49.
In January 1985 the Data Processing Manager requested all other departments with computer installations, in conjunction with their respective policy branches, to define the scope and extent of disaster recovery required taking into account the importance of the application to the Government machinery. The position of the Government Data Processing Agency's own central computer installations was also examined, in particular the availability of potential alternative computing arrangements within the Government.
50.
In the light of the requirements of the Treasury, all other departments and the Government Data Processing Agency's own central computer installations, the Data Processing Manager produced a paper for consideration by the Computer Committee which is chaired by the Secretary for Administrative Services and Information. The paper recommended a policy for disaster recovery planning and, as back-up facilities in the event of a disaster, the provision of two standby computer centres equipped with the necessary hardware and software at a total estimated cost over five years of $68 million, including staff.
51.
The Data Processing Manager's paper was discussed by the Computer Committee in June 1985. The Computer Committee adopted the policy as recommended but not the provision of the proposed back-up facilities.
52.
The policy on disaster recovery planning adopted
is as follows:
all computer applications to be implemented must be accompanied by an adequate disaster recovery plan to take into account the minimum level of service to be provided to or by departments in the event of a disaster (a disaster here is defined as "a circumstance which effectively precludes the provision of the normal computer service, the resumption of which will take a minimum period of 6 months". The minimum level of service is defined as "the level of service which a department must have to be able to carry out its essential functions in a realistic mode for a minimum period of 6 months."); and
for existing computer applications, adequate disaster recovery measures should be implemented as soon as possible as it takes time to plan, develop and try such measures.