• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Protection of Information Assets

Temple University

Protection of Information Assets

MIS 5206.951 ■ Summer 2026 ■ Kelly McKain-D'Andria
  • Welcome
  • Instructor
  • Syllabus with Readings (Start reading now!)
  • Team Project Preparation

Question 1

April 29, 2025 by Kelly McKain-D'Andria 28 Comments

What is a disaster recovery plan?  Why is it needed?

Filed Under: 3c: Business Continuity and Disaster Recovery Tagged With:

Reader Interactions

Comments

  1. Changyang Sui says

    June 11, 2025 at 3:56 am

    disaster recovery plan enable the entity to recover lost data and to recover computer operations from a loss of data. At the low end of need, the entity may experience a data loss (e.g., corrupted data) and simply need to restore a backup of data. At the high end of need, the entity may experience loss of computer operations and more, from a pandemic event (e.g., fire, flood, tornado or hurricane). Entities that have a high risk regarding backup and recovery include, at least, those that rely heavily on IT and data to conduct business, operate solely online (e-commerce) and operate 24/7. More than likely, all Fortune 1,000 enterprises are at a high risk.

    Log in to Reply
  2. Xinran Wu says

    June 16, 2025 at 9:42 am

    The purpose of the computer operations piece of a backup and recovery plan is to recover from a broad, adverse effect on the computer systems of the entity. it may be necessary to restore everything about the infrastructure: computers, operating systems (OSS), applications and data. Even systems documentation and computer supplies could be involved. The heart of a DRP is to provide a backup means of providing the essential components of computer operations

    Much of the DR strategy is driven by business continuity requirements. In the event of a disaster, there must be a plan in place that considers which individuals will act in the event of a disaster.

    Log in to Reply
  3. Jialin Fan says

    June 16, 2025 at 10:59 am

    A disaster recovery plan is a documented strategy and set of procedures that an organization follows to quickly resume normal operations after a significant disruption, such as a natural disaster, cyber-attack, or equipment failure.
    It is needed because disasters can strike at any time and cause severe damage to an organization’s IT infrastructure, data, and business processes. Without a proper disaster recovery plan, an organization may face long-term downtime, loss of critical data, and significant financial losses. A well-designed disaster recovery plan helps minimize the impact of disasters, protect data, and ensure the continuity of business operations.

    Log in to Reply
  4. Yingyu Wang says

    June 16, 2025 at 11:00 pm

    A Disaster Recovery Plan (DRP) is a systematic strategy that includes both technical redundancy and business recovery components. Its goal is to ensure that a business can quickly restore critical operations and maintain continuity after disaster events such as natural disasters, cyberattacks, or infrastructure failures.
    The reason why a disaster recovery plan (DRP) is necessary is that over 73% of businesses are unable to continue operating after a major disaster. In such cases, a DRP can reduce the risk of business interruptions through thoughtful design, allowing the business to remain operational. Additionally, ensuring continuous customer service through a DRP helps build customer trust. The material mentions that the 1992 hurricane caused uninsured businesses to lose hundreds of thousands of dollars due to power outages, and a DRP could have prevented such losses by having a preemptive plan in place.

    Log in to Reply
  5. Ruizhen Zhang says

    June 17, 2025 at 8:20 am

    A disaster recovery plan is a detailed document that outlines the strategies and steps for how an organization can continue to operate in the event of an unexpected event or disaster. Disasters can lead to significant financial losses, such as lost revenue, increased operational costs, and reputational damage. A disaster recovery plan helps organizations quickly restore operations, reducing losses caused by disasters.

    Log in to Reply
  6. Siyu Li says

    June 17, 2025 at 9:54 pm

    A disaster recovery plan (DRP) is a documented, structured process that outlines how an organization will respond to and recover from unexpected events that disrupt critical business operations. These events can include natural disasters, technological failures, human errors, or other emergencies.

    Hardware, physical or virtual, must be acquired and configured to capture the environment as it currently sits—-and it must be able to continue with its synchronization. Whether this is by the minute, hour, day, or week is a business decision. In the event of a disaster, there must be a plan in place that considers which individuals will act in the event of a disaster. Those individuals must know what constitutes a disaster and the roles must be defined for those individuals. And it is at this time that they need to set what a strategy might look like that enables the business to continue to run and even minimize losses in all aspects as possible in the event of Force Majeure or some other disaster, such as if a hacker came in and tore their system down or somehow seized control of it.

