1) You have been hired by a midsized manufacturing organization with multiple satellite facilities located throughout the US. You work at the primary facility located in Charlottesville, VA, and were hired because you have expertise in the area of security with special knowledge of disaster recovery planning. Overall, employees work between the hours of 7 AM and 8 PM EST (individual employees each work 8 hour days, but they are spread across several time zones), Monday through Friday. A set of local file servers are hosted at their primary facility in an on-premises data center. All the key organizational data, including customer, vendor, and inventory records, and their research and design and development records, are stored in the data center. Each Friday evening the satellite facilities perform a full data backup to the data center via a T1 leased line. The primary facility performs a single full back up each Saturday night that includes the data received from the satellite facilities. A rolling six months’ worth of weekly backups are maintained at all times and are stored on site. Senior management wants to protect against the most likely disaster, which has been determined to be a fire that would destroy all equipment inside the building but not cause significant structural damage, and have a replacement cost of $2 million. The estimated recovery cost due to such a fire is $750,000, and a fire of this magnitude may occur once every 50 years.

Answer the following questions and use all of these terms (use each at least once):

Maximum Tolerable Downtime, Recovery Time Objective, Recovery Point Objective,

Maximum Recovery Time, Mean Time to Recovery, Redundancy, Fault Tolerance,

System Resilience, Exposure Factor, Annualized Rate of Occurrence, and Annualized

Loss Expectancy.

Do NOT assume that senior management at your new employer will understand these terms, so be sure to explain them.

a. What are the two most common backup strategies, why might one be selected over the other, and how are they superior to the current backup strategy?

b. Similarly, what are the three data center recovery site options most commonly used within a disaster recovery plan, and how might one be selected over the other?

c. Based on the scenario details, what backup strategy and recovery site option

do you recommend for this company? Justify your answer.