This Disaster Recovery template suite can be used as a Disaster Planning
& Business Continuity plan (BCP) by any organization. The Disaster
Recovery template suite can help in complying with requirements of HIPAA,
Sarbanes Oxley (SOX), FISMA and ISO 17799. Main sections covered are:
- Disaster
Recovery Plan and Business Continuity Plan Template
- Business
Resumption Plan examples for depts. Like Accounting, Human resources
etc
- Emergency
Mode Operation Plan (EMOP)
- Testing
and Revision Plan for DRP & BCP
- Policies
and procedures
- Department
Disaster Recovery Activation
- Backup
Strategies and Plans
- Recovery
Strategies
-
Training of the Disaster Recovery Team
-
Testing of the Disaster Recovery Plan
-
Evaluation of the Disaster Recovery Plan Tests
-
Maintenance of the Disaster Recovery Plan
The Disaster Recovery
Template Suite comes as a Word & excels documents and has more than
900 pages of content (including examples of different plans 552 pages)
which can be without difficulty scaled based on size of your organization.
It is advisable to create the disaster plan based on worse case scenario.
- Data Backup Plan Template (18 pages)
- Data Backup Plan Development
Guide (11 pages)
- Example Data Backup
Plan (19 pages)
-
Application Recovery Plan Template (23 pages)
- Application Recovery
Plan Development Guide (18 pages)
- Example Application
Recovery Plan (23 pages)
-
Database Recovery Plan Template (19 pages)
- Database Recovery Plan
Development Guide (16 pages)
-
Network Recovery Plan Template (20 pages)
- Network Recovery Plan
Development Guide (15 pages)
-
Disaster Recovery Plan Template (38 pages)
- Disaster Recovery Plan
Development Guide (17 pages)
- Example Disaster Recovery
Plan (38 pages)
-
Server Recovery Plan Template (19 pages)
- Server Recovery Plan
Development Guide (15 pages)
-
Telecom Recovery Plan Template (19 pages)
- Telecom Recovery Plan
Development Guide (17 pages)
-
Emergency Mode Operations Plan (EMOP) Template ( 18 pages)
- Emergency Mode Operations
Plan Development Guide (11 pages)
-
Business Resumption Plan (BRP) Template (16 pages)
- Emergency Mode Operation
Planning Standards (38 pages)
-
Business Resumption Plan (BRP) Template (38 pages)
- Business Resumption
Plan Development Guide (14 pages)
- Example Accounting Business
Resumption Plan (42 pages)
- Example BIOMED Business
Resumption Plan (37 pages)
- Example Corporate Communication
Business Resumption Plan (38 pages)
- Example Emergency Services
Business Resumption Plan (37 pages)
- Example Facilities &
Security Business Resumption Plan (38 pages)
- Example Human Resources
Business Resumption Plan (38 pages)
- Example Laboratory Business
Resumption Plan (38 pages)
- Example Materials Management
Business Resumption Plan (38 pages)
- Example Surgery Business
Resumption Plan (36 pages)
- Example Pharmacy Business
Resumption Plan (37 pages)
- Testing and Revision
Program (18 pages)
-
Business Unit Test Plan (16 pages)
- Business Unit Test Plan
Development Guide (10 pages)
-
Technology Test Plan (18 pages)
- Technology Test Plan
Development Guide (10 pages)
- Test Schedule Template
(2 pages)
- Test Notification Memo
(1 pages)
- Types of Tests (1 pages)
- Example Business Unit
Test Plan (14 pages)
- Example Technology Test
Plan (16 pages)
- Example Test Notification
Memo (1 pages)
- Example Test Schedule
(2 pages)
- Business Unit Plan Audit
Checklist (16 pages)
- Application Plan Audit
Checklist (7 pages)
- Database Plan Audit
Checklist (6 pages)
- Disaster Plan Audit
Checklist (6 pages)
- Network Plan Audit Checklist
(6 pages)
- Server Plan Audit Checklist
(6 pages)
- Telecom Plan Audit Checklist
(6 pages)
- Audit Notification Memo
(1 pages)
- Plan Audit Final Report
Template (1 pages)
- Example Business Unit
Plan Audit Checklist (6 pages)
- Example Audit Notification
Memo (1 pages)
- Example Plan Audit Final
Report (2 pages)
- Example Plan Audit Follow
Up Memo (1 pages)
-
Contingency Planning Policy (10 pages)
-
Disaster Recovery Planning Standard (69 pages)
- Emergency Mode Operation
Plan Standards (14 pages)
- Business Resumption
Planning Standards (20 pages)
-
Testing & Revision Policy (17 pages)
- Testing & Revision
Standards (14 pages)
-
Data Backup Plan Policy (15 pages)
- Data Backup Standard
(8 pages)
- Training & Awareness
Standard (7 pages)
- Instructions on how
to update all standards (3 pages)
- Types of Contingency
Plans (9 pages)
Cost: $750
Buy Now
Data Backup Plan Template
Purpose
The purpose of the Data Backup Plan is to create and
put into practice procedures to create and maintain retrievable exact
copies of electronic data and related technology components that are essential
for recovery activities. This document will define the following
standards for organization backup processing:
- To provide a standard
operating procedure for backup up organization data
- To provide a standard
for labeling backup media
- To provide a standard
for data retention
- To provide a standard
for offsite storage and retrieval of backup media
The data backup plan permit organization to congregate
the availability requirements of different regulatory compliance.
