Disaster Recovery Business Continuity Plan Package 8: Disaster Recovery Plan (DRP) templates and Samples

Disaster recovery plan templates serve as invaluable resources for organizations in preparing for and mitigating the impact of unforeseen calamities. These templates typically encompass a structured framework outlining procedures, protocols, and strategies to swiftly respond to emergencies, ensuring business continuity and minimizing disruption. Incorporating various elements such as risk assessment, resource allocation, and communication protocols, these templates provide a comprehensive roadmap for organizations to navigate through crises effectively.

A well-crafted disaster recovery plan template not only facilitates proactive measures but also streamlines the recovery process post-disaster. By delineating roles and responsibilities, establishing clear escalation paths, and outlining recovery strategies tailored to specific scenarios, these templates empower organizations to respond promptly and decisively when faced with adversity. Moreover, they facilitate periodic reviews and updates, ensuring alignment with evolving threats and organizational dynamics, thereby bolstering resilience and readiness in the face of uncertainty.

This Disaster Recovery template suite can be used as a Disaster Planning and Business Continuity plan by the organization of any industrial category. The Disaster Recovery template suites can help the organization in complying with the requirements of HIPAA, Sarbanes-Oxley (SOX), FISMA, and ISO 27002. The main sections covered are:

The Disaster Recovery Template Suite is available in Microsoft Word and excels documents and has more than 900 pages of content (including examples of different plans 552 pages) which can be without difficulty scaled based on the size of your organization. It is advisable to create a disaster plan based on the worst-case scenario.

Cost: $840
Buy Disaster Recovery Template Suite Now

Data Backup Plan Template

Purpose

The main intention of the Data Backup Plan is to create and put into practice procedures to create and maintain retrievable exact copies of electronic data and related technology components that are essential for recovery activities.  This document will define the following standards for organization backup processing:

The data backup plan permit organization to congregate the availability requirements of different regulatory compliance.

Table of Contents for Data Backup Plan Template

CONFIDENTIALITY STATEMENT         

PLAN MAINTENANCE     

COMPLIANCY        

INTRODUCTION

Purpose
Responsibilities
Data Backup Requirements

PROCEDURES        

Backup Processing
Daily Incremental Backups
Weekly Full Backups
Monthly Full Backups
Daily Replication of Data

TAPES           

Scheduling and Backup Media Rotation
Tape Labeling
Retention Cycle
Tape Drive Cleaning
Backup Tape Testing

CONTACT LISTS    

Data Backup Vendor
Offsite Storage Vendor

APPENDIX   

Appendix A:  Tape Labeling Log
Appendix B:  Data Backup Schedule
Appendix C:  Backup Job Log
Appendix D:  Tape Cleaning Log

Application Recovery Plan Template

Purpose

The Application Recovery Plan documents the strategies, personnel, procedures, and resources necessary to recover the <Enter Application Name> Application following any type of short or long-term disruption.  The following objectives have been established for this plan:

Table of Contents for Applications Recovery Plan Template

PLAN MAINTENANCE

PLAN EXERCISE          

PLAN LOCATION         

PLAN DISTRIBUTION

PLAN INTRODUCTION

Purpose
Applicability
Scope
Assumptions
Use Of This Plan

APPLICATION PROFILE

Application Specifications
Server Requirements
Database Requirements
Network Requirements
Input (Feeders) Dependencies on Applications / Systems
Output (Receivers) Dependencies on Applications / Systems
Business Processes

PLAN ACTIVATION PROCEDURES       

Plan Activation Team

TEAM MEMBERS & RESPONSIBILITIES 

Activate Team Members
Travel to Alternate Location

RECOVERY PROCEDURES 

Restore Application Services
File Verification Tasks
Application Validation and Synchronization Tasks
Restoration Procedures
Original or New Site Restoration
Concurrent Processing
Plan Deactivation

