Source: [LinkedIn](https://www.linkedin.com/pulse/does-your-organization-have-plan-framework-business-disaster-blokdyk/)  
Author: [Gerardus Blokdyk](https://www.linkedin.com/in/gerardblokdijk/)  
Publication date: February 22, 2022
Retrieved on February 22, 2022

Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 16.1 Management of information security incidents and improvements](../../Standards/ISO27x/archive/ISO%2027001%202013/ISO%2027001%20A%2016.1%20Management%20of%20information%20security%20incidents%20and%20improvements.md)
- [ISO 27001 2013 C 9.2 Internal audit](../../Standards/ISO27x/archive/ISO%2027001%202013/ISO%2027001%202013%20C%209.2%20Internal%20audit.md)
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/archive/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)

Related:
- [BCP_Bedrijfscontinuïteitsplanning](../BCP_Bedrijfscontinuïteitsplanning.md)


# Does your organization have a plan or framework for business continuity management or disaster recovery management?

1. Does your organization have a plan or framework for business continuity management or disaster recovery management?

2. Does the cloud service provider have a disaster recovery plan in place to recover the applications and data that are running in the facility?

3. Has your organization customized its business continuity and disaster recovery plans or is a generic plan in place?

4. Does your organization ensure that business impact assessment, business continuity and disaster recovery plans are produced for all mission critical information, applications, systems and networks?

5. What are your disaster recovery and business continuity plans now that you have a cloud infrastructure?

6. Can existing data backup and disaster recovery systems meet the needs of your organizations business continuity plan?

7. Does your organization have an up to date disaster recovery plan that sets out how it would deal with a major IT problem?

8. Is the system contingency plan coordinated with related plans, as the disaster recovery plan, the business continuity plan, and the incident response plan?

9. Does your organizations business continuity plan require each department or function to maintain written business continuity and/or disaster recovery plans?

10. What is the plan for disaster recovery and business continuity in case of an incident impacting your organizations assets and/or data?

11. How does the critical service providers business continuity and disaster recovery plans address cyber attacks?

12. Do you have any challenges with your current disaster recovery solutions or business continuity plans?

13. Does the business have appropriate emergency, business continuity and disaster recovery strategies in place?

14. Will business processes need to continue during disaster recovery or will anyone need to see the data files during the recovery?

15. Does your organization exercise the business continuity and disaster recovery plans at least once per year?

16. Does your organization have a disaster recovery plan or strategy for desktop computing or client computing?

17. Are disaster recovery and business continuity programs based upon your organization impact analysis?

18. Does the service provider have disaster recovery plans and/or technology in place to ensure system availability?

19. Does the business continuity and/or disaster recovery plan address customer notification when incidents occur?

20. What is your disaster recovery and business continuity plan and how often is it tested around cloud?

21. Does the vendor have data backup and disaster recovery plans, and are the plans consistent with industry standards?

22. How much value would the use of KPIs add to your business continuity and disaster recovery programs?

23. Has a comprehensive backup and disaster recovery plan been created, and have key employees been trained on it?

24. Can people fill the gap to mitigate risk during technology failures and how should your organization view people as part of disaster recovery and business continuance process?

25. How long should it take to run through the disaster recovery procedure and recover data, how much data does your organization afford to lose, what is acceptable to the business?

26. Has management reviewed the adequacy of recovery team coverage for the disaster recovery and business continuation plan and the frequency of reviews?

27. Does a disaster recovery plan exist for your organization and does it consider interruption to, or failure of, critical it systems?

28. Have the business continuity / disaster recovery plans and procedures been tested to validate effectiveness?

29. How frequently does your organization carry out full scenario testing of its disaster recovery plan involving relevant people, processes and technologies?

30. Management has reviewed the adequacy of recovery team coverage for the Disaster Recovery and Business Continuation plan and the frequency of corresponding reviews?

31. Have business continuity / disaster recovery plans and/or procedures been initialized and disseminated to relevant stakeholders?