Table of Contents for Data Backup Plan Template
CONFIDENTIALITY STATEMENT
PLAN MAINTENANCE
COMPLIANCY
INTRODUCTION
Purpose
Responsibilities
Data Backup Requirements
PROCEDURES
Backup Processing
Daily Incremental Backups
Weekly Full Backups
Monthly Full Backups
Daily Replication of Data
TAPES
Scheduling and Backup Media Rotation
Tape Labeling
Retention Cycle
Tape Drive Cleaning
Backup Tape Testing
CONTACT LISTS
Data Backup Vendor
Offsite Storage Vendor
APPENDIX
Appendix A: Tape Labeling Log
Appendix B: Data Backup Schedule
Appendix C: Backup Job Log
Appendix D: Tape Cleaning Log
Application Recovery Plan Template
Purpose
This Recovery Plan documents the strategies, personnel, procedures and
resources necessary to recover the <Enter Application Name> Application
following any type of short or long term disruption. The following
objectives have been established for this plan:
- Maximize
the value of Business Resumption and Business Continuity planning by
establishing recovery plans that consists of the following phases:
-
Notification / Activation: To activate the plan and
notify vendors, customers, employees, etc of the recovery activities
-
Recovery Phase: To recovery and resume temporary
IT operations on alternate hardware (equipment) and possibly at
an alternate location
-
Restoration Phase: To restore IT systems processing
capabilities to normal operations at the primary location or the
new location
- Define
the activities, procedures, and essential resources required to perform
<Enter Application Name> processing requirements during prolonged
periods of disruption to normal operations.
- Allocate
responsibilities to designated personnel and provide guidance for recovering
<Enter Application Name> during prolong periods of interruption
to normal operations.
- Make
certain coordination with other <Enter Company Name> staff is
conducted.
- Ensure
coordination with external contacts, like vendors, suppliers, etc. who
will participate in the recovery process.
Table of Contents for Applications Recovery Plan Template
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
PLAN INTRODUCTION
Purpose
Applicability
Scope
Assumptions
Use Of This Plan
APPLICATION PROFILE
Application Specifications
Server Requirements
Database Requirements
Network Requirements
Input (Feeders) Dependencies on Applications / Systems
Output (Receivers) Dependencies on Applications / Systems
Business Processes
PLAN ACTIVATION PROCEDURES
Plan
Activation Team
TEAM MEMBERS & RESPONSIBILITIES
Activate Team Members
Travel to Alternate Location
RECOVERY PROCEDURES
Restore Application Services
File Verification Tasks
Application Validation and Synchronization Tasks
Restoration Procedures
Original or New Site Restoration
Concurrent Processing
Plan Deactivation
APPENDIX
Appendix A: Employee Contact List
Appendix B: Vendor Contact List
Database Recovery Plan Template
Purpose
This Recovery Plan documents the strategies, personnel, procedures and
resources necessary to recover the Database following any type of short
or long term disruption. The following objectives have been established
for this plan:
- Maximize
the value of Business Resumption and Business Continuity planning by
establishing recovery plans that consists of the following phases:
-
Notification / Activation: To activate the plan and
notify vendors, customers, employees, etc of the recovery activities
-
Recovery Phase: To recovery and resume temporary
IT operations on alternate hardware (equipment) and possibly at
an alternate location
-
Restoration Phase: To restore IT systems processing
capabilities to normal operations at the primary location or the
new location
- Define
the activities, procedures, and essential resources required to perform
<Enter Database Name> processing requirements during prolonged
periods of disruption to normal operations.
