Izrada rješenja oporavka od katastrofe za državnu ustanovu

professional thesis

• Title (english): Development of a disaster recovery solution for a government institution
• Author: Hrvoje Lechner
• Mentor: Stjepan Groš (mentor)
• Committee member: Nikola Hadjina (predsjednik povjerenstva)
• Committee member: Stjepan Groš (član povjerenstva)
• Committee member: Neven Vrček (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Electronics, Microelectronics, Computer and Intelligent Systems); Zagreb
• Defense date and country: 2021, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Organizacije posebno srednje i male zanemaruju razviti pouzdan i izvediv plan oporavka od katastrofe. Stoga je jedna od temeljnih misija svake organizacije razvoj kvalitetnog plana oporavka od katastrofe. Uzimajući najbolje prakse u izradi plana oporavka od katastrofe uz pomoć dostupnih tehnologija osmišljava se plan oporavka od katastrofe kojem je cilj spriječiti ili svesti na najmanju moguću mjeru gubitak i prekid poslovanja. U ovom radu prikazani su prijedlozi rješenja plana oporavka od katastrofe za fiktivnu državnu ustanovu Segor, koja u sklopu svojeg poslovanja ima dva odvojena sustava te je potrebno napraviti dva prijedloga rješenja plana oporavka od katastrofe. Prvi prijedlog rješenja napravljen je za poslovni proces sustava elektroničke razmjene poreznih davanja Veron, a drugi prijedlog rješenja napravljen je za preostale poslovnih procesa Segora. U sklopu rada prikazano je i jedno od mogućih tehničkih rješenja koristeći virtualnu okolinu u VMware okruženju, kao i aplikaciju vSphere Replication. Kako bi svi prijedlozi rješenja bili prihvaćeni potrebno je napraviti scenarij aktivacije plana oporavka od katastrofe. Prikazana su tri scenarija: prvi scenarij je požar uslijed kojeg je došlo do potpunog uništenja primarne lokacije, drugi scenarij je potres koji nije prouzročio nedostupnost primarne lokacije, ali je narušena statika zgrade i nemogućnost pristupa zgradi te treći scenarij vanjska sabotaža uslijed velikog DDoS napada gdje primarna i sekundarna lokacija postaju nedostupne.

Abstract (english)

Organizations, especially small and medium-sized ones, ignore to develop a reliable and feasible disaster recovery plan. Therefore, one of the fundamental missions of any organization is to develop a quality disaster recovery plan. Taking best practices in developing a disaster recovery plan and using available technologies, a disaster recovery plan is designed to prevent or minimize business losses and disruptions. This paper presents proposals for a solution to the disaster recovery plan for the fictitious state institution Segor. As Segor has two separate systems and networks within its business, it is necessary to make two proposals for a solution to the disaster recovery plan. The first solution proposal was made for the business process of the Veron electronic tax exchange system, and the second solution proposal was made for the remaining Segora business processes. The paper also presents one of the possible technical solutions using a virtual environment in a VMware environment and the vSphere Replication tool. For all proposed solutions to be accepted, it is necessary to create a scenario for activating the disaster recovery plan. Three scenarios are presented: the first scenario is a fire where the primary site was completely destroyed, the second scenario is an earthquake that did not cause the primary side to be inaccessible but disturbed building statics and inability to access the building, and the third scenario is external sabotage due to a large-scale denial of service attack (distributed denial-of-service DDoS) where the primary and secondary side become unavailable.

• Keywords: Oporavak od katastrofe; plan oporavka od katastrofe; analiza utjecaja na poslovanje; kritični poslovni procesi; prijedlog rješenja i strategija oporavka; scenariji.
• Keywords (english): Disaster recovery; disaster recovery plan; business impact analysis; critical business processes; proposed solutions and recovery strategies; scenarios.
• Language: croatian
• URN:NBN: urn:nbn:hr:168:198009
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2022-06-03 12:00:26