5355.2    AGENCY DISASTER RECOVERY PLAN
(Revised 12/08)

Each state agency (including each state data center) must maintain a Disaster Recovery Plan (DRP) identifying the computer applications that are critical to agency operations, the information assets that are necessary for those applications, and the agency's plans for resuming operations following an unplanned disruption of those applications.

Each agency that employs the services of a state data center must develop an understanding of the existing service level agreement for recovery services, and its recovery plan must document the data center services that will be required during recovery.

Each agency must keep its DRP up-to-date and provide annual documentation for those updates to the Office. The annual requirements are:

1. Each agency must file a copy of its DRP and the Agency Disaster Recovery Plan Transmittal Letter (SIMM Section 70D) with the Office, in accordance with the Agency Disaster Recovery Plan Submission Schedule.
   
   
2. If the agency employs the services of a state data center, it must also provide the data center with either a full copy or a subset of its plan, containing enough information for the data center to recover the agency's systems and/or data.
   
   
3. An Agency Disaster Recovery Plan Certification (SIMM Section 70B) may be filed in place of a full DRP if both of the following conditions exist:
   
   
   1. A full plan was submitted the previous year and is on file with the Office.
      
      
   2. No changes are needed to the current plan.
      
      
4. Each agency DRP must cover, at a minimum, ten topic areas which are listed and described in the Disaster Recovery Plan Documentation for Agencies Preparation Instructions (SIMM Section 65A). If the agency has not developed a full business continuity plan, three supplemental DRP requirements must be included as directed in SIMM Section 65A. In addition, if the DRP does not follow the format in SIMM Section 65A, a cross reference sheet (see SIMM Section 70D) must be included with the update to indicate where information on each topic area can be found in the DRP.

It is important to adapt the detailed content of each plan section to suit the needs of the individual agency, with the understanding that DRPs are based upon available information so they can be adjusted to changing circumstances.

AUTHORITY          STANDARDS          GUIDANCE          FORMS          TOOLS

 

Updated : 5/6/2009