32. Are business continuity and disaster recovery plans established by the vendor for your organization?

33. Does your organization have the negotiating leverage necessary to require its consent to any changes in the vendors disaster recovery plan?

34. Are your business continuity and disaster recovery programs subject to regular audits to ensure compliance with industry leading practice?

35. Does your organization have an incident response and disaster recovery capability, with suitably trained staff?

36. What actions start the master disaster recovery plan (DRP), business recovery plan (brp), and emergency recovery plan (ERP)?

37. How do you get started with business continuity disaster recovery planning in your area?

38. What is business continuity planning, and how it is different from disaster recovery and backup planning?

39. Does the architecture of the solution include disaster recovery and business continuity capabilities?

40. Are critical systems typically delivered to that meet business continuity and IT disaster recovery requirements?

41. How long does your business operate without access to crucial files in case of a disaster recovery effort?

42. How to make a disaster recovery plan project management training when disaster occurs, will you be prepared?

43. How do you ensure your cloud workloads have a reliable recovery option in the event of a disaster or unplanned downtime incident?

44. Which is a component of a disaster recovery plan for your organization that expects a site to be rendered non usable during a disaster and needs a nearly transparent transfer of operations?

45. What is the maximum allowable distance from the Primary production data site for your organization to a Disaster Recovery Data site?

46. How do you handle business continuity and disaster recovery in your business?

47. Should businesses leave disaster recovery and business continuity to IT departments, or is it better to bring in a specialist?

48. Are you backing up your data appropriately for purposes of disaster recovery and business continuity?

  

## Organized by Key Themes: 
- Security
- Management
- Operations
- Continuity 
- Risk
- Data
- Disaster
- System 
- Maintain
- Technology

  

### Security

Are audit trails available that identify databases that are filling up, and are reports available on a daily basis?

Work cross functionally with leadership and (internal) client teams to define and implement business impact assessments, coordinate and lead business continuity and disaster recovery tabletops and exercises, identify, and prioritize remediation, and track completion, partner with (internal) client team and functional leads to implement and maintain disaster recovery plans and metrics to ensure the security and integrity of (internal) client technology and data, and identify program improvements. 

Which is defined as the maximum acceptable time period prior to a failure or disaster during which changes to data may be lost as a result of recovery?

Be confident that your company refocus execute various other reviews of IT management policies and procedures such as change management, business continuity planning disaster recovery and information security to ensure that controls surrounding these processes are adequate. 

Does the recovery plan reflect your financial goals (for example, the return on investment you want to achieve)?

Make sure your workforce develops strategies and provides support for initiatives to continuously improve enterprise data security and invest in the development and regular testing of the enterprise business continuity and disaster recovery plans. 

Do you research why some organizations that seem well prepared fail when disaster occurs while others survive?

Be certain that your company liaisons with the business continuity management team to validate security practices for both disaster recovery planning (DRP) and business continuity management (BCM) testing and operations when a failover occurs. 

What occurs if web collaborative software or web development solutions fail or its related data are lost?

Certify your design coordinates with Information Security, or delegate(s), in the development and monitoring of security practices, including physical safeguards, data integrity, business continuity and disaster recovery procedures. 

Does the board have continuity/disaster recovery/contingency plan in place in case unexpected risk that may occurs?

Liaise with the business continuity management team to validate security practices for both disaster recovery planning (DRP) and business continuity management (BCM) testing and operations when a failover occurs. 

Does your cloud provider meet regulatory and Recovery Time Objectives (RTOs) requirements for your business?

Initiate information systems security documentation, such as system security plans, risk assessments, disaster recovery plans, IT business continuity plans, and checklists to meet appropriate system and regulatory compliance. 

Is the system developed and documented for the ongoing evaluation process being applied completely and consistently?

Develop an overall risk management strategy with key business and IT stakeholders, including enterprise integration of risk management into operational, regulatory/statutory, financial, technical, and security processes, and creation of disaster recovery and business continuity program. 

