ABSTRAK Penelitian ini memuat tentang implementasi disaster recovery plan di IT Center pada PT.Medco Power Indonesia dengan menggunakan template disaster recovery karangan dari Paul Kirvan, CISA, CISSP, FBCI, CBCP [1]. Disaster Recovery Plan ini dibutuhkan untuk menjaga aset serta kelangsungan bisnis PT.Medco Power Indonesia jika terkena dampak dari suatu bencana. Penelitian ini mennggunakan metode observasi dan wawancara secara periodik dengan narasumber staff IT Center PT.Medco Power Indonesia untuk mendapatkan data yang dibutukan untuk melengkapi dokumen disaster recovery plan yang dirancang. Maka secara keseluruhan telah menghasilkan sebuah dokumen yang memuat panduan bagi IT Center PT.Medco Power Indonesia untuk menjaga aset serta kelangsungan bisnis PT.Medco Power Indonesia. Kata Kunci: Disaster Recovery Plan
vi
ABSTRACT This study contain the analysis and design of Disaster Recovery Plan in IT center at PT.Medco Power Indonesia using a disaster recovery template created by Paul Kirvan [1]. Disaster Recovery Plan is required to maintain information and technology (IT) asset of PT.Medco Power Indonesia and protect the operational of business continuity if the company stricken by a disaster. This study used observation and periodic interview method with IT center staff of PT.Medco Power Indonesia to obtain the data that required to complete document standart operational procedure (SOP) disaster recovery plan IT Center PT.Medco Power Indonesia. Overall this study already produce a document used as a guidelines for IT center to maintain and keep business countinuity at PT.Medco Power Indonesia. Keywords: Disaster Recovery Plan
vii
DAFTAR ISI LEMBAR PENGESAHAN ................................................................................ i PERNYATAAN ORISINALITAS LAPORAN PENELITIAN .............................. ii PERNYATAAN PUBLIKASI LAPORAN PENELITIAN .................................. iii PRAKATA ...................................................................................................... iv ABSTRAK ...................................................................................................... vi ABSTRACT ................................................................................................... vii DAFTAR ISI ................................................................................................. viii DAFTAR GAMBAR ........................................................................................ xi DAFTAR TABEL ........................................................................................... xii DAFTAR LAMPIRAN ................................................................................... xiv DAFTAR ISTILAH ......................................................................................... xv DAFTAR SINGKATAN ................................................................................. xvi BAB 1.
PENDAHULUAN ............................................................................1
1.1
Latar Belakang Masalah .................................................................. 1
1.2
Rumusan Masalah ........................................................................... 2
1.3
Tujuan Pembahasan........................................................................ 2
1.4
Ruang Lingkup Kajian...................................................................... 2
1.5
Sumber Data ................................................................................... 2
1.6
Sistematika Penyajian ..................................................................... 3
BAB 2.
