IN.gov - Skip Navigation

Note: This message is displayed if (1) your browser is not standards-compliant or (2) you have you disabled CSS. Read our Policies for more information.


Mobile Site RSS Feeds

IOT > Security > Disaster Recovery Disaster Recovery

Overview of the State of Indiana Disaster Recovery Plan

Disaster Recovery Definition

Disaster recovery is the process of regaining access to the data, hardware and software necessary to resume critical business operations after a naturalor human-induced disaster. The complexity of technology systems requires detailed planning and testing to ensure recovery capabilities in the case of a disaster. Disaster recovery planning (DRP) is a component of an agency’s business continuity planning (BCP).

Disaster Types

There are many potential disruptive events. The impact and probability level must be assessed to appropriately categorizing systems. To assist with this process the following list of potential events has been produced. See Disaster Event Possibilities for Indiana Government for a list of potential events that can trigger a disaster condition.

The IOT DR Location

IOT has contracted with a provider of a recovery site. The facilities available are state-of-the-art. The distance between facilities ensures continued state operations from nearly all predictable disasters.

Networking

Robust connectivity between the primary data center and disaster recovery data center allows unprecedented recovery times for Critical state systems. This bandwidth is sufficient to permit data replication between facilities as well as the remote management of devices. LAN and WAN connectivity are also in place.

Services

Consulting and coordination

IOT has a dedicated resource coordinating facility needs, network connectivity, and technical details to ensure disaster recovery can occur within defined timeframes. Agencies enrolling their systems in the service will work with IOT to ensure that the necessary components and planning are in place.

Critical recovery of Windows and UNIX systems

Systems designated as Critical are recoverable in less than 6 hours. To restore services within this timeframe requires processing capabilities in place and operationally ready at the disaster recovery data center. In addition, data must be replicated from the primary production environment to the disaster environment.

Necessary recovery of Windows and UNIX systems

Systems designated as Necessary are recoverable within 7 days. To restore services within this timeframe requires ready space, power, and networking capabilities. No processing capability is purchased until a disaster condition exists. IOT has arranged with its server provider to rush deliver needed servers within 3 to 4 business days in the event of a disaster. At that time, tapes would be taken from the state’s secure off-site vault to the disaster facility and restored.

Mainframe recovery

IOT has installed a second mainframe computer in the disaster recovery facility. As a result, all IOT mainframe systems are recoverable within 6 hours. DR costs are built into current mainframe rates.

File and Print recovery

File and print services provided by IOT include home and shared drives typically used to store Word and Excel documents. These files will be recovered within the Necessary (7 days or less) system timeframe. This cost of this capability is built into SEAT with no additional DR fee applicable.

Email recovery

Email will be recovered in Critical system timeframes.

Costs

All applications that have been designated as Critical or Necessary by each state agency is subject to the cost of the DR Fee. This fee recovers those costs incurred by IOT for the space and infrastructure. This cost is currently $150.21 a month for each production system server that has been deemed Necessary or Critical. Critical systems also incur IOT’s standard hosting fee for each server at the DR facility. IOT’s standard storage rate applies to each GB of data replicated to the DR facility.

Necessary systems realize no other monthly costs but would incur processing, server hosting, and storage costs should the state have a disaster situation.

Agencies using only the recovery data center facility can do so at a rate of $150.21 for every 2 U’s of rack space used or allocated.

Agency Responsibilities

Agencies must categorize systems based on the impact a loss of system availabity has on their business. Agencies must also determine the frequency of testing and ensure that the DR capabilities integrate with their COOP planning.

Service Availability

IOT is pleased to provide a cost-effective disaster recovery solution for all of state government.

FAQ

IOT has developed a DR FAQ that should answer many remaining questions regarding the state’s DR plan. See below for the DR FAQ.

Disaster Event Possibilities for Indiana Government

Environmental Disasters

  • Tornado
  • Flood
  • Snowstorm
  • Drought
  • Earthquake
  • Electrical storms
  • Fire
  • Freezing Conditions
  • Contamination and Environmental Hazards
  • Epidemic

Organized and / or Deliberate Disruption

  • Act of terrorism
  • Act of Sabotage
  • Act of war
  • Theft
  • Arson

Loss of Utilities and Services

  • Electrical power failure
  • Loss of gas supply
  • Loss of water supply
  • Petroleum and oil shortage
  • Communications services breakdown
  • Loss of drainage / waste removal

Equipment or System Failure

  • Internal power failure
  • Air conditioning failure
  • Production line failure
  • Cooling plant failure
  • Equipment failure (excluding IT hardware)

Serious Information Security Incidents

  • Cyber crime
  • Loss of records or data
  • IT system failure

Other Emergency Situations

  • Workplace violence
  • Health and Safety Regulation

State DR FAQ

Does the state plan protect my agency from all disaster situations?

No. Though it does offer protection from the vast majority of scenarios there are a limited number of disasters that could affect both the primary and secondary data centers. Most notable among these is an earthquake. Earthquakes are rare in Indiana and damaging ones even more so.

Disasters are not common in Indiana. Why should my agency participate?

Indiana is fortunate that it does not face some of the environmental threats other states do. However, agencies need look no further than recent damage to the Regions bank building in Indianapolis to understand that we are at risk. Similar damage to the state’s data center would have resulted in extended down time. DR capabilities are now available and with the affordable costs should be carefully considered.

What if I don’t sign up for coverage?

Your system will be recovered on a best efforts basis. That time period is at least 45 days and most likely longer. Preparation and planning is the only way to successfully handle disaster scenarios. Facilities, infrastructure, and testing must be in place to recover in a timely manner.

Can state agencies split production between the primary and secondary data centers to cut costs and increase protection?

Not initially. The first objective is to ensure recovery capabilities for all covered state systems. In the future it is a possibility IOT will explore.