Fill in the table below to capture this information. Note that the columns with grey backgrounds contain information that was captured in the previous step. Time Sensitivity Dep’t Service Supporting IT Safety/ Financial Operations Reputation Regulatory/ Services or Human Legal/ Applications Life Contractual Finances Payroll SRB Financial Minor Major Major Moderate Major 24 hours 24 hours Services Step 2.3: Assess Risks Document the known risks that could cause disruptions to IT services, applications and processes. For example, a server room that does not have a backup source of power will mean that services will not be available during a power outage. Specify the implications if the risk occurs and whether or not a strategy needs to be developed to address the risk. Fill in the table below to capture this information. Note that the columns with grey backgrounds contain information that was captured in previous steps. Process Supporting IT Services or Department Implications Need Strategy to Address? or Service Applications Finance information will No backup power Yes, make plans to install a Finances Payroll SRB Financial Services not be available if there supply backup generator is a power outage Step 2.4: Classify and Prioritize The next steps is to classify and prioritize IT Services based on need and criticality. Fill in the table below to capture this information. Include core IT services that other IT services or applications depend on in order to function under the “Dependencies” section of the table. For example, the financial services application in the first line below depends on Network Infrastructure and SuperNet in order to function.
Fill in the table below to capture this information. Note that the columns with grey backgrounds contain information that was captured in the previous step. Time Sensitivity Dep’t Service Supporting IT Services or Applications Safety/ Human Life Financial Operations Reputation Regulatory/ Legal/ Contractual Finances Payroll SRB Financial Services Minor Major Major Moderate Major 24 hours 24 hours Step 2.3: Assess Risks Document the known risks that could cause disruptions to IT services, applications and processes. For example, a server room that does not have a backup source of power will mean that services will not be available during a power outage. Specify the implications if the risk occurs and whether or not a strategy needs to be developed to address the risk. Fill in the table below to capture this information. Note that the columns with grey backgrounds contain information that was captured in previous steps. Department Process or Service Supporting IT Services or Applications Implications Need Strategy to Address? Finances Payroll SRB Financial Services No backup power supply Finance information will not be available if there is a power outage Yes, make plans to install a backup generator Step 2.4: Classify and Prioritize The next steps is to classify and prioritize IT Services based on need and criticality. Fill in the table below to capture this information. Include core IT services that other IT services or applications depend on in order to function under the “Dependencies” section of the table. For example, the financial services application in the first line below depends on Network Infrastructure and SuperNet in order to function.
3-it-disaster-recovery-workbook-and-template.docx