IT Disaster Recovery Consulting Services
Spano Consulting takes a pragmatic and high-value approach to the IT disaster recovery services we offer. Since every organization has different requirements, our services and the solutions we provide will be custom tailored. Our service offering is organized into three categories: program assessments, full program implementations and specific program elements (à la carte). Please read over our services as described below and contact us if you have any questions or would like to learn more about our approach.
IT Disaster Recovery Program Assessment or Internal Audit Support
Spano Consulting helps organizations understand the current state of their IT disaster recovery programs. This can be done through a number of different ways, such as:
Benchmarking or maturity rating against peer organizations of like size and industry
Assessment of the program based on industry standards (ISO 22301, ISO 22317, NFPA 1600, BS 11200, etc.)
Audit of the program to support Internal Audit as a subject matter specialist
Assessment or audit of the program based on regulatory requirements (e.g., CFTC, FFIEC, FINRA, CMS, etc.)
Full IT Disaster Recovery Program Implementation
Spano Consulting specializes in building IT disaster recovery programs. We have extensive experience working with organizations to implement programs, either from scratch if none or little currently exists, or to update and enhance an existing program if an informal or outdated program is in place.
The following services focus on specific IT disaster recovery program elements if a full program implementation is not required. Spano Consulting can either help develop new elements or improve existing elements of a program.
Program Governance
Purpose: To provide management support and direction for the IT disaster recovery program. Governance documentation details the development and maintenance of the organization, processes and resources necessary for implementation and ongoing sustainability of an IT disaster recovery program.
Offering: We help our clients develop IT disaster recovery program policies, governance charters, program standards and other relevant program governance structures and documentation.
Technology Impact Analysis
Purpose: To gather data on technologies used by the organization for the IT disaster recovery program, to determine the relative criticality of the technologies and to evaluate the impact to the organization in the event of a technology failure.
Offering: We help our clients perform technology impact analyses through the determination of critical data and applications (as dictated by the business processes they support) and mapping of the data and technology stack (e.g., applications, infrastructure, servers) to understand technology interdependencies and potential risk (e.g., single points of failure, capacity risk, geographic risk).
Technology Recovery Strategy Development
Purpose: To identify, select and implement technology recovery capabilities that will enable the organization to maintain desired levels of IT service and data availability in the event of a technology failure.
Offering: We help our clients understand their recovery strategy current state and determine the optimal future state to meet business resilience requirements based on data gathered from the technology impact analysis and/or business impact analysis.
IT Disaster Recovery Plan Development
Purpose: To document the resource requirements and necessary steps for the response and recovery of technology failures.
Offering: We help our clients develop straightforward and actionable plans that utilize the data gathered during the technology impact analysis and/or business impact analysis and are applied to the technology recovery strategies to achieve recovery objectives.
Plan Testing/Exercises
Purpose: To demonstrate IT disaster recovery plan functionality and identify areas of improvement for plan enhancement.
Offering: We help our clients test the viability of their IT disaster recovery plans by offering testing exercises that vary by degree of involvement and scale, ranging from simple plan walkthroughs to table-top exercises that involve stakeholders throughout the entire organization.
IT Disaster Recovery Training And Awareness
Purpose: To ensure staff and stakeholders are informed of their roles and responsibilities for the IT disaster recovery program.
Offering: We help our clients develop training programs and conduct training sessions to educate personnel that are directly involved in the IT disaster recovery program to ensure the program’s sustainability and success.