KAJIAN TEORI ...............................................................................5
2.1
Business Continuity dan Disaster recovery ..................................... 5
2.2
Project Initiation ............................................................................... 7
2.2.1
Elemen Keberhasilan Proyek ..................................................... 7
2.3
Manajemen Resiko .......................................................................... 8
2.4
Business Impact Analysis .............................................................. 10
2.5
Mitigasi Resiko .............................................................................. 12
2.6
Fase-Fase Business Countinuity dan Disaster recovery ............... 13
2.6.1
Bencana Utama (Major Disaster or Disruption) ........................ 13
2.6.2
Bencana Menengah(Intermediate Disaster or Disruption)........ 14
2.6.3
Bencana Minor (Minor Disasater or Disruption) ....................... 14
viii
2.7
Pelatihan Disaster recovery dan Business Continuity.................... 14
2.7.1
Respon Keadaan Darurat (Emergency Response) .................. 16
2.8
Perubahan Dalam Manajemen BC/DR .......................................... 17
2.9
Template Disaster recovery Plan by Paul Kirvan ........................... 17
BAB 3. 3.1
ANALISIS DAN RANCANGAN SISTEM ....................................... 19 Penilaian Asset IT (IT Asset Value) ............................................... 19
3.1.1
Pegawai (Personnel) ................................................................ 19
3.1.2
Perangkat Keras (Hardware) .................................................... 20
3.1.3
Fasilitas (Facilities) ................................................................... 20
3.1.4
Persediaan (Supplies) .............................................................. 21
3.1.5
Data dan Informasi (Data and Information) .............................. 22
3.1.6
Dokumentasi (Documentation) ................................................. 22
3.1.7
Aplikasi Perangkat Lunak (Application Software) ..................... 23
3.1.8
Sistem Perangkat Lunak (System Software) ............................ 24
3.2
Disaster Recovery Plan ................................................................. 25
3.2.1
Pernyataan ............................................................................... 25
3.2.2
Kebijakan ................................................................................. 25
3.2.3
Tujuan ...................................................................................... 26
3.2.4
Key Personnel Contact Info...................................................... 26
3.2.5
Notification Calling Tree ........................................................... 28
3.2.6
External Contact ....................................................................... 28
3.2.7
External Contact Calling Tree .................................................. 31
3.2.8
Memperbarui DRP.................................................................... 32
3.2.9
Penyimpanan Dokumentasi DRP ............................................. 32
3.2.10
Strategi Backup..................................................................... 32
3.2.11
Manajemen Risiko ................................................................ 36
3.2.12
Respons Darurat ................................................................... 38
3.2.13
Media .................................................................................... 43
3.2.14
Asuransi ................................................................................ 44
3.2.15
Finansial................................................................................ 45
3.2.16
Latihan Pengujian DRP ......................................................... 47
3.3
Skenario Disaster recovery Plan ................................................... 48 ix
3.3.1
Disaster Recovery Plan (Main System) .................................... 49
3.3.2
Disaster Recovery Plan (System SAP) .................................... 53
3.3.3
Disaster Recovery Plan for Local Area Network (LAN) ............ 57
3.3.4
Disaster Recovery Plan for Wide Area Network (WAN) ........... 60
3.3.5
Disaster Recovery Plan for Remote Connectivity ..................... 62
3.3.6
Disaster Recovery Plan for Voice Communications ................. 64
BAB 4.
SIMPULAN DAN SARAN ............................................................. 66
4.1
Simpulan........................................................................................ 66
4.2
Saran ............................................................................................. 66
DAFTAR PUSTAKA ...................................................................................... 67
x
DAFTAR GAMBAR Gambar 2.1 BC/DR Planning Step ..................................................................6 Gambar 2.2 Risk Management Process .........................................................9 Gambar 2.3 Risk Assesment Process .......................................................... 11 Gambar 2.4 Risk Mitigation Strategy Development Phase ........................... 12 Gambar 2.5 Phase of Business Continuity and Disaster recovery ................ 13 Gambar 2.6 Training, Testing, and Auditing Activities .................................. 15 Gambar 3.1 Notification Calling Tree ............................................................ 28 Gambar 3.2 External Contact Calling Tree ................................................... 31 Gambar 3.3 Titik Kumpul .............................................................................. 40 Gambar 3.4 Alur BC/DR Plan ....................................................................... 48 Gambar 4.1 Notification Calling Tree ............................................................ 25 Gambar 4.2 External Contact Calling Tree ................................................... 28 Gambar 4.3 Notification Calling Tree ............................................................ 56 Gambar 4.4 External Contact Calling Tree ................................................... 59 Gambar 4.5 Titik Kumpul .............................................................................. 68 Gambar 4.6 Alur BC/DR Plan ....................................................................... 77