How do you communicate and deploy your strategic objectives, action plans and performance measures?

Participate in the development and implementation of disaster recovery and business continuity plans, to ensure that appropriate information technology security measures are addressed. 

How do you balance the disaster recovery risk and investment equation?

Liaison so that your company partners with the Sys VP Information Security regarding information security and IT risk management including disaster recovery and business continuity management. 


### Management

Does your organization have an established change control process in place to keep the continuity / recovery plan current with process, organizational and technology changes?

Perform various other reviews of IT management policies and procedures such as change management, business continuity planning disaster recovery and information security to ensure that controls surrounding these processes are adequate. 

  

Which disaster recovery tests includes the operations that shut down at the primary site, and are shifted to the recovery site according to the disaster recovery plan?

Make sure your workforce is involved in Business Continuity Management processes and best practices, which includes information technology infrastructure concepts, emergency planning concepts and disaster recovery concepts. 

  

Is the contractor to design, operate, and maintain a management information system to contain all the information and data for the projects?

Collaborate and consult with Chief Information Security Officer (CISO), Chief Information Officer (CIO) and firm management to ensure that robust security, disaster recovery and business continuity plans are in place and functional across all locations. 

  

What building uses need to be re established quickly in order to facilitate organizationwide recovery?

Evaluate and implement systems to enhance data security and facilitate risk management, disaster recovery and business continuity planning. 

  

Does current staff have subject matter expertise necessary to undertake recovery activities, develop new programs, and organize complex long term projects?

Make sure your operation develops and oversees effective disaster recovery policies and standards to align with the enterprise business continuity management (BCM) program goals, with the realization that components supporting primary business processes have to be outside the corporate perimeter. 

  

Is there a way to copy the initial full backup to an external drive and bring it onsite to your location?

Work with organization Business Continuity management to ensure that the Disaster Recovery (crisis management) and Business Continuity Plans drive disaster recovery (DR) strategy procedures. 

  

How do you reduce your maintenance costs and achieve better data TCO?

Secure that your staff develops and leads enterprise-wide IT disaster recovery strategies for restoring critical business systems; provides recommendations and solutions on how to mitigate the exposure to potential risk and develops risk management tactics and plans to prevent business disruptions; estimates budget and planning costs associated with the implementation of the strategy. 

  

How is disaster logistics aligned with disaster planning, response, and recovery functions in your organization?

Make headway so that your staff develops and oversees effective disaster recovery policies and standards to align with the business continuity management (BCM) program goals. 

  

What will happen to your business if you have to go for a prolonged period without your critical applications?

Develop and oversee effective disaster recovery plans to align with the enterprise business continuity management (BCM) program goals, with the realization that components supporting primary business processes have to be outside the corporate perimeter. 

  

Is there a way to copy the initial full backup to an external drive and bring it onsite to your location?

Oversee DBA staffs work with Business Continuity/Disaster Recovery management to ensure that the disaster recovery (crisis management) and business continuity plans drive disaster recovery (DR) strategy and procedures. 

  

### Operations

  

How do you prepare and mitigate risks and possible disasters?

Ensure your staff defines and implements business continuity protocols, disaster recovery strategy plans, and IT processes and procedures to minimize disruption to business operations in the event of emergency situations or data loss, assess points of failure in the infrastructure, and develops plans and implements actions to mitigate risks. 

  

How are hazard risks considered throughout recovery, with risk reduction and resiliency measures integrated into recovery actions, investments, and decisions?

Confirm that your organization oversees and establishes cybersecurity mitigation measures, disaster recovery and business continuity operations policies and processes for headquarters and overseas. 

  

What, if any, exceptions exist for disaster recovery, evaluation, installation, test/development, and migration activities?

Develop experience working with business continuity planning and disaster recovery operations. 

  

How will your community be able to ensure community stakeholders participate in shaping the community wide recovery, providing input to key decisions and plans?

Lead business continuity exercises for business operations and participate in broader disaster recovery exercises. 

