or select your room from the list
Note: your default home page will also show recently visited rooms. Once you visit a room, it will show in this list and you can click into it.
From the Yale University org page
  1. In the org page, Under the list of Rooms in Yale University, select Yale University Disaster Recovery. From here you have options:
    1. Hover over the menu with icons on the left side of the screen and select Side Rooms. Select your room from the list.
    2. In the purple tile on the right side of the dashboard, there is a list of all DR plans and each of their rooms. You can find your room name under the Container column, then click into it.
From a Bookmark in the Navigation bar
  1. Veoci offers the option to bookmark pages so you can easily access them. Once inside any room or dashboard you’d like to bookmark, select the bookmark icon to the right of the name of the room. You can save it under your Bookmarks or the Navigation panel. Both will show up whenever you select the 3 horizontal bar menu icon in the upper left-hand corner of the screen.

Note: On any page in Veoci, there is a search bar in the upper right-hand corner of the screen. You can access your side room by typing its name in the bar and clicking on it.
 
 
 
 

Create an ITDR Recovery Plan

  1. Once inside your Side Room’s dashboard, select the link to Create ITDR Recovery Plan
  2. Select Yes under the first question:
    Do you want to select the Yale ITS Application from the Service Now List?
    Yes
    No
  3. Under IT Applications, select List
  4. In the upper-right hand corner, enter the name of your application in the Filter Entries bar
  5. Click on the Application Name

    This will auto-populate the following fields from ServiceNow:

    Application Name, Short Description, System ID, Recovery Tier, RTO, RPO, Data Classification, and Risk Level

    Example:

    Example of ServiceNow populated fields

Once this is complete, you will have to manually populate the rest of the fields

  • Plan Type: Choose based on descriptions
  • Data is Subject to Regulatory or other External Obligations: (e.g. HIPAA or FERPA)
  • Is Application Monitored: Yes or No & specify which tools you are utilizing / any necessary details (e.g. host monitoring in Dynatrace)
  • Plan Owner: Service Owner in ServiceNow
  • Plan Writer: Service Offering Manager in ServiceNow (select Me to the right of the box to fill your information in)
  • Responsible Group: in the upper-right hand corner, enter your team/department in the Filter Entries bar. Select your team.
  • Is Plan Approved: Leave as No -Once submitted, Plan Owner will approve
  • IT SYSTEM SECURITY PERIMETER, PRE-REQUITES AND ASSUMPTIONS: Enter any facilities and Pre-requisite DR plans
  • RECOVERY DOCUMENTATION and PROCEDURES: Upload any important documents (Architectural Diagrams, SOPs, User guides, External resource links). Include details for recovery procedures
  • TEAM ROLES AND RESPONSIBILITIES: Identify team members and team leader. Add text details for responsibility during a disaster. (e.g. steps to take, who to contact)
  • COMMUNICATION METHODS AND CONTACTS: Not all of these need to be filled out. Only fill out necessary people to contact when there is a disaster.
    • Specify other ways to communicate
    • Add Internal Contacts (Yale staff)
    • Add External Contacts (Vendor, support, etc.)
    • Add Stakeholder Contacts (Users)
  • ASSESSMENT CONSIDERATIONS: This section only needs to be filled out if you have servers/devices/databases that need to be backed up or have data retained. Identify the device(s) and then list steps to take. 
  • DR PLAN GAPS, VALIDATION INFORMATION & LESSONS LEARNED: This section is meant for documenting details of any tests or run-throughs of the DR plan.