    Log in to Reply
  7. Jingni Li says

    June 18, 2025 at 1:28 am

    DRP is a written plan used to restore a company’s critical systems and business in the event of natural disasters, network attacks, or technological failures. It is responsible for data recovery, system recovery, and business recovery.

    I think there are several reasons why it is needed:
    1. Reduce losses: Shorten the downtime of the business, so that we won’t lose too much money and won’t mess up our daily work.
    2. Keep data safe: rely on backups to safeguard important information (such as patient data) and prevent disasters from destroying all of this information.
    3. Maintain operation: Ensure that key tasks such as medical services can continue to be carried out. Only in this way can we make everyone (customers, patients) trust us.

    Log in to Reply
  8. Yufei Zhu says

    June 18, 2025 at 2:33 am

    A disaster recovery plan is a set of processes used to restore critical business functions after a disaster. It guides businesses on how they should act to recover computer operations and data in the face of a number of disasters so that the impact of system disruptions can be minimized. It includes data backup, system recovery and more.
    A disaster recovery plan is essential for an organization. Nowadays, data assets make up a large part of an organization’s total assets and the organization can’t run without digital information. Once a disaster occurs, it can seriously affect the operation of the organization. So how quickly an organization can recover its business after a disaster becomes a top priority. Therefore, organizations need to develop and maintain a disaster recovery plan.

    Log in to Reply
  9. Meiyan Liu says

    June 18, 2025 at 9:10 am

    A Disaster Recovery Plan (DRP) is a structured strategy for organizations to restore critical business operations and systems following disasters such as natural catastrophes or cyber-attacks. It encompasses elements like technical recovery (hardware replication, data backup, hot/cold sites), process roles (clear definition of team responsibilities), and testing validation (regular drills). Its significance lies in safeguarding organizational survival—for instance, 73% of unprepared enterprises collapsed after the 9/11 attacks—minimizing financial losses, maintaining reputation and compliance, ensuring business continuity (e.g., Morgan Stanley’s rapid recovery case), and addressing risks in modern distributed computing. It serves as a strategic tool to protect an organization’s viability and reputation.

    Log in to Reply
  10. Wenhao Liu says

    June 18, 2025 at 9:44 am

    A disaster recovery plan (DRP) is a structured approach designed to help an organization resume critical operations and recover data, systems, and infrastructure after a disaster. Disasters can be natural (like fires or floods) or human-induced (such as cyberattacks or system failures).
    It’s needed because without a DRP, organizations face significant risks. For example, they might lose critical data, struggle to restore operations quickly, suffer financial losses, damage their reputation, or even fail to meet legal or regulatory requirements. A DRP ensures there’s a clear roadmap to minimize downtime, protect assets, and maintain business continuity.

    Log in to Reply
  11. Yiwen Lou says

    June 18, 2025 at 9:45 am

    A disaster recovery plan is a documented strategy and set of step-by-step procedures that an organization uses to swiftly restore normal operations after a major disruption—think natural disasters, cyber-attacks, or equipment failures. Such plans are essential because disasters can strike without warning, wreaking havoc on an organization’s IT infrastructure, data, and business processes. Without a robust disaster recovery plan, an organization risks prolonged downtime, loss of critical data, and substantial financial losses. A well-crafted plan, however, minimizes the impact of such disruptions, safeguards valuable data, and ensures business operations continue with minimal interruption, acting as a safeguard against the unexpected chaos that disasters can bring.

    Log in to Reply
  12. Jiaxuan Ma says

    June 18, 2025 at 10:02 am

    Disaster Recovery Plan (DRP) is a plan to deal with possible disaster events, aiming to ensure the rapid recovery of critical business functions and data when a disaster occurs.

    Because this is an important part of protecting critical data and systems. In the event of a disaster, DRP enables enterprises to quickly resume operations and reduce the huge economic losses that could be caused by data loss or system outages. Furthermore, many industry standards and regulations (such as PCI, HIPAA, SOX, etc,.) require enterprises to formulate and maintain DRP.

    Log in to Reply
  13. Liyuan Zhou says

    June 18, 2025 at 12:13 pm

    A disaster recovery plan is a set of procedures and strategies for enterprises to deal with sudden disasters. When business interruptions occur due to floods, fires, system crashes, or hacker attacks, the plan can quickly restore critical IT systems and business functions to minimize losses. It includes data backup, hardware replacement, emergency contact, and other contents.

