There's general agreement on what should be covered in a DR plan. Network outages were the number-one issue for smaller companies, and high on the list for larger companies. This seems to put a premium on reliable networking hardware and software. Natural disasters also ranked high. At the bottom of the list were attacks on company Web sites, employee-initiated outages and service provider failures.
Larger companiesthose with $20 million or more in annual revenueswere more likely than smaller companies to prepare for events such as hardware component failure (89 percent versus 79 percent), natural disasters (91 percent versus 78 percent) and accidental employee-initiated outages (61 percent versus 47 percent). In most other categories, though, smaller and larger companies were similar in their priorities.
The most frequent services included regular offsite data backups and virus detection and protection, at 90 percent and 88 percent, respectively. But the average company had prepared for or planned to prepare for such services as offsite locations, backup network providers and onsite replacement equipment 54 percent of the time.
As for components that are or will be part of their DR plan, at 67 percent, larger businesses were more likely to perform or plan to perform a business impact analysis than smaller firms, at 60 percent. But 63 percent of all companies cite components such as a process for administering the DR plan, setting out what individuals should do in the aftermath of a disaster and recovery strategies.