- Allocate
responsibilities to designated personnel and provide guidance for recovering
<Enter Database Name> during prolong periods of interruption to
normal operations.
- Make
certain coordination with other <Enter Company Name> staff is
conducted.
- Ensure
coordination with external contacts, like vendors, suppliers, etc. who
will participate in the recovery process.
Table of Contents for Database Recovery Plan Template
CONFIDENTIALITY STATEMENT
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
PLAN INTRODUCTION
Purpose
Applicability
Scope
Assumptions
Use of This Plan
DATABASE PROFILE
Database Specifications
Server Requirements
PLAN ACTIVATION PROCEDURES
Plan Activation Team
TEAM MEMBERS & RESPONSIBILITIES
Activate Team Members
Travel to Alternate Location
RECOVERY PROCEDURES
Restore Database Services
RESTORATION PROCEDURES
Original or New Site Restoration
Concurrent Processing
Plan Deactivation
APPENDIX
Appendix A: Employee Contact List
Appendix B: Vendor Contact List
Network Recovery Plan Template
Purpose
This Recovery Plan documents the strategies, personnel,
procedures and resources necessary to recover the <Enter Company Name>
network following any type of short or long term disruption. The
following objectives have been established for this plan:
- Maximize the value of
Business Resumption and Business Continuity planning by establishing
recovery plans that consists of the following phases:
- Notification
/ Activation: To activate the plan and notify vendors,
customers, employees, etc of the recovery activities
- Recovery
Phase: To recovery and resume temporary IT operations
on alternate hardware (equipment) and possibly at an alternate location
- Restoration
Phase: To restore IT systems processing capabilities
to normal operations at the primary location or the new location
- Define the activities,
procedures, and essential resources required to perform network recovery
during prolonged periods of disruption to normal operations.
- Allocate responsibilities
to designated personnel and provide guidance for recovering the network
during prolong periods of interruption to normal operations.
- Make certain coordination
with other <Enter Company Name> staff is conducted.
Ensure coordination with external contacts, like vendors,
suppliers, etc. who will participate in the recovery process.
Table of Contents of Network Recovery Plan Template
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
PLAN INTRODUCTION
Purpose
Applicability
Scope
Assumptions
Use of this Plan
NETWORK PROFILE
Network Specifications
Network Requirements
PLAN ACTIVATION PROCEDURES
Plan
Activation Team
TEAM MEMBERS & RESPONSIBILITIES
Activate Team Members
Travel to Alternate Location
RECOVERY PROCEDURES
Restore Network Services
Restoration Procedures
Original or New Site Restoration
Concurrent Processing
Plan Deactivation
APPENDIX
Appendix A: Employee Contact List
Appendix B: Vendor Contact List
Appendix C: Network Diagrams
Disaster Recovery Plan Template
This main document contains the non-technical activities that need to
be completed in support of Disaster Recovery operations. The following
sections contain contact numbers, contact personnel, activation and notification
procedures, overview of recovery teams, vendor contact information and
recovery locations.
The detailed technical recovery procedures for all
components are located in the appendix since these recovery plans are
modified on a regular basis due to periodic configuration changes of the
company's Technology Environment. Furthermore, with continual changes
to the hardware, network, and operating systems (OS), technical documents
such as the detailed individual DR Plans for this environment will be
updated on a regular basis to ensure changes in hardware and operating
systems are reflected in the technical DR Procedures.