  

Who verifies critical information is actually recorded on the backup media and ensures the data is usable?

Certify your staff manages daily operations and support of technology, matures operational processes and capabilities, manages operational staff, addresses (internal) customer support issues, ensures the stability and performance of the technology platforms, ensures recovery of the technical environment, ensures disaster recovery and communications in response to disasters. 

  

Is there a process for releasing a new asset into the operating environment and updating the inventory of information assets?

Warrant that your operation is assisting in updating disaster recovery plans and testing continuity of operations. 

  

Does the vendor have services other than disaster recovery, and if so, what is the ratio of the business?

Make sure your organization is involved in comprehensive disaster recovery architecture and operations, including storage area network and redundant, highly available server and network architectures. 

  

What is the most efficient way to invest new financial resources made available in response to the natural disaster?

Perform data backups and invest in disaster recovery operations. 

  

Do supervisors and managers have the discretion to flexibly provide support for employees based on needs?

Develop, own and manage ongoing operations compliance items, including backups, vulnerability tests, penetration tests, disaster recovery exercises, among others. 

  

Does your organization have an incident response and disaster recovery capability, with suitably trained staff?

Develop the disaster recovery plan for IT Operations and ensures it is communicated, rehearsed and measured. 

  

### Continuity

  

Can disaster recovery, continuity of operations, and monitoring be met through a cloud hosting solution?

Be confident that your group manages technological security including monitoring access to network and data and ensuring compliance with organizational IT security policy, maintaining Disaster Recovery Plan that aligns with Business Continuity Plan and monitoring security administration for the organization. 

  

Does your organization need the support of all its employees to successfully implement a disaster recovery plan?

Confirm that your strategy collaborates across the organization to design and implement business continuity and disaster recovery strategy and plans to ensure the availability, security, and integrity of organization data, databases, information systems, and technology. 

  

Does license accommodate your disaster recovery plan and ability to use third parties to host or maintain the software?

Ensure your design establishes policies, standards, practices, and security measures to ensure effective and consistent information processing operations and to safeguard information resources, including a Business Continuity Plan and a Disaster Recovery Plan. 

  

What will be your organizations goal and objectives for assisting local government in planning and managing recovery?

Establish that your organization serves as liaison to the Information Technology and Services Disaster Recovery Program and is responsible for assisting with integration of the Business Continuity and Disaster Recovery Programs. 

  

Is there a way to copy the initial full backup to an external drive and bring it onsite to your location?

Collaborate with Business Continuity team to ensure that the disaster recovery and business continuity plans drive disaster recovery (DR) strategy and procedures. 

  

Are your business continuity and disaster recovery programs subject to regular audits to ensure compliance with industry leading practice?

Be confident that your personnel supports the business line managers via the Operations Resilience Lead and Business Recovery Coordinator network to ensure your organization is meeting both (internal) client and regulatory requirements related to Business Continuity and Disaster Recovery. 

  

Does the hosting package include firewalls, vulnerability scanning, file integrity monitoring, daily log review, and backup/disaster recovery?

Ensure IT data security, risk management, disaster recovery and business continuity planning processes are in place and receive regular review for currency and adequacy. 

  

How does the critical service providers business continuity and disaster recovery plans address cyber attacks?

Confirm that your design participates in business continuity and disaster recovery plan creation and maintenance as well as technology maintenance activities to prepare for upgrades to recovery plan and technology resources. 

  

Have you performed your organizational needs assessment to determine the recovery time objective (RTO) and recovery point objective (RPO) for your information systems?

Develop and perform security audits, configuration backup procedures, and other recovery processes in accordance with your organizations disaster recovery and business continuity strategies. 

  

Are business objectives and strategy clearly defined to help determine which activities are critical for the managing the prosperity and continuity risk strategy?

Oversee that your workforce works with third party providers to properly link IT Disaster Recovery service targets to organization Business Continuity Plans and defined priorities and recovery requirements. 

  

### Risk

  

What constitutes a disaster for purposes of triggering the disaster recovery services provided by the vendor?