    Enterprises need a disaster recovery plan because it can reduce economic losses from business interruptions, ensure the continuity of critical business functions such as hospital emergency equipment, help industries like banks and hospitals comply with relevant regulations, and maintain corporate reputation to avoid customer loss due to system failures.

    Log in to Reply
  14. Yiying Chen says

    June 18, 2025 at 12:53 pm

    A disaster recovery plan is a plan enables the business to continue to run in the event of Force Majeure or some other disaster, such as if a hacker came in and tore their system down or somehow seized control of it.
    Hardware, physical or virtual, must be acquired and configured to capture the environment as it currently sitsdand it must be able to continue with its synchronization, no matter it is by the minute, hour, day, or week.

    Log in to Reply
  15. Zuqi Zhang says

    June 19, 2025 at 4:45 am

    a disaster recovery plan is basically like a roadmap for getting things back to normal when something really bad happens. Imagine your business or your home gets hit by a hurricane, or a cyber-attack wipes out all your data. A disaster recovery plan is your step-by-step guide to figure out how to get everything up and running again as quickly as possible.
    It’s needed because life is unpredictable, and bad stuff can happen anytime. Without a plan, you’d be scrambling around, trying to figure out what to do next, and that could cost you a lot of time, money, and maybe even your business. But with a good disaster recovery plan, you’ve already thought through the worst-case scenarios and figured out the fastest way to get back on your feet.

    Log in to Reply
  16. Meiqi Yan says

    June 19, 2025 at 6:35 am

    1. The Disaster Recovery Plan (DRP) is like an “emergency kit” for an enterprise. It is a set of pre-prepared steps designed to quickly restore critical business operations and data in the event of sudden incidents such as natural disasters, hacker attacks, power outages, etc.
    2. It can: reduce losses: for example, when the hospital system crashes, it can quickly restore patient data and prevent medical accidents; protect reputation: after the Target data breach incident, without an emergency response plan, customer trust would plummet. Compliance requirements: Many industries (such as banking, healthcare) have legal regulations mandating the establishment of such plans.

    Log in to Reply
  17. Xintong Zhang says

    June 19, 2025 at 8:16 am

    A disaster recovery plan (DRP) is a set of systematic strategies, processes and protocols. Its core purpose is to assist organizations in recovering critical data, systems and business operations when facing natural disasters such as fires, floods and hurricanes, or catastrophic events such as technical failures, cyber-attacks and human-induced disruptions.

    The indispensability of DRP stems from the various risks faced by organizations, which may lead to operational interruptions and serious consequences. Without a DRP, enterprises may face irreversible data loss, prolonged business downtime, financial losses, reputational damage and legal liabilities. For example, natural disasters or cyber-attacks may destroy physical infrastructure and data, while system failures may interrupt key business processes, thereby affecting customer trust and business continuity. A well-designed DRP can minimize the impact of interruptions, help organizations quickly resume operations, protect assets, and maintain business sustainability in the face of unexpected situations.

    Log in to Reply
  18. Jianwei Huang says

    June 19, 2025 at 9:54 am

    A disaster recovery plan is a detailed set of steps and strategies a company or organization makes to bounce back quickly after a bad event like a natural disaster, cyberattack, or major system failure. It’s like a roadmap that tells everyone what to do to keep important operations running or restore them fast. Without it, a business might struggle to recover, losing data, money, or even customers. It’s needed because unexpected disasters can hit anytime, and being prepared helps minimize chaos. The plan ensures key tasks like accessing critical systems, backing up data, and communicating with staff and clients are handled smoothly. It’s all about reducing downtime and making sure the organization can recover efficiently, staying stable even in tough situations.

    Log in to Reply
  19. Jiwei Yang says

    June 20, 2025 at 12:23 am

    The Disaster Recovery Plan (DRP) is a structured solution for dealing with operational disruptions of an organization, including emergency response, data backup, alternative operations, etc. In the case of the Y2K issue, the DRP could address system failures caused by date vulnerabilities, such as data recovery and manual process activation. Its necessity lies in: reducing business disruptions, ensuring patient safety, meeting regulatory compliance requirements of agencies like the FDA, avoiding legal liabilities, and maintaining financial stability and institutional reputation. In the case study, even though most systems were compliant with the Y2K regulations, the DRP could still handle residual issues such as unassessed departmental application risks and external partner failures, serving as a key supplement to proactive remediation efforts, ensuring the organization’s continued operation in the event of sudden failures.