Table of Contents for Server Recovery Plan
CONFIDENTIALITY STATEMENT
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
MEDIA POLICY
EXECUTIVE SUMMARY
Definition of A Disaster
Disaster Declaration Criteria
QUICK REFERENCE GUIDE
SCOPE & OBJECTIVES
Scope of This Plan
Objectives of This Plan
RECOVERY STRATEGY
Recovery Strategy
Application & System Recovery
Network Recovery
Telecommunications Recovery
Contractual Agreement for Recovery Services
PLAN ASSUMPTIONS & EXPOSURES
Planning Assumptions
Known Exposures
DISASTER DECLARATION PROCEDURE
Declaration Authority
NOTIFICATION PROCEDURES
Notification & Activation Team
RECOVERY TEAMS
Management Team
Administrative Team
Alternate Site Team
Offsite Storage Team
CONTACT LISTS
Employee Contact Information
Department Notifications
Vendor Notification
Other Emergency Contact Numbers
ALTERNATE LOCATIONS
Assembly Site
Command Center
Recovery Site Information
OFFSITE STORAGE LOCATION
Offsite Storage Information
PLAN CERTIFICATION
Plan Certification
APPENDIX ITEMS
I. Application Technical Recovery
II. Systems Technical Recovery
III. Network Technical Recovery
IV. Telecommunications Technical Recovery
V. Database Technical Recovery
Appendix A - Employee Notification Procedures
Appendix B - Notification Log
Appendix C - Event / Disaster Information
Appendix D - Record Log
Appendix E - Alternate Site Authorization Form
Appendix F - Recovery Status Report
Appendix G - Disaster Recovery Report
Appendix H - Travel Accommodations Request Form
Appendix I - Employee Tracking Form
Appendix J - Assessing Potential Business Impact
Server Recovery Plan Template
Purpose
This Recovery Plan documents the strategies, personnel,
procedures and resources necessary to recover the <Enter Server Name>
Server following any type of short or long term disruption. The
following objectives have been established for this plan:
- Maximize the value of
Business Resumption and Business Continuity planning by establishing
recovery plans that consists of the following phases:
- Notification
/ Activation: To activate the plan and notify vendors,
customers, employees, etc of the recovery activities
- Recovery
Phase: To recovery and resume temporary IT operations
on alternate hardware (equipment) and possibly at an alternate location
- Restoration
Phase: To restore IT systems processing capabilities
to normal operations at the primary location or the new location
- Define the activities,
procedures, and essential resources required to perform <Enter Server
Name> processing requirements during prolonged periods of disruption
to normal operations.
- Allocate responsibilities
to designated personnel and provide guidance for recovering <Enter
Server Name> during prolong periods of interruption to normal operations.
- Make certain coordination
with other <Enter Company Name> staff is conducted.
- Ensure coordination
with external contacts, like vendors, suppliers, etc. who will participate
in the recovery process.
Table of Contents for Server Recovery Plan
CONFIDENTIALITY STATEMENT
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
PLAN INTRODUCTION
Purpose
Applicability
Scope
Assumptions
Use of this Plan
SERVER PROFILE
Server Specifications
Network Requirements
Applications
PLAN ACTIVATION PROCEDURES
Plan
Activation Team
TEAM MEMBERS & RESPONSIBILITIES
Activate Team Members
Travel to Alternate Location
RECOVERY PROCEDURES
Restore
Server Services
RESTORATION PROCEDURES
Original or New Site Restoration
Concurrent Processing
Plan Deactivation
APPENDIX
Appendix A: Employee Contact List
Appendix B: Vendor Contact List
Telecom Recovery Plan Template
Overview:
Telecommunications Recovery Plan documents the strategies,
personnel, procedures and resources necessary to recover company's Telecommunications
following any type of short or long term disruption. The following
objectives have been established for this plan:
- Maximize the value of
Business Resumption and Business Continuity planning by establishing
recovery plans that consists of the following phases:
- Notification
/ Activation: To activate the plan and notify vendors,
customers, employees, etc of the recovery activities
- Recovery
Phase: To recovery and resume temporary IT operations
on alternate hardware (equipment) and possibly at an alternate location
- Restoration
Phase: To restore IT systems processing capabilities
to normal operations at the primary location or the new location
- Define the activities,
procedures, and essential resources required to perform network recovery
during prolonged periods of disruption to normal operations.
- Allocate responsibilities
to designated personnel and provide guidance for recovering the network
during prolong periods of interruption to normal operations.
- Make certain coordination
with other staff is conducted.
