This paper outlines a disaster recovery plan developed for a travel company, addressing potential threats to data security and business continuity. It covers an automatic file backup system that allows employees to recover lost documents from a server, customer data protection measures including a no-stored-payment-details policy, and a walk-through process that assigns specific roles to both customers and employees during emergencies. The paper also describes a monthly testing protocol that temporarily suspends normal operations to verify the effectiveness of each recovery strategy. Together, these components form a layered approach to minimizing information loss and protecting stakeholders.
The Travel Company has developed a comprehensive disaster recovery plan to address a wide range of potential threats. Its core components include automated file backup, customer data protection, clearly defined roles for employees and customers, and a regular testing schedule designed to keep all stakeholders prepared.
One of the first and most important elements of the plan is a continuous saving program that ensures files are backed up each time a user saves them. Even if a file is temporarily lost, the document's owner can access the server and retrieve the most recently saved version.
To further support recovery efforts, employees are provided with instructions to help them save and recover files effectively. This training ensures that staff members can contribute meaningfully to the recovery process rather than waiting passively for IT intervention.
Because customers are a critical asset, they are among the first considerations when assessing the likelihood of a disaster. Customers need confidence that their personal information is safe, so the company has invested substantial resources in securing its customer database against unauthorized access.
One of the most significant protective measures is a revised billing method. Rather than storing customers' card details in the company database, the company requires that customers provide their payment information each time they make a purchase. While this may cause some inconvenience — customers must re-enter their details with every transaction — the benefit is considerable: no stored financial data means that a data breach cannot expose customers' bank details. This policy effectively eliminates one of the most common and damaging types of information theft.
The company's disaster recovery plan involves a series of coordinated processes designed to help both customers and employees work together to keep company information as safe as possible. A walk-through process will be made available to both groups, enabling each to gain a deeper understanding of their respective roles.
"Coordinated roles for customers and employees during disasters"
"Monthly drills verify and refine recovery strategies"
You’re 56% through this paper. Sign up to read the remaining 2 sections.
Sign Up Now — Instant Access Already a member? Log inAlways verify citation format against your institution’s current style guide requirements.