Make headway so that your strategy is responsible for performance of risk analysis and development of processes and procedures designed to constitute basis of organization disaster recovery and business continuity program. 

  

Does your organization have a process in place to encourage and support the engagement and inclusion of all people impacted by a disaster?

Warrant that your operation is responsible for performance of risk analysis and development of processes and procedures to support your organizations disaster recovery and business continuity program. 

  

What is your organizations approximate/estimated annual budget for contingency related program expenses?

Develop disaster recovery and business continuity plans for critical processes and systems core to the organizations business operations in the event of a disruption with the goal of minimizing risk to your organization and its stakeholders. 

  

Does your organization ensure that business impact assessment, business continuity and disaster recovery plans are produced for all mission critical information, applications, systems and networks?

Assure your personnel oversees information security, disaster recovery and business continuity planning, risk assessment, penetration and vulnerability testing, incident management and problem resolution. 

  

Did you identify and plan for a Recovery Site, where can staff relocate in case your facility is shut down or destroyed/damaged?

Check that your organization is utilizing Fusion RM Enterprise software, develop contingency disaster recovery and emergency management plans to mitigate risk and to deal with organizational emergencies including recovery decision making and communications, continuity of critical departmental processes, or temporary shut-down of non-critical departments to ensure continuity of operation and governance. 

  

Which considerations should be taken into account while selecting risk indicators that ensures greater buy in and ownership?

Make sure the Manager, Risk and BC, ensures that current business continuity and disaster recovery goals of your organization are met while planning for additional resilience in the future. 

  

Do all employees responsible for the execution of the BCP/DRP receive ongoing training in Disaster Recovery and Emergency Management?

Establish IT Business Continuity Plan (BCP) and Disaster Recovery (DR) testing methodologies and lead regular IT DR and BCP exercises in partnership with the Risk Management function. 

  

### Data

  

Will your organization be responsible for providing necessary hardware redundancies for its desired level of disaster recovery?

Warrant that your organization coordinates Disaster Recovery, Business Continuity and Incident Response planning to ensure effective protection and recovery of information services, organization data and business operations. 

  

Does it support change when VMs are moved to other storage locations or when you want to do a migration?

Secure that your group architects, installs, and maintains data backup and disaster recovery technical processes in support of overall business continuity strategy. 

  

Do you have a unified data management operation that supports efficient governance, compliance and discovery on demand?

Assure your staff supports the development of business continuity and disaster recovery (BC/DR) strategies by working closely with department leaders and providing data center insight and expertise. 

  

Is there an official procedure for administering an exception to the application of information security?

Interface so that your organization is involved in data protection, business continuity and disaster recovery options, configuration and execution. 

  

Who is responsible for overall operational execution emergency preparedness and communications plans during a critical event?

Make headway so that your team is responsible for Business Continuity and Disaster Recovery data centers and network/system designs. 

  

How have the associated technologies and strategies around disaster recovery evolved over the last few years?

Verify that your group develops and implements business continuity and disaster recovery protocols to minimize disruption to business operations in the event of emergency situations or data loss. 

  

Who is responsible for communicating with your staff, customers, investors and the press about the changing situation?

Be sure your staff is responsible for Business Continuity and Disaster Recovery data centers and network/system designs. 

  

Is the person responsible for implementing information security given the appropriate allocation of resources to manage and ensure compliance with the information security program?

Be sure your process is responsible for Business Continuity and Disaster Recovery data centers and network/system designs. 

  

Has your organizations staff, responsible for disaster recovery continuity plans, been trained in the procedures to be followed in case of an incident or disaster?

Certify your group is responsible for Business Continuity and Disaster Recovery data centers and network/system designs. 

  

Have key personnel responsible for executing the contingency/disaster recovery plan been identified?

Safeguard that your company is responsible for Business Continuity and Disaster Recovery data centers and network/system designs. 

  

### Disaster

  

How do you plan or increase preparedness when were still recovering from disaster?