- Ensure coordination
with external contacts, like vendors, suppliers, etc. who will participate
in the recovery process.
Table of Contents for Telecommunications Recovery Plan Template
CONFIDENTIALITY STATEMENT
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
PLAN INTRODUCTION
Purpose
Applicability
Scope
Assumptions
Use of this Plan
TELECOMMUNICATION PROFILE
Telecommunication Specifications
Telecommunication Requirements
PLAN ACTIVATION PROCEDURES
Plan Activation Team
TEAM MEMBERS & RESPONSIBILITIES
Activate Team Members
Travel to Alternate Location
RECOVERY PROCEDURES
Restore Telecommunication Services
RESTORATION PROCEDURES
Original or New Site Restoration
Concurrent Processing
Plan Deactivation
APPENDIX
Appendix A: Employee Contact List
Appendix B: Vendor Contact List
Emergency Mode Operations Plan Template
This main document contains the non-business unit activities that need
to be completed in support of Emergency Mode Operations procedures.
The following sections contain contact numbers, contact personnel, activation
and notification procedures, overview of recovery teams, vendor contact
information and recovery locations.
The detailed recovery procedures for all business units (departments)
are located in the appendix since these recovery plans are modified on
a regular basis due to periodic configuration changes of the company's
Business Environment. Furthermore, with continual changes to the
daily business processing activities and operations, personnel, resources,
and vital documents such as the detailed individual Business Resumption
Plans for each department will be updated on a regular basis to ensure
changes in the business processing (operations) environment are reflected
in the detailed Business Resumption Procedures.
Objectives
The objective of this plan is to document critical resources and personnel
requirements to protect the company if all or parts of its operations
or computer services are interrupted by an outage or disruptive event.
Information such as; critical business processes, technology components
required, manual work-around procedures, identified alternate recovery
sites, and key personnel contact information will be documented.
To make this plan functional, each member of the business unit (department)
must be trained in their respective recovery responsibilities, overall
company emergency management procedures (Crisis Management) and Disaster
Recovery (Technology) Plans. Each member shall have in possession
an electronic copy or printed plan that is not located at the work site.
This copy can be kept at employee's home, in the offsite storage location,
another facility, etc.
Table of Contents
Confidentiality Statement
Plan Maintenance
Plan Exercise
Plan Location
Plan Distribution
Media Policy
EXECUTIVE SUMMARY
Definition of a Disaster
Disaster Declaration Criteria
QUICK REFERENCE GUIDE
SCOPE & OBJECTIVES
Scope of This Plan
Objectives
Assumptions
Corporate (applies to every department within the company)
Known Exposures
EMERGENCY MODE RESPONSIBILITIES
BIA & RA EXECUTIVE SUMMARY
RECOVERY STRATEGY
Recovery Strategy
Business Unit Recovery Strategy
DISASTER DECLARATION PROCEDURE
Declaration Authority
NOTIFICATION PROCEDURES
Notification & Activation Team
Department Notifications
MANAGEMENT TEAM & TASKS
Management Team
PLAN CERTIFICATION
Plan Certification
APPENDIX ITEMS
Appendix A: <Enter Department Name>
Appendix B: <Enter Department Name>
Appendix C: <Enter Department Name>
Business Resumption Plan Template
Table of Contents for Dept. Business Resumption Plan
CONFIDENTIALITY STATEMENT
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
MEDIA POLICY
PLAN ASSUMPTIONS & EXPOSURES
Planning Assumptions
Known Exposures
DEPARTMENT INFORMATION
Department Overview
Department Recovery Strategy & RTO
Staff Shift Schedule
PLAN ACTIVATION PROCEDURES
Plan Declaration
RECOVERY TEAMS
Notification & Activation Team
Management Team
Administrative Team
Alternate Site Team
Offsite Storage Team
CONTACT LISTS
Employee Contact Information
Department Notifications
Vendor Notification
Other Emergency Contact Numbers (Local EMS, Fire, Police, Etc)
PROCESS INFORMATION
Critical Business Processes
Applications & Systems
Process Dependencies
Process Recovery Procedures