    Log in to Reply
  20. Wenhao GUO says

    June 20, 2025 at 12:50 am

    A disaster recovery plan (DRP) is a systematic strategy designed to address potential disaster events, ensuring the rapid recovery of critical business functions and data when disruptions occur. It outlines step-by-step procedures to restore computer operations, retrieve lost data through backups, and minimize the impact of system outages, covering scenarios from minor data corruption to major catastrophes like natural disasters or cyberattacks. Such a plan is indispensable because it safeguards an organization’s vital data and systems, enabling businesses to resume operations promptly and mitigate significant economic losses from data loss or prolonged downtime. Additionally, many industry regulations and standards—such as PCI, HIPAA, and SOX—mandate organizations to formulate and maintain a DRP, making it not only a practical necessity but also a compliance requirement. As digital assets now constitute a core part of an organization’s value, the ability to recover swiftly through a DRP directly influences business continuity and resilience in an increasingly data-dependent landscape.

    Log in to Reply
  21. Shouxi Mou says

    June 20, 2025 at 12:55 am

    ​​1. What is it?​​
    A documented process to restore IT systems/data after disruptions (e.g., cyberattacks, natural disasters).
    ​​2. Why Needed?​​
    ​​Minimize Downtime​​: Fast recovery keeps business running.
    ​​Protect Data​​: Prevents permanent loss (e.g., ransomware, hardware failure).
    ​​Meet Compliance​​: Required by laws (e.g., HIPAA, GDPR).
    ​​3. Key Parts​​
    Backup systems
    Emergency response steps
    Staff roles

    Log in to Reply
  22. Yan Liu says

    June 20, 2025 at 1:38 am

    A backup and recovery plan’s computer operations component aims to restore infrastructure-wide functionality from catastrophic system disruptions, encompassing hardware, OS, applications, data, documentation, and supplies. A DRP’s core is ensuring redundant capabilities for essential operations, guided by business continuity needs.

    DR strategies must define disaster-response roles—identifying who executes recovery protocols—to maintain operational viability. This aligns technical restoration with organizational accountability, balancing system resilience with structured emergency management.

    Log in to Reply
  23. Xiaojin Liu says

    June 20, 2025 at 2:48 am

    A disaster recovery plan is a systematic strategy and process designed to quickly restore critical business operations and data following natural disasters, cyber attacks, or technical failures. It encompasses risk assessment, backup solutions, alternate sites, and clear recovery objectives, and its effectiveness is ensured through regular testing. The core of a disaster recovery plan is to minimize downtime, protect data integrity, and meet regulatory requirements.
    A disaster recovery plan is indispensable because modern businesses are highly dependent on IT systems, and any disruption can lead to significant financial losses and reputational risks. Moreover, regulatory requirements mandate encryption and disaster recovery measures, and the complexity of distributed architectures further underscores the importance of advance planning. In essence, a DRP serves as an “insurance policy” for enterprises to withstand disasters and maintain operations.

    Log in to Reply
  24. Huiling Huang says

    June 20, 2025 at 4:32 am

    A disaster recovery plan is a pre-planned set of steps and strategies to quickly restore critical business operations after a major incident like a natural disaster, cyberattack, or system crash. It aims to minimize losses by getting essential functions back up fast.

    Why is it needed? Sudden disasters can wipe out data or shut down services. For example, a hospital’s system failure could delay patient care, or a bank’s transaction outage might freeze funds. The plan helps recover data, restart systems, and keep key operations running, acting like an “insurance policy” to reduce harm to business and customers.

    Log in to Reply
  25. Rong Su says

    June 21, 2025 at 6:02 am

    A Disaster Recovery Plan (DRP) is a systematic recovery strategy developed in advance to address emergencies such as natural disasters, cyberattacks, or system failures. Its core objectives are to prioritize critical business systems, establish data backup solutions, and define emergency response procedures, ensuring rapid operational recovery and minimal losses after a disaster. Organizations must implement DRP for several reasons: ensuring business continuity, meeting compliance requirements, protecting reputation, and cost control.

