Activation of Data Recovery Plan

When an incident occurs all IS staff must be informed. The Director of Information Services will then decide the extent to which the DRP must be invoked. Responsibilities of the Directopr of Information Services are to:

• Respond to a potential disaster;
• Assess the extent of the disaster and its impact on the business, data center, etc.;
• Decide which elements of the DR Plan should be activated;
• Maintain vital services and return to normal operation;
• Ensure employees are notified and allocate responsibilities and activities as required.
• Restore key services within 4.0 business hours of the incident;
• Recover to business as usual within 8.0 to 24.0 hours after the incident

RISK MANAGEMENT

There are many potential disruptive threats which can occur at any time and affect the normal business process. We have considered a wide range of potential threats and the results of our deliberations are included in this section. Each potential environmental disaster or emergency situation has been examined. The focus here is on the level of business disruption which could arise from each type of disaster.
Potential disasters and recovery methods have been assessed as follows:

Potential Disaster Remedial Action(s)
Flood All hardware on relay racks- All hardware on grade level surface except BSITU, HC and HP
Tornado Move hardware from alternative sites and restore AD when connectivity is available
Electrical Storms  Monitor Network for alerts. Isolate any failed hardware. Replace hardware if necessary.
Act of Sabotage  Monitor Network for alerts. Isolate any failed hardware. Replace hardware if necessary.
Electrical Power Failure All racks tied into emergency generators and linked to UPS systems for soft shutdowns. generators tested weekly
Loss of network services Test Internet connectivity on Firewall X7 interface. Contact Haas monitoring service, then Cornerstone Telco

BACKUP STRATEGY

Key business processes and the agreed backup strategy for each are listed below. The strategy chosen is for an offsite backup through the Vault Logics company. This strategy entails the maintenance of full daily backups of mission critical data and the backup site(s). Each campus has two domain controllers all running within the same active directory forest. This way even if both fail there is no data stored only on the servers that cannot be recovered from another.

Data & Backup Plan

OBJECTIVES

The principal objective of the disaster recovery program is to develop, test and document a well-structured and easily understood plan which will help the company recover as quickly and effectively as possible from an unforeseen disaster or emergency which interrupts information systems and business operations. Additional objectives include the following:

• The need to ensure that all employees fully understand their duties in implementing such a plan
• The need to ensure that operational policies are adhered to within all planned activities
• The need to ensure that proposed contingency arrangements are cost-effective
• The need to consider implications on other company sites
• Disaster recovery capabilities as applicable to key customers, vendors and others

IT DISASTER RECOVERY PLAN

STATEMENT OF INTENT

This document delineates our policies and procedures for technology disaster recovery, as well as our process-level plans for recovering critical technology platforms and the telecommunications infrastructure. This document summarizes our recommended procedures. In the event of an actual emergency situation, modifications to this document may be made to ensure physical safety of our people, our systems, and our data.

Our mission is to ensure information system uptime, data integrity and availability, and business continuity.

Documenting Orders for & Administration of Involuntary Anti-Psychotic Medication

The time and date of the order for involuntary anti-psychotic medication administration must be documented on the doctor’s order sheet by the physician, or documented by a licensed nurse as a telephone order from the physician. The use of medication will be documented in the student’s case record with at least the following information:
a) A description of the precipitating incident or series of incidents, the alternative interventions attempted including all efforts to prevent the use of chemical restraint, and the reasons the medication was necessary.
b) The fact that involuntary medication was the least restrictive alternative and why.
c) The time and from whom the order for administration was obtained, and the names and titles of all other persons notified and/or involved in the decision.

Documenting Body Checks

a. Associated with Restraints and altercations
A body check of the student is to be conducted by the nurse within 24 hours or sooner if indicated, whenever any of the following conditions are met:
1. A physical intervention has been difficult, severe or such that injury may have occurred, regardless of the duration of the hold or restraint e.g., the student has struggled and the staff has had to apply some degree of force to maintain safety.
2. The student has been involved in a floor hold (i.e., prone, on the floor-not seated).
3. The restraint exceed 20 minutes
4. The student reports any pain or discomfort, or the student appears to be in pain or uncomfortable, regardless of whether or not he/she reports or confirms pain or discomfort.
5. After a physical altercation between students that meets any of the criteria outlined above (i.e., difficulty, severity or duration of physical altercation; report or appearance of injury, pain or discomfort).

If there is no nurse on duty at the time of the incident, the on call nurse will be consulted by telephone. If it is determined that the on call nurse need not come to the program to do a body check; the body check will be done as soon as possible at the beginning of the next nurse’s shift on campus.

b. Documenting Body Checks Associated With Multiple Restraints
It is sometimes necessary to restrain a student more than once and sometimes with little time in between restraints and before a body check can be conducted. In such cases the body check and finding (e.g. “minor injury”) will be documented only on the most recent or last Physical Intervention Report form for the series, even though there will be a PI form completed for each restraint (incident).
On the most recent or final PI form in a series, the nurse conducting the body check will include the following note: “Body check for multiple physical interventions”.
On all other PI forms in that same series, the nurse conducting the body check will include the following note: “See the most recent PI form” with both date and time of the final PI form noted.
Sequential PI forms should be clearly marked to show the sequence of events.

c. Prior to and on return from unsupervised leave of absence
A body check is also done prior to and upon returning from, an unsupervised home visit or an unsupervised off-campus visit. This is not a contraband check; it is a visual inspection looking for signs of illness or injury.

d. Student Refusal of Body Check
If a student refuses a body check, the supervisor is notified and the event is documented on the Incident Report form and in the case record Progress Notes. Additional attempts are made until the body check is completed.