APPENDIX

Appendix A:  Employee Contact List
Appendix B:  Vendor Contact List

Database Recovery Plan Template

Purpose

This Database Recovery Plan documents the strategies, personnel, procedures, and resources necessary to recover the Database following any type of short or long-term disruption.  The following objectives have been established for this plan:

 

Table of Contents for Database Recovery Plan Template

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION

PLAN INTRODUCTION    

Purpose
Applicability
Scope
Assumptions
Use of This Plan

DATABASE PROFILE  

Database Specifications
Server  Requirements

PLAN ACTIVATION PROCEDURES       

Plan Activation Team

TEAM MEMBERS & RESPONSIBILITIES

Activate Team Members
Travel to Alternate Location

RECOVERY PROCEDURES    

Restore Database Services

RESTORATION PROCEDURES 

Original or New Site Restoration
Concurrent Processing
Plan Deactivation

APPENDIX

Appendix A:  Employee Contact List
Appendix B:  Vendor Contact List

Network Recovery Plan Template

Purpose

The Network Recovery Plan documents the strategies, personnel, procedures, and resources necessary to recover the <Enter Company Name> network following any type of short or long-term disruption.  The following objectives have been established for this plan:

Ensure coordination with external contacts, like vendors, suppliers, etc. who will participate in the recovery process.

Table of Contents of Network Recovery Plan Template

PLAN MAINTENANCE     

PLAN EXERCISE          

PLAN LOCATION         

PLAN DISTRIBUTION

PLAN INTRODUCTION

Purpose
Applicability
Scope
Assumptions
Use of this Plan

NETWORK PROFILE  

Network Specifications
Network Requirements

PLAN ACTIVATION PROCEDURES       

Plan Activation Team

TEAM MEMBERS & RESPONSIBILITIES       

Activate Team Members
Travel to Alternate Location

RECOVERY PROCEDURES

Restore Network Services
Restoration Procedures
Original or New Site Restoration
Concurrent Processing
Plan Deactivation

APPENDIX 

Appendix A:  Employee Contact List
Appendix B:  Vendor Contact List
Appendix C:  Network Diagrams

Disaster Recovery Plan Template

This Disaster Recovery Plan key document contains the non-technical activities that need to be completed in support of Disaster Recovery operations.  The following sections contain contact numbers, contact personnel, activation and notification procedures, an overview of recovery teams, vendor contact information, and recovery locations.

Therefore the content of a disaster recovery plan template is never static and we make sure that disaster recovery plan templates are updated to incorporate the latest software and hardware details.

The complete technical recovery procedures for all components are located in the appendix since these recovery plans are customized on a regular basis due to periodic configuration changes of the company’s Technology Environment.  Furthermore, with continual changes to the hardware, network, and operating systems (OS), technical documents such as the detailed individual DR Plans for this environment will be updated on a regular basis to ensure changes in hardware and operating systems are reflected in the technical DR Procedures.

Table of Contents for Server Recovery Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE 

PLAN EXERCISE            

PLAN LOCATION          

PLAN DISTRIBUTION   

MEDIA POLICY

EXECUTIVE SUMMARY  

Definition of A Disaster
Disaster Declaration Criteria

QUICK REFERENCE GUIDE       

SCOPE & OBJECTIVES

Scope of This Plan
Objectives of This Plan

RECOVERY STRATEGY  

Recovery Strategy
Application & System Recovery
Network Recovery
Telecommunications Recovery
Contractual Agreement for Recovery Services

PLAN ASSUMPTIONS & EXPOSURES 

Planning Assumptions
Known Exposures

DISASTER DECLARATION PROCEDURE       

Declaration Authority

NOTIFICATION PROCEDURES

Notification & Activation Team

RECOVERY TEAMS   

Management Team
Administrative Team
Alternate Site Team
Offsite Storage Team

CONTACT LISTS

Employee Contact Information
Department Notifications
Vendor Notification
Other Emergency Contact Numbers

