STANDARD OPERATING PROCEDURE Computer Systems Disaster Recovery Plan Author Doc No.: SOP 319 CN Supersedes: N/A Version: Rev. 1.01 Page 1 of 4 Area Management Approval Sheng Lu, IT Supervisor Signature Date QA Approval John Ding, IT Manager Signature Date Effective Date Jianming Liu, Director QA Signature Date REVISION HISTORY Version Rev. 1.01 Revision Date 27-July-2012 Action Initial Release STANDARD OPERATING PROCEDURE Computer Systems Disaster Recovery Plan Doc No.: SOP 319 CN Supersedes: N/A Version: Rev. 1.01 Page 2 of 4 1. Purpose
To establish a disaster recovery plan for ensuring the continuity of work in the event of natural or man-made disasters at K&L’s Nanjing IT Facility.
2. Scope
It is very important for Information Technology Department (IT) members to perform computer system backup and restoration to ensure the availability and reliability of business data.
This Standard Operating Procedure (SOP) Applies to all hardware, business data, and software (The Nanjing Facility produced and/or vendor-supplied).
3. Glossary None
4. References None
5. Responsibilities
None
6. Procedure
6.1 Server Data Backup
6.1.1 Data Backup of the primary server is performed on a daily basis. The backup includes all data and system profiles contained in the primary server.
6.1.2 All data will be saved daily to company’s two external hard drives in Nanjing office. One hard drive is located in IT office in the same building as the Primary Server Room located.
6.1.3 The other hard drive back-up of the same data information is kept in a secured box in the Backup Server Room, which is located in the different building of the IT office.
6.2 Backup Server prepared
STANDARD OPERATING PROCEDURE Computer Systems Disaster Recovery Plan Doc No.: SOP 319 CN Supersedes: N/A Version: Rev. 1.01 Page 3 of 4 A backup server must be prepared for the potential disaster. It is located outside office building where the primary server-room is located. The backup server property must be close to the primary.
The room which contains the backup server must be air-conditioned and connected to Internet. It is necessary to provide UPS, fire extinguisher and software.
6.3 Disaster Recovery Procedure Testing
6.3.1 A separate workstation with sufficient storage is designated for disaster recovery procedure testing.
6.3.2 Backup data is restored onto the designated test workstation.
6.3.3 After total restoration on test machine, the Primary Server is temporarily disconnected. The designated test workstation is connected to the network, simulating the Primary Server.
6.3.4 Individual workstations will access the simulated server and test the data that was restored.
6.3.5 In the event of corruption of restored data, the System Administrator will trouble-shoot the source of error in the backup process and identify appropriate steps to remedy the process. The remedy will in turn be subject to Restoration Procedure Testing.
6.3.6 Restoration testing is conducted quarterly.
6.4 Disaster Recovery Plan
6.4.1 Disaster assessment. Immediately after the disaster, IT department starts to do assessment of destruction into the following four levels: individual server level, server
room level, building level. Recovery procedure will be planned according to different level.
6.4.2 At individual server level, provision shall be made for the continuation of business processes on the undamaged server within two hours. Such computers shall have backup and restore capabilities as well as Internet communication facilities.
6.4.3 At server room and building level, provision shall be made for the continuation of business processes on a backup server at a separate location. Such computers shall have
STANDARD OPERATING PROCEDURE Computer Systems Disaster Recovery Plan Doc No.: SOP 319 CN Supersedes: N/A Version: Rev. 1.01 Page 4 of 4 backup and restore capabilities as well as Internet communication facilities. The latest data backup is reserved in a secured box at the same location and will be loaded onto the backup server within two hours.
6.4.4 Steps will be undertaken to procure new machines to replace the non-operational machines. Steps will be undertaken to obtain mirror images of the data of the non-operational machines. Those machines will borrow from business partner.
6.4.5 In the event of data loss, steps will be undertaken to replace the data that was lost due to the disaster by re-entering data. Steps will be undertaken to retrieve as much of the information that was lost due to the disaster.