    Log in to Reply
  26. Xinshang Pei says

    June 21, 2025 at 12:40 pm

    A comprehensive disaster recovery plan serves as an organization’s strategic blueprint for restoring critical operations following disruptive events ranging from cyber incidents to infrastructure failures. These protocols are essential given the unpredictable nature of emergencies that can cripple IT systems, compromise sensitive data, and paralyze business functions. The absence of such planning often results in prolonged operational outages, irreversible data loss, and substantial financial repercussions. By establishing predefined response procedures, companies can significantly reduce downtime, safeguard vital information assets, and maintain business continuity during crisis situations.

    Log in to Reply
  27. Gao Yujing says

    June 21, 2025 at 1:50 pm

    What is a Disaster Recovery Plan (DRP)?​​
    A ​​Disaster Recovery Plan (DRP)​​ is a ​​structured document​​ detailing how an organization restores critical business systems, data, and operations after disasters (e.g., natural events, cyberattacks, hardware failures). Key components include:

    ​​Recovery Objectives​​:
    RTO (Recovery Time Objective): Max tolerable downtime (e.g., core systems restored ≤4 hours).
    RPO (Recovery Point Objective): Max data loss tolerance (e.g., database backups every 15 mins).
    ​​Emergency Procedures​​: Disaster declaration protocols, team roles, failover to backup sites.
    ​​Technical Solutions​​: Data backup restoration, spare hardware, network redundancy.
    ​​Communication Protocols​​: Emergency contacts for employees, customers, and vendors.
    ​​Why is a DRP Needed?​​
    ​​Ensure Business Survival​​
    Prevent permanent closure: 40% of businesses fail after major disasters (FEMA).
    Case: Post-2011 Japan tsunami, 85% of DRP-equipped companies survived vs. 40% without.
    ​​Minimize Financial Loss​​
    ​​Downtime Costs​​: Average loss of $9,000/minute (Gartner).
    E-commerce outage: $5M/hour lost during peak sales.
    ​​Ransomware Defense​​: Organizations without backups pay $2.5M average ransom; DRP enables direct recovery.
    ​​Compliance & Legal Obligations​​
    ​​Regulatory Mandates​​:
    Finance (SEC/FINRA): Mandatory DRP testing.
    Healthcare (HIPAA): Patient data recoverability required.
    ​​Contractual Penalties​​: SLA breaches due to unrecovered services incur fines.
    ​​Protect Reputation & Trust​​
    Customer churn: 57% of clients abandon brands after slow disaster recovery (Forrester).
    Case: A cloud provider’s 72-hour outage without DRP caused 30% permanent customer loss.

    Log in to Reply
  28. Yangyu Zhang says

    June 21, 2025 at 6:35 pm

    A disaster recovery plan (DRP) is a documented, structured approach that describes how an organization can quickly resume mission-critical functions after an unplanned incident (e.g., cyberattack, natural disaster, system failure, or infrastructure collapse). It focuses specifically on restoring IT infrastructure, data, and applications to minimize downtime and data loss. DRP is a subset of a broader business continuity plan (BCP), which addresses organization-wide operational resilience.
    Why a Disaster Recovery Plan is Needed:
    1.Minimize Downtime & Financial Loss
    2.Protect Lives and Safety
    3.Prevent Data Loss
    4.Maintain Compliance & Avoid Liability
    5.Safeguard Reputation
    6.Manage External Dependencies

    Log in to Reply

Leave a Reply Cancel reply

You must be logged in to post a comment.

Primary Sidebar

Questions about the Readings and Case Studies

  • 0a: Course Introduction & Webinar (1)
  • 0b: Understanding an Organization's Risk Environment (4)
  • 1a: Case Study 1 Snowfall and a stolen laptop (3)
  • 1b: Data Classification Process and Models (4)
  • 1c: Risk Evaluation (4)
  • 2a: Case Study 2 Autopsy of a Data Breach: The Target Case (4)
  • 2b: Creating a Security Aware Organization (4)
  • 2c: Physical and Environmental Security (3)
  • 3b Case Study 3 A Hospital catches the Millennium Bug (4)
  • 3c: Business Continuity and Disaster Recovery (4)
  • 4a: Team Project Instructions (1)
  • 4b: Network Security (4)
  • 4c: Cryptography Public Key Encryption and Digital Signatures (4)
  • 5a: Identity Management and Access Control (4)
  • 5b: Computer Application Security (4)

Copyright © 2026 · Course News Pro on Genesis Framework · WordPress · Log in