ALTERNATE LOCATIONS 

Assembly Site
Command Center
Recovery Site Information

OFFSITE STORAGE LOCATION 

Offsite Storage Information

PLAN CERTIFICATION    

Plan Certification

APPENDIX ITEMS 

I.  Application Technical Recovery
II. Systems Technical Recovery
III. Network Technical Recovery
IV. Telecommunications Technical Recovery
V. Database Technical Recovery
Appendix A – Employee Notification Procedures
Appendix B – Notification Log
Appendix C – Event / Disaster Information
Appendix D – Record Log
Appendix E – Alternate Site Authorization Form
Appendix F – Recovery Status Report
Appendix G – Disaster Recovery Report
Appendix H – Travel Accommodations Request Form
Appendix I – Employee Tracking Form
Appendix J – Assessing Potential Business Impact

Server Recovery Plan Template

Purpose

This Server Recovery Plan documents the strategies, personnel, procedures, and resources necessary to recover the <Enter Server Name> Server following any type of short or long-term disruption.  The following objectives have been established for this plan:

 

Table of Contents for Server Recovery Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE 

PLAN EXERCISE            

PLAN LOCATION          

PLAN DISTRIBUTION   

PL AN INTRODUCTION

Purpose
Applicability
Scope
Assumptions
Use of this Plan

SERVER PROFILE 

Server Specifications
Network Requirements
Applications

PLAN ACTIVATION PROCEDURES       

Plan Activation Team

TEAM MEMBERS & RESPONSIBILITIES       

Activate Team Members
Travel to Alternate Location

RECOVERY PROCEDURES 

Restore Server Services

RESTORATION PROCEDURES

Original or New Site Restoration
Concurrent Processing
Plan Deactivation

APPENDIX  

Appendix A:  Employee Contact List
Appendix B:  Vendor Contact List

Telecom Recovery Plan Template

Overview:

Telecommunications Recovery Plan documents the strategies, personnel, procedures, and resources necessary to recover the company’s Telecommunications following any type of short or long-term disruption.  The following objectives have been established for this plan:

 

Table of Contents for Telecommunications Recovery Plan Template

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION

PLAN INTRODUCTION    

Purpose
Applicability
Scope
Assumptions
Use of this Plan

TELECOMMUNICATION PROFILE

Telecommunication Specifications
Telecommunication Requirements

PLAN ACTIVATION PROCEDURES

Plan Activation Team

TEAM MEMBERS & RESPONSIBILITIES 

Activate Team Members
Travel to Alternate Location

RECOVERY PROCEDURES    

Restore Telecommunication Services

RESTORATION PROCEDURES

Original or New Site Restoration
Concurrent Processing
Plan Deactivation

APPENDIX 
Appendix A:  Employee Contact List
Appendix B:  Vendor Contact List

Emergency Mode Operations Plan Template

This Emergency Mode Operations Plan document contains the non-business unit activities that need to be completed in support of Emergency Mode Operations procedures.  The following sections contain contact numbers, contact personnel, activation and notification procedures, an overview of recovery teams, vendor contact information, and recovery locations.

The complete recovery procedures for all business units or an organization are located in the appendix since these recovery plans are customized on a regular basis due to periodic configuration changes of the company’s Business Environment.  Moreover, with continual changes to the daily business processing activities and operations, personnel, resources, and vital documents such as the detailed individual Business Resumption Plans for each department will be updated on a regular basis to ensure changes in the business processing (operations) environment are reflected in the detailed Business Resumption Procedures.

Objectives

The objective of this plan is to document critical resources and personnel requirements to protect the company if all or parts of its operations or computer services are interrupted by an outage or disruptive event.  Information such as; critical business processes, technology components required, manual workaround procedures, identified alternate recovery sites, and key personnel contact information will be documented.

To make this plan functional, each member of the business unit (department) must be trained in their respective recovery responsibilities, overall company emergency management procedures (Crisis Management), and Disaster Recovery (Technology) Plans.  Each member shall have in possession an electronic copy or printed plan that is not located at the worksite.  This copy can be kept at the employee’s home, in the offsite storage location, another facility, etc.