MANUAL WORK-AROUND PROCEDURES
Work-Around Procedures
RESOURCE REQUIREMENTS
ALTERNATE LOCATIONS
Assembly Site
Command Center
Recovery Site Information
OFFSITE STORAGE LOCATION
Offsite Storage Information
RESTORATION OF NORMAL OPERATIONS
Work-Area Restore Procedures
System Validation
Backlogged Work
PLAN CERTIFICATION
APPENDIX ITEMS
Appendix A - Employee Notification Procedures
Appendix B - Notification Log
Appendix C - Event / Disaster Information
Appendix D - Record Log
Appendix E - Alternate Site Authorization Form
Appendix F - Recover Status Report
Appendix G - Business Recovery Report
Appendix H - Travel Accommodations Request Form
Appendix I - Employee Tracking Form
Business Resumption Plan Template
Table of Contents for Dept. Business ResumptionPlan
CONFIDENTIALITY STATEMENT
PLAN MAINTENANCE
PLAN EXERCISE
PLAN LOCATION
PLAN DISTRIBUTION
MEDIA POLICY
PLAN ASSUMPTIONS & EXPOSURES
Planning Assumptions
Known Exposures
DEPARTMENT INFORMATION
Department Overview
Department Recovery Strategy & RTO
Staff Shift Schedule
PLAN ACTIVATION PROCEDURES
Plan Declaration
RECOVERY TEAMS
Notification & Activation Team
Management Team
Administrative Team
Alternate Site Team
Offsite Storage Team
CONTACT LISTS
Employee Contact Information
Department Notifications
Vendor Notification
Other Emergency Contact Numbers (Local EMS, Fire, Police, Etc)
PROCESS INFORMATION
Critical Business Processes
Applications & Systems
Process Dependencies
Process Recovery Procedures
MANUAL WORK-AROUND PROCEDURES
Work-Around Procedures
RESOURCE REQUIREMENTS
ALTERNATE LOCATIONS
Assembly Site
Command Center
Recovery Site Information
OFFSITE STORAGE LOCATION
Offsite Storage Information
RESTORATION OF NORMAL OPERATIONS
Work-Area Restore Procedures
System Validation
Backlogged Work
PLAN CERTIFICATION
APPENDIX ITEMS
Appendix A - Employee Notification Procedures
Appendix B - Notification Log
Appendix C - Event / Disaster Information
Appendix D - Record Log
Appendix E - Alternate Site Authorization Form
Appendix F - Recover Status Report
Appendix G - Business Recovery Report
Appendix H - Travel Accommodations Request Form
Appendix I - Employee Tracking Form
Business Unit Test Plan
Overview:
The fundamental goal of Business Unit Plan Testing
is to carry out all the steps documented in the Business Resumption and
Business Continuity plan. However, during a test this may not be
probable. The Test Plan allow a plan to be customized for testing
without modifying the actual Business Resumption and Business Continuity
plan.
The objective of this document is to discover the sections of the plan
to perform, additional tasks required for testing and those tasks in the
plan that cannot be completed because this is a test.
Furthermore, this Test Plan helps out in evaluating the performance of
the test by rating the result of the activities performed during the test.
Rating each task shows areas where the test team did exceptionally well
and areas requiring consideration. In addition, rating the tasks
aids in ranking the overall objectives and in turn, the success of the
test.
Table of Contents for Business Unit Test Plan Template
TEST OVERVIEW
Plan Information
Test Type & Elements
Test Participants
Test Scenario
Test Assumptions
Leverage Testing
TEST OBJECTIVES
TEST REQUIREMENTS
TEST SCRIPT
TEST SCORING SUMMARY
TEST ISSUES SUMMARY
Technology Test Plan
Overview:
The fundamental goal of Technology Plan Testing is to carry out all the
steps documented in the Business Resumption and Business Continuity plan.
However, during a test this may not be probable. The Test Plan allow
a plan to be customized for testing without modifying the actual Business
Resumption and Business Continuity plan.
The objective of this document is to recognize the sections of the plan
to perform, additional tasks required for testing and those tasks in the
plan that cannot be completed because this is a test.
Furthermore, this Test Plan helps out in evaluating
the performance of the test by rating the outcome of the activities performed
during the test. Rating each task shows areas where the test team
did extremely well and areas requiring attention. In addition, rating
the tasks aids in ranking the overall objectives and in turn, the success
of the test.