Be certain that your design designs and performs server and security audits, system backup procedures, and other recovery processes in accordance with your organizations disaster recovery and business continuity strategies. 

  

How do you control the increased access administrators have working in a virtualized model?

Confirm that your group participates in Disaster Recovery helping direct the development and execution of an Authority wide disaster recovery and business continuity plans. 

  

Does the solution provide for business continuity, resilience and disaster recovery implementation scenarios – failover, replication, load balancing, etc?

Participation in applicable Disaster Recovery Business Continuity solutions and exercises. 

  

How do you coordinate operations once a disaster occurs?

Coordinate with relevant business units, as Information Technology, to ensure the Disaster Recovery (DR) plans are developed and maintained. 

  

How do you use data/information analysis to provide effective support for decisionmaking?

Support ongoing disaster recovery and business continuity efforts. 

  

Do you need website development services, or just someone to do the network connections to the new website?

Work with the IT technical staff to ensure that disaster recovery and resilience solutions are adequate, in place, maintained, and tested in the context of the regular operational life cycle. 

  

How do you complete the move without experiencing unacceptable downtime and while maintaining your data protection and disaster recovery profile?

Develop experience designing and maintaining high availability systems or infrastructure including building and maintaining disaster recovery environments. 

  

Is there a specific reporting system that you will be required to use to report outcomes, accomplishments, and expenditures?

Certify your organization works with (internal) client and IT teams to coordinate, monitor, track and report on disaster recovery testing. 

  

There is an individual or team responsibility to routinely ensure the alternate processing facility has the necessary hardware, supplies, and documentation to resume processing?

Develop integrated disaster recovery plans in conjunction with third party providers of virtualization, cloud computing, managed hosting, and disaster recovery outsourcing with alternate site vendors for seamless recovery and resilience. 

  

Do you have any challenges with your current disaster recovery solutions or business continuity plans?

Assure your staff develops, maintains and tests the IT Disaster Recovery Plan. 

  

### System

  

How do you translate organizational performance review findings into priorities for continuous improvement?

Design and perform server and security audits, system backup procedures, and other recovery processes in accordance with your organizations disaster recovery and business continuity strategies. 

  

As hybrid IT adoption leads to more infrastructure sprawl, where does the use of multiple backup and recovery solutions create problems?

Make sure your organization leads the IT team in disaster recovery preparation and response, system redundancy, and business continuity planning and testing. 

  

What types of technologies and devices exist to increase the level of redundancy and are technologies sufficient to mitigate disruption in day to day business operations?

Make sure your operation is developing and managing the overall disaster recovery plan and capacity of IT systems and infrastructure; ensure the continual functioning of mission-critical operations and mitigate the risk of negatively impacting the stability of the business environment. 

  

What is your disaster recovery and business continuity plan and how often is it tested around cloud?

Create, maintain, and verify system backups and regularly test for disaster recovery and business continuity readiness. 

  

What code is called via the overhead paging system to announce the disaster and trigger implementation of the institutions emergency management plan?

Check that your group prepares and works with the different stakeholders to implement business continuity, system wide disaster recovery and incident response plans. 

  

How would you design and operate one of the largest web sites in the world with the goal of world class availability and awesome resiliency?

Evaluate plans and procedures for system resiliency, disaster recovery and business continuity. 

  

What identifiable and proven measures are in place for disaster recovery, business continuity, and data restoration?

Define appropriate levels of system availability based on critical system functions and ensure that system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration. 

  

What is your policy for coordinating customer disaster recovery testing with your own internal disaster recovery testing?

Warrant that your process recommends, develops and enforces policies and procedures for maintaining the security and integrity of the system and ensures the system meets availability and disaster recovery requirements. 

  

How are cyber incident scenarios incorporated in your financial organizations business continuity and disaster recovery plans?

Certify your strategy is responsible for preparing disaster recovery planning ensuring that each system the team develops/supports has a clearly documented and tested disaster recovery plan. 