Table of Contents

Confidentiality Statement          
Plan Maintenance        
Plan Exercise   
Plan Location  
Plan Distribution          
Media Policy   

EXECUTIVE SUMMARY  
Definition of a Disaster
Disaster Declaration Criteria

QUICK REFERENCE GUIDE  

SCOPE & OBJECTIVES
Scope of This Plan
Objectives
Assumptions
Corporate (applies to every department within the company)
Known Exposures

EMERGENCY MODE RESPONSIBILITIES      

BIA & RA EXECUTIVE SUMMARY       

RECOVERY STRATEGY   
Recovery Strategy
Business Unit Recovery Strategy

DISASTER DECLARATION PROCEDURE
Declaration Authority

NOTIFICATION PROCEDURES
Notification & Activation Team
Department Notifications

MANAGEMENT TEAM & TASKS 
Management Team

PLAN CERTIFICATION
Plan Certification

APPENDIX ITEMS 
Appendix A:   <Enter Department Name>
Appendix B:   <Enter Department Name>
Appendix C:   <Enter Department Name>

Business Resumption Plan Template

Table of Contents for Dept. Business Resumption Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION

MEDIA POLICY

PLAN ASSUMPTIONS & EXPOSURES 
Planning Assumptions
Known Exposures

DEPARTMENT INFORMATION
Department Overview
Department Recovery Strategy & RTO
Staff Shift Schedule

PLAN ACTIVATION PROCEDURES
Plan Declaration

RECOVERY TEAMS 
Notification & Activation Team
Management Team
Administrative Team
Alternate Site Team
Offsite Storage Team

CONTACT LISTS
Employee Contact Information
Department Notifications
Vendor Notification
Other Emergency Contact Numbers (Local EMS, Fire, Police, Etc)

PROCESS INFORMATION  
Critical Business Processes
Applications & Systems
Process Dependencies
Process Recovery Procedures

MANUAL WORKAROUND PROCEDURES
Work-Around Procedures

RESOURCE REQUIREMENTS    

ALTERNATE LOCATIONS     
Assembly Site
Command Center
Recovery Site Information

OFFSITE STORAGE LOCATION
Offsite Storage Information

RESTORATION OF NORMAL OPERATIONS
Work-Area Restore Procedures
System Validation
Backlogged Work

PLAN CERTIFICATION    

APPENDIX ITEMS 
Appendix A – Employee Notification Procedures
Appendix B – Notification Log
Appendix C – Event / Disaster Information
Appendix D – Record Log
Appendix E – Alternate Site Authorization Form
Appendix F – Recover Status Report
Appendix G – Business Recovery Report
Appendix H – Travel Accommodations Request Form
Appendix I – Employee Tracking Form

Business Resumption Plan Template

Table of Contents for Dept. Business Resumption Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION

MEDIA POLICY

PLAN ASSUMPTIONS & EXPOSURES 
Planning Assumptions
Known Exposures

DEPARTMENT INFORMATION
Department Overview
Department Recovery Strategy & RTO
Staff Shift Schedule

PLAN ACTIVATION PROCEDURES
Plan Declaration

RECOVERY TEAMS 
Notification & Activation Team
Management Team
Administrative Team
Alternate Site Team
Offsite Storage Team

CONTACT LISTS
Employee Contact Information
Department Notifications
Vendor Notification
Other Emergency Contact Numbers (Local EMS, Fire, Police, Etc)

PROCESS INFORMATION  
Critical Business Processes
Applications & Systems
Process Dependencies
Process Recovery Procedures

MANUAL WORKAROUND PROCEDURES
Work-Around Procedures

RESOURCE REQUIREMENTS    

ALTERNATE LOCATIONS     
Assembly Site
Command Center
Recovery Site Information

OFFSITE STORAGE LOCATION
Offsite Storage Information

RESTORATION OF NORMAL OPERATIONS
Work-Area Restore Procedures
System Validation
Backlogged Work