Table of Contents for Technology Test Plan Template
TEST OVERVIEW
Plan Information
Test Type & Elements
Test Participants
Test Scenario
Leverage Testing
TEST OBJECTIVES
TEST REQUIREMENTS
TEST SCRIPT
TEST SCORING SUMMARY
TEST ISSUES SUMMARY
Business Resumption Planning Policy
The Business Resumption Planning Policy document establishes the activities
that need to be carried out by each Business Unit, Technology Unit, and
Corporate Units (departments) within the organization.
All departments must use this methodology to recognize existing risks
and threats to the business and put into practice procedures to eliminate
or reduce those potential risks.
Business Resumption and Disaster Recovery (Technical Recovery) Plans
are a necessity to the company. By documenting recovery plans, critical
business processes and the resources required to continue and/or resume
those process are identified.
Planning assures the resumption and continuity of the business or technology
unit, operations, and largely company operations and give surety the timely
and orderly reinstatement of business processes in the event the existing
business environment is unavailable. Regardless of the Recovery
Time Objective of the business or technology component, all plans must
be documented.
Table of Contents
TERMINOLOGY
ACCOUNTABILITY
COMPLIANCE
REVISION HISTORY
ENDORSEMENT
I. POLICY OVERVIEW
A. Purpose
B. Scope
C. Ownership Roles & Responsibilities
II. PLANNING REQUIREMENTS
A. Plan Documentation
B. Plan Strategy
C. Alternate Recovery Locations
D. Plan Testing (Exercises)
E. Plan Revision (Maintenance)
F. Plan Auditing (Reviews)
G. Plan Distribution
H. Plan Certification
APPENDIX
Appendix A - Business Resumption Planning Standard
Appendix B - Disaster Recovery Planning Standard (All Technology Plans)
Disaster Recovery Planning Standard
Sample from template
The following required and/or recommended information
inputs should be completed using the full electronic version of the Disaster
Recovery Plan Template and the Technology Components Recovery Plan Templates.
These templates can be obtained from the <Enter Contingency Planning
Department Name>. Those sections marked with a "Required" are
sections that are required to be completed. Sections with a "Recommended"
are recommended and "Optional" are optional.
A. General Information
Confidentiality Statement (Required)
All your documents should remain secret to your company. You will
require to put a confidentially statement in this section. If you
company has a confidentiality statement that is used for all document,
use that here.
Plan Maintenance (Required)
Document all revisions, deletions, additions, etc.
that have been made to this document.
- Record the Version of
the Document that is located at the Top Right hand side on the cover
page.
- Record the description
of the change (i.e.: updated contact information.)
- Identify what Chapter,
Section and Page that was updated.
- Document the name of
the person who made the change.
- Record the date the
change was made.
This log should be kept with the document at all times.
Never delete revision history. Just keep expanding the table.
Plan Exercise (Required)
Document any exercises (tests) that have been conducted
using this plan. This will help the auditing of the plans by providing
information about the testing activities that have taken place.
- Record the date of the
tests.
- Identify the type of
exercise that was conducted. (Call Tree, Walkthrough, Table Top,
etc.)
- Record the results of
the exercise. (It was successful, etc.)