xi
DAFTAR TABEL Tabel 3.1 Tabel Aset Pegawai ...................................................................... 19 Tabel 3.2 Tabel asset perangkat keras ......................................................... 20 Tabel 3.3 Tabel asset fasilitas....................................................................... 20 Tabel 3.4 Tabel asset persediaan ................................................................. 21 Tabel 3.5 Tabel asset data dan informasi ..................................................... 22 Tabel 3.6 Tabel asset dokumentasi .............................................................. 22 Tabel 3.7 Tabel asset perangkat lunak ......................................................... 23 Tabel 3.8 Tabel asset sistem perangkat lunak .............................................. 24 Tabel 3.9 Key Personnel Contact Info .......................................................... 26 Tabel 3.10 External Contact ......................................................................... 28 Tabel 3.11 Bisnis proses utama .................................................................... 33 Tabel 3.12 Potensi Bencana ......................................................................... 36 Tabel 3.13 Tim Emergency Response .......................................................... 41 Tabel 3.14 Tim Disaster recovery ................................................................. 42 Tabel 3.15 Tim Media ................................................................................... 44 Tabel 3.16 Pertanggungan asuransi ............................................................. 45 Tabel 3.17 Disaster recovery Plan (Main System) ........................................ 49 Tabel 3.18 Disaster recovery Plan (system SAP) ......................................... 53 Tabel 3.19 Disaster recovery Plan LAN ........................................................ 57 Tabel 3.20 Disaster recovery Plan WAN....................................................... 60 Tabel 3.21 Disaster recovery Plan Remote Connectivity .............................. 62 Tabel 3.22 Disaster recovery Plan Voice Communications .......................... 64 Tabel 4.1 Key Personnel Contact Info .......................................................... 54 Tabel 4.2 External Contact ........................................................................... 57 Tabel 4.3 Bisnis proses utama ...................................................................... 61 Tabel 4.4 Potensi Bencana ........................................................................... 64 Tabel 4.5 Tim Emergency Response ............................................................ 69 Tabel 4.6 Tim Disaster recovery ................................................................... 70 Tabel 4.7 Tim Media ..................................................................................... 72 Tabel 4.8 Pertanggungan asuransi ............................................................... 73
xii
Tabel 4.9 Disaster recovery Plan (Main System) .......................................... 78 Tabel 4.10 Disaster recovery Plan (system SAP) ......................................... 82 Tabel 4.11 Disaster recovery Plan LAN ........................................................ 85 Tabel 4.12 Disaster recovery Plan WAN....................................................... 88 Tabel 4.13 Disaster recovery Plan Remote Connectivity .............................. 90 Tabel 4.14 Disaster recovery Plan Voice Communications .......................... 92
xiii
DAFTAR LAMPIRAN LAMPIRAN A.
Peta Zona Ancaman Bencana Gempabumi .........................1
LAMPIRAN B.
Peta Indeks Ancaman Angin Puting Beliung ........................2
LAMPIRAN C.
Peta Resiko Gempa Bumi Indonesia ...................................3
LAMPIRAN D.
Peta Genangan Banjir DKI Jakarta ......................................4
LAMPIRAN E.
Form Penilaian Kerusakan....................................................5
LAMPIRAN F.
Form Activity Management ...................................................6
LAMPIRAN G. Form Tindakan Disaster Recovery .......................................7 LAMPIRAN H. Form Rekaman Tindakan Disaster Recovery .......................8 LAMPIRAN I.
Form Mobilisasi Tim Business Recovery ..............................9
LAMPIRAN J.
Form Monitor Kemajuan Business Recovery ...................... 10
LAMPIRAN K.
Form Komunikasi ................................................................ 11
LAMPIRAN L.
Form Kelengkapan Proses Bisnis ....................................... 12
LAMPIRAN M. Petunjuk Penggunaan Form Disaster Recovery Plan It Center PT.Medco Power Indonesia ....................................................... 13 LAMPIRAN N. Lampiran Wawancara ......................................................... 17 LAMPIRAN O. Surat Pernyataan pt.medco power indonesia ..................... 21 LAMPIRAN P.
Template Disaster Recovery Plan By Paul Kirvan .............. 22
LAMPIRAN Q.
Dokumen SOP Disaster Recovery Plan IT Center PT.
Medco Power Indonesia ........................................................................ 52
xiv