  

How do you back up and restore web protection software?

Interface so that your process is involved in capturing requirements, documenting detailed system designs and related system test cases, executing system tests, documenting implementation plans, operations guides, and disaster recovery content. 

  

### Maintain

  

How do you build a disaster recovery plan for voice/data infrastructure assets?

Develop and maintain documentation for Business Continuity and Disaster Recovery Design and participate in Disaster Recovery exercises for Contact Center communications systems Manage documentation on all methods and processes to prevent technical issues or services outages. 

  

Which is a type of software that could be used by office planners in the design of an office layout?

Interface so that your group creates and maintains the enterprises Business Continuity Plan and Disaster Recovery Plan. 

  

How do you maintain requirements between production and recovery?

Develop and maintain disaster recovery and business continuity strategies. 

  

How do you make changes while maintaining your organizations secure posture?

Maintain application disaster recovery and business continuity plans. 

  

What applications directly generate revenue, maintain safety or are otherwise critical to business continuity?

Invest in maintenance of data integrity with backup, archive, and recovery processes and helps implement and maintain procedures for disaster recovery. 

  

Has your reconstructed financial records given you the necessary information and evidence to be able to complete returns?

Oversee DBA staff to ensure that disaster recovery solutions are adequate, in place, maintained, and tested in the context of the regular operational life cycle. 

  

How do you complete the move without experiencing unacceptable downtime and while maintaining your data protection and disaster recovery profile?

Develop experience maintaining backup and replication, including disaster recovery design and testing. 

  

How do you plan your next steps for your organization wide cloud strategy?

Create and maintain a data disaster recovery plan. 

  

Which person in your organization has the ultimate responsibility for managing the disaster recovery plan?

Confirm that your group develops, maintains and tests the IT Disaster Recovery Plan. 

  

### Technology

  

Are your organization leaders principally and officially responsible for the implementation of the information security program, including the establishment of related policies?

Verify that your operation is responsible for backup and disaster recovery capability for User Experience technology products to ensure business continuity and consistency with other business recovery plans. 

  

Does your organizations business continuity and/or disaster recovery plan (BCP/DRP) address the timely recovery of its it functions in the event of a disaster?

Secure that your organization is developing and implementing your organization information technology business continuity plan, including disaster recovery and emergency access to electronic health records. 

  

Should primary care providers and primary health networks be better integrated in natural disaster preparedness, response and recovery?

Integrate the business continuity plans with the disaster recovery efforts of information technology (IT) function. 

  

Does the plan require the savings association to participate in service bureau disaster recovery tests?

Manage Information Technology disaster recovery program and participate in Business Continuity Planning. 

  

How do departmental (e.g. payroll, financials, employee and medical) disaster recovery plans (DRP) correlate with the overall enterprise recovery plan?

Be sure your process oversees disaster recovery and business continuity as it relates to technology. 

  

How do you backup your data and what is your disaster recovery plan?

Check that your operation oversees disaster recovery and business continuity as it relates to technology. 

  

Does the business continuity and/or disaster recovery plan address customer notification when incidents occur?

Ensure your company oversees disaster recovery and business continuity as it relates to technology. 

  

Which data and reports are produced and verified during tests of the business continuity or disaster recovery plans?

Guarantee your workforce manages the activities of IT Disaster Recovery which includes planning, coordinating, ensures availability of staff and hardware to complete the annual IT D/R test and VoIP phone system D/R test; reviews D/R test results and ensures resolution of issues; maintains Information Technology Disaster Recovery Plan; creates D/R Test reports. 

  

How do you retrieve backups in the event of a disaster?

Invest in disaster recovery and business continuity as it relates to technology. 

  

Who is responsible for maintaining daily backup routines changing tapes or disks, monitoring logs etc?

Assign, change and delete user accounts, install/configure and support system/network security tools and technology, perform regular security monitoring, daily backups, creation and maintenance of archival files (tapes, disks) and testing of disaster recovery recovery/business continuity tools and processes.