Table of Contents
for Disaster Recovery Planning Standard
TERMINOLOGY
ACCOUNTABILITY
COMPLIANCE
I. DISASTER RECOVERY PLANNING STANDARDS
A. General Information
B. Executive Summary
C. Scope & Objectives
D. Recovery Strategy
E. Plan Assumptions & Exposures
F. Disaster Declaration Procedures
E. Recovery Teams
F. Contact Lists
G. Alternate Locations
H. Plan Certification
II. APPLICATION RECOVERY PLAN STANDARDS
A. General Information
B. Plan Introduction
C. Application Profile
D. Plan Activation Procedures
E. Team Members & Responsibilities
F. Recovery Procedures
G. Contact Lists
H. Alternate Locations
I. Restoration of Normal Operations
III. SERVER RECOVERY PLAN STANDARDS
A. General Information
B. Plan Introduction
C. Server Profile
D. Plan Activation Procedures
E. Team Members & Responsibilities
F. Recovery Procedures
G. Contact Lists
H. Alternate Locations
I. Restoration of Normal Operations
IV. NETWORK RECOVERY PLAN STANDARDS
A. General Information
B. Plan Introduction
C. Network Profile
D. Plan Activation Procedures
E. Team Members & Responsibilities
F. Recovery Procedures
G. Contact Lists
H. Alternate Locations
I. Restoration of Normal Operations
V. TELECOMMUNICATIONS RECOVERY PLAN STANDARDS
A. General Information
B. Plan Introduction
C. Telecommunication Profile
D. Plan Activation Procedures
E. Team Members & Responsibilities
F. Recovery Procedures
G. Contact Lists
H. Alternate Locations
I. Restoration of Normal Operations
VI. DATABASE RECOVERY PLAN STANDARDS
A. General Information
B. Plan Introduction
C. Database Profile
D. Plan Activation Procedures
E. Team Members & Responsibilities
F. Recovery Procedures
G. Contact Lists
H. Alternate Locations
I. Restoration of Normal Operations
Testing and Revision Policy
A. Purpose
The Testing & Revision Policy & Standards document create the
standard procedures that need to be carried out by each business unit
(department) within the organization.
All departments must use this methodology to conduct testing activities
on completed recovery plans, facilities, and work-area relocation.
In addition, all departments will be responsible for the annual review
and maintenance of recovery plans.
B. Scope
Testing and Revision activities are performed to discover current gaps,
inconsistent data, incorrect data, and improvement for all recovery plans.
All departments with recovery plans must perform testing and revision
activities on an annual basis. The overall RTO of the recovery plan
will define what types of activities that needs to be performed.
Table of Contents
TERMINOLOGY
ACCOUNTABILITY
I. TESTING POLICY OVERVIEW
A. Purpose
B. Scope
C. Ownership Roles & Responsibilities
D. Testing Process
E. Test Types
F. Testing Requirements
G. Test Reporting Process
H. Testing & Revision Frequency
I. Approval
II. REVISION POLICY OVERVIEW
A. Revision Process
B. Revision Requirements
C. Audit Process
D. Audit Responsibility
E. Audit Reporting Process
F. Audit Frequency
P. Approval
III. TESTING REQUIREMENTS
A. Frequency
B. Walkthroughs / Orientations
C. Tabletop Testing
D. Component Testing
E. Functional Testing
F. Business Unit Test Modules (Plans)
G. Technology Unit Test Modules (Plans)
IV. TESTING RESULTS (REPORTING)
A.
Test Summary Report
V. AUDITING REQUIREMENTS
A. Frequency
B. Retention
APPENDIX
Appendix A - Testing & Revision Standards
Data Backup Policy
Purpose:
The Data Backup Policy document establishes the activities that need
to be carried out by each Business Unit, Technology Unit, and Corporate
Units (departments) within the organization.
All departments must use this methodology to properly backup and store
media that contains vital electronic data. All electronic
records existing on the organization's data processing systems must be
backed up and sent to an offsite location according to Offsite Storage
Requirements of this policy. Retention standards must be defined
and put into action to support business and regulatory requirements.
Table of Content
TERMINOLOGY
ACCOUNTABILITY
I. POLICY OVERVIEW
A. Purpose
B. Scope
C. Ownership Roles & Responsibilities
D. Data Backup Process
E. Data Backup Types
F. Data Backup Requirements
G. Data Backup Frequency
H. Data Backup Testing
H. Offsite Storage
II. DATA BACKUP REQUIREMENTS
A. Electronic Storage Media
B. Retention of Media
C. Backup Frequency
D. Monitoring Requirements
E. Regulatory Requirements
F. Change Management Requirements
G. New Project Requirements
H. Audit Requirements
III. OFFSITE STORAGE REQUIREMENTS
A. Specifications & Location Of Offsite Facility
B. Security of Facility & Data
C. Authorized Personnel
D. Storage of Materials
E. Audits
F. Provider Expectations
APPENDIX
Appendix A - Data Backup Plan Standards
Appendix B - HIPAA Security Rule for Data Backup Plan
Appendix C- HIPAA Security Rule for Device & Media Controls
To view specific section of this document, please contact us at sales@supremusgroup.com or call us at (515) 865-4591.
To buy individual template packages, visit following links:
|