DISASTER RECOVERY PLANHexagon is an online retailer of exotic foods includingspices from around the world, canned sauces,and prepackaged breads such as tortillas and naan.The company does 100% of its business over theInternet to consumers and through private networkswith retail trading partners. Recently, Hexagonmoved its sales and business headquarters functionsinto a warehouse on the outskirts of San Francisco.Prior to the move, the company engaged the servicesof an architect to redesign the facility to be modernyet in keeping with the original character of thebuilding. While remodeling the warehouse, the architectsretained the wooden-shingled exterior and theexposed wooden beams throughout the interior. Thedata processing center, which contained the serversand networked terminals were situated in a largeopen area with high ceilings and skylights. The centerwas made accessible to the rest of the staff to beconsistent with the firm’s philosophy of removingbarriers and encouraging a team approach to problemsolving. Before occupying the new facility, cityinspectors declared the building to be compliant withall relevant building codes. In a recent compliance audit, Hexagon’s auditorsadvised the company’s management to develop adisaster recovery plan. Toward this end, the companyentered into a mutual aid agreement with severalother firms in the area that had similartechnology systems. These firms all agreed verballyto provide emergency assistance to each other in theevent of disasters or emergencies. In addition,Hexagon implemented a data backup system inwhich all files are copied daily to tapes and disksand each week the backup storage devices aretaken to an offsite facility where they are secured.The operator’s manual with instructions on howto restore the system is stored in the main data processingarea along with a list of names and phonenumbers of key IT professionals to contact in caseof an emergency. Requireda. Describe the internal control weaknesses presentat Hexagon.b. List the components that should be includedin a disaster recovery plan for a company likeHexagon.c. What factors, other than those included in theplan itself, should a company consider whenformulating a disaster recovery plan?

DISASTER RECOVERY PLAN
Hexagon is an online retailer of exotic foods including
spices from around the world, canned sauces,
and prepackaged breads such as tortillas and naan.
The company does 100% of its business over the
Internet to consumers and through private networks
with retail trading partners. Recently, Hexagon
moved its sales and business headquarters functions
into a warehouse on the outskirts of San Francisco.
Prior to the move, the company engaged the services
of an architect to redesign the facility to be modern
yet in keeping with the original character of the
building. While remodeling the warehouse, the architects
retained the wooden-shingled exterior and the
exposed wooden beams throughout the interior. The
data processing center, which contained the servers
and networked terminals were situated in a large
open area with high ceilings and skylights. The center
was made accessible to the rest of the staff to be
consistent with the firm’s philosophy of removing
barriers and encouraging a team approach to problem
solving. Before occupying the new facility, city
inspectors declared the building to be compliant with
all relevant building codes. In a recent compliance audit, Hexagon’s auditors
advised the company’s management to develop a
disaster recovery plan. Toward this end, the company
entered into a mutual aid agreement with several
other firms in the area that had similar
technology systems. These firms all agreed verbally
to provide emergency assistance to each other in the
event of disasters or emergencies. In addition,
Hexagon implemented a data backup system in
which all files are copied daily to tapes and disks
and each week the backup storage devices are
taken to an offsite facility where they are secured.
The operator’s manual with instructions on how
to restore the system is stored in the main data processing
area along with a list of names and phone
numbers of key IT professionals to contact in case
of an emergency.

Required
a. Describe the internal control weaknesses present
at Hexagon.
b. List the components that should be included
in a disaster recovery plan for a company like
Hexagon.
c. What factors, other than those included in the
plan itself, should a company consider when
formulating a disaster recovery plan?