PLAN CERTIFICATION    

APPENDIX ITEMS 
Appendix A – Employee Notification Procedures
Appendix B – Notification Log
Appendix C – Event / Disaster Information
Appendix D – Record Log
Appendix E – Alternate Site Authorization Form
Appendix F – Recover Status Report
Appendix G – Business Recovery Report
Appendix H – Travel Accommodations Request Form
Appendix I – Employee Tracking Form

Business Unit Test Plan

Overview:

The fundamental goal of Business Unit Plan Testing is to carry out all the steps documented in the Business Resumption and Business Continuity plan.  However, during a test, this may not be probable.  The Test Plan allows a plan to be customized for testing without modifying the actual Business Resumption and Business Continuity plan.

The objective of this document is to discover the sections of the plan to perform, additional tasks required for testing, and those tasks in the plan that cannot be completed because this is a test.

Furthermore, this Test Plan helps out in evaluating the performance of the test by rating the result of the activities performed during the test.  Rating each task shows areas where the test team did exceptionally well and areas requiring consideration.  In addition, rating the tasks aids in ranking the overall objectives and in turn, the success of the test.

Table of Contents for Business Unit Test Plan Template

TEST OVERVIEW   
Plan Information
Test Type & Elements
Test Participants
Test Scenario
Test Assumptions
Leverage Testing

TEST OBJECTIVES

TEST REQUIREMENTS    

TEST SCRIPT          

TEST SCORING SUMMARY        

TEST ISSUES SUMMARY

Technology Test Plan

Overview:

The fundamental goal of Technology Plan Testing is to carry out all the steps documented in the Business Resumption and Business Continuity plan.  However, during a test, this may not be probable.  The Test Plan allows a plan to be customized for testing without modifying the actual Business Resumption and Business Continuity plan.

The objective of this document is to recognize the sections of the plan to perform, additional tasks required for testing, and those tasks in the plan that cannot be completed because this is a test.

Furthermore, this Test Plan helps out in evaluating the performance of the test by rating the outcome of the activities performed during the test.  Rating each task shows areas where the test team did extremely well and areas requiring attention.  In addition, rating the tasks aids in ranking the overall objectives and in turn, the success of the test.

Table of Contents for Technology Test Plan Template

TEST OVERVIEW
Plan Information
Test Type & Elements
Test Participants
Test Scenario
Leverage Testing

TEST OBJECTIVES

TEST REQUIREMENTS    

TEST SCRIPT          

TEST SCORING SUMMARY        

TEST ISSUES SUMMARY 

Business Resumption Planning Policy

The Business Resumption Planning Policy document establishes the activities that need to be carried out by each Business Unit, Technology Unit, and Corporate Units (departments) within the organization.

All departments must use this methodology to recognize existing risks and threats to the business and put into practice procedures to eliminate or reduce those potential risks.

Business Resumption and Disaster Recovery (Technical Recovery) Plans are a necessity to the company. By documenting recovery plans, critical business processes, and the resources required to continue and/or resume those processes are identified.

Planning assures the resumption and continuity of the business or technology unit, operations, and large company operations and gives the surety the timely and orderly reinstatement of business processes in the event the existing business environment is unavailable.  Regardless of the Recovery Time Objective of the business or technology component, all plans must be documented.  

Table of Contents

TERMINOLOGY     
ACCOUNTABILITY
COMPLIANCE        
REVISION HISTORY
ENDORSEMENT    

I.  POLICY OVERVIEW     
A. Purpose
B. Scope
C. Ownership Roles & Responsibilities

II. PLANNING REQUIREMENTS
A. Plan Documentation
B. Plan Strategy
C. Alternate Recovery Locations
D. Plan Testing (Exercises)
E. Plan Revision (Maintenance)
F. Plan Auditing (Reviews)
G. Plan Distribution
H. Plan Certification

APPENDIX 
Appendix A – Business Resumption Planning Standard
Appendix B – Disaster Recovery Planning Standard (All Technology Plans)

Disaster Recovery Planning Standard

Sample from template

The following required and/or recommended information inputs should be completed using the full electronic version of the Disaster Recovery Plan Template and the Technology Components Recovery Plan Templates.  These templates can be obtained from the <Enter Contingency Planning Department Name>.  Those sections marked with a “Required” are sections that are required to be completed.  Sections with a “Recommended” are recommended and “Optional” are optional.

