Been working on a new DRP/DCP recently. I have written many DRP for systems that I have installed, but never been given the responsibility of compiling a complete DRP/DCP for a CO. Now Im at a much smaller CO, and I with you. Its hard. Much harder than I ever gave anyone credit for.
I have found two great resources. One Disaster Recovery Journal, and the Canadian government! They published a great set of templates, email me and I will send to anyone. If I can find the URL, I will postit.
One thing that has opened my eyes, is my limited point of view while righting this sort of doc. All of us know what we want documented from server/software/backup/recovery, but we miss what the Cxx set want. They are looking for business unit process/cost/timely procedures/legal exposure. In other words, not our cup-o-tea. You realy need to put on a different hat, and talk to the business unit managers, find all the processed that they do, prioritize them, get RTO (return to operation min/max) cost etc.
Realy its been much more fun once I started looking at the right side of the fence. We can document our networks till were blue in the face, but the CEO could care less. They want the stuff that there business does, not whatthere network does.
