Contingency and Emergency Planning and Disaster Recovery Program (CEP-DR) Planning Checklist
Download Free Contingency and Emergency Planning and Disaster Recovery Program (CEP-DR) Planning Checklist
State the reason for the plan and its objective. This should be specific enough that it is clear to all that read it why it has been written.
State the scope and applicability of the plan. Does it include all systems, all locations, subcontractors?
State the priorities, the support promised, and the incidents to be included and excluded. For example, if your area does not have typhoons, will you assume that typhoons, as a potential disaster threat, will not be considered?
State who is to be responsible for taking what actions. This should be stated clearly so everyone knows who is responsible for what. Consider a generic breakdown such as managers, systems administrators, users. Also, specific authority and responsibility should be listed by a person's title and not necessarily by that person's name. This approach will save time in updating the plan because of personnel changes.
Discuss backup requirements and how often they should be accomplished based on classification of information; state how you will recover, etc.
Maintain an accurate, complete, and current list of key CEP-DR personnel, including addresses, phone numbers, page numbers, and cellular-phone numbers. Be sure to establish an emergency prioritized, notification listing, and a listing of response teams members and how to contact them in an emergency.
Maintain an on-site inventory listing and an off-site inventory listing; identify the rotation process to ensure a history and current inventory of files. Identify vital information. This information must come from the owner of that information and must be classified according to its importance, based on approved guidelines.
Maintain an inventory listing, including supplier's name, serial number, and property identification number; ensure that emergency replacement contracts are in place; maintain hard copies of applicable documents on and off site.
Identify and maintain backup operating systems and application systems software. This should include original software and at least one backup copy of each. Be sure to identify the version numbers, etc. In this way, you can compare what is listed in the plan with what is actually installed. It would not be a unique event if software backups were not kept current and compatible with the hardware. If this is the case, the systems might not be able to work together to process, store, and transmit much-needed information.
All-important documentation should be identified, listed, inventoried, and maintained current in both on- and off-site locations.
The identification and maintenance of telecommunications hardware and software listings are vital if you are operating in any type of network environment. Many systems today cannot operate in a standalone configuration; thus, the telecommunications lines, backups, schematics, etc., are of vital importance to getting back in operation within the time period required. As with other documentation, their identification, listing, etc., should be maintained at multiple on- and off-site locations. Be sure to identify all emergency requirements and all alternative communication methods.
Supplies are often forgotten when establishing a CEP-DR plan, as they often take a back seat to hardware and software. However, listing and maintenance of vital supplies are required, including the name, address, telephone numbers, and contract information concerning suppliers. Be sure to store sufficient quantities at appropriate locations on and off site. If you don't think this is an important matter, try using a printer when its toner cartridge has dried out or is empty!
Transportation and equipment :
If you have a disaster or emergency requiring the use of a backup facility or to obtain backup copies of software, etc., you obviously must have transportation and the applicable equipment (e.g., a dolly for hauling heavy items) to do the job. Therefore, you must plan for such things. List emergency transportation needs and sources; how you will obtain emergency transportation and equipment; and which routes and alternate routes to take to the off-site location. Be sure to include maps in the vehicles and also in the plan. Be sure there are fully charged, hand-held fire extinguishers available which will work on various types of fires, such as electrical, paper, or chemical.
Many businesses and agencies sign contractual agreements to ensure that they have an appropriate off-site location to be used in the event their facility is not capable of supporting their activities.
Identify on-site and off-site emergency power needs and locations. Don't forget that these requirements change as facilities, equipment, and hardware change. Battery power and uninterruptable power might not be able to carry the load or might be too old to even work. They must be periodically tested. As with the printer cartridge supplies, systems without power are useless. Besides power, don't forget the air conditioning requirements. It would be important to know how long a system can process without air conditioning based on certain temperature and humidity readings.
Documentation: Identify all related documentation; store it in multiple on- and off-site locations; and be sure to include the CEP-DR plan.
Miscellaneous items not covered above.
|Free Download Attachment||Size|