A.  General Information

Confidentiality Statement (Required)

All your documents should remain secret to your company.  You will require putting a confidential statement in this section.  If your company has a confidentiality statement that is used for all documents, use that here.

Plan Maintenance (Required)
Document all revisions, deletions, additions, etc. that have been made to this document.

This log should be kept with the document at all times.  Never delete revision history.  Just keep expanding the table.

Plan Exercise (Required)
Document any exercises (tests) that have been conducted using this plan.  This will help the auditing of the plans by providing information about the testing activities that have taken place.

 

Table of Contents for Disaster Recovery Planning Standard

TERMINOLOGY     
ACCOUNTABILITY
COMPLIANCE

I.  DISASTER RECOVERY PLANNING STANDARDS
A.  General Information
B.  Executive Summary
C.  Scope & Objectives
D.  Recovery Strategy
E.  Plan Assumptions & Exposures
F.  Disaster Declaration Procedures
E.  Recovery Teams
F.  Contact Lists
G.  Alternate Locations
H.  Plan Certification

II. APPLICATION RECOVERY PLAN STANDARDS
A.  General Information
B.  Plan Introduction
C.  Application Profile
D.  Plan Activation Procedures
E.  Team Members & Responsibilities
F.  Recovery Procedures
G.  Contact Lists
H.  Alternate Locations
I.  Restoration of Normal Operations

III. SERVER RECOVERY PLAN STANDARDS 
A.  General Information
B.  Plan Introduction
C.  Server Profile
D.  Plan Activation Procedures
E.  Team Members & Responsibilities
F.  Recovery Procedures
G.  Contact Lists
H.  Alternate Locations
I.  Restoration of Normal Operations

IV. NETWORK RECOVERY PLAN STANDARDS  
A.  General Information
B.  Plan Introduction
C.  Network Profile
D.  Plan Activation Procedures
E.  Team Members & Responsibilities
F.  Recovery Procedures
G.  Contact Lists
H.  Alternate Locations
I.  Restoration of Normal Operations

V. TELECOMMUNICATIONS RECOVERY PLAN STANDARDS 
A.  General Information
B.  Plan Introduction
C.  Telecommunication Profile
D.  Plan Activation Procedures
E.  Team Members & Responsibilities
F.  Recovery Procedures
G.  Contact Lists
H.  Alternate Locations
I.  Restoration of Normal Operations

VI. DATABASE RECOVERY PLAN STANDARDS  
A.  General Information
B.  Plan Introduction
C.  Database Profile
D.  Plan Activation Procedures
E.  Team Members & Responsibilities
F.  Recovery Procedures
G.  Contact Lists
H.  Alternate Locations
I.  Restoration of Normal Operations

Testing and Revision Policy

A. Purpose

The Testing & Revision Policy & Standards document creates the standard procedures that need to be carried out by each business unit (department) within the organization.

All departments must use this methodology to conduct testing activities on completed recovery plans, facilities, and work-area relocation.  In addition, all departments will be responsible for the annual review and maintenance of recovery plans.

B.  Scope

Testing and Revision activities are performed to discover current gaps, inconsistent data, incorrect data, and improvement of all recovery plans.  All departments with recovery plans must perform testing and revision activities on an annual basis.  The overall RTO of the recovery plan will define what types of activities need to be performed.

Table of Contents

TERMINOLOGY           

ACCOUNTABILITY      

I.  TESTING POLICY OVERVIEW  
A. Purpose
B. Scope
C. Ownership Roles & Responsibilities
D. Testing Process
E. Test Types
F. Testing Requirements
G. Test Reporting Process
H. Testing & Revision Frequency
I. Approval

II. REVISION POLICY OVERVIEW
A. Revision Process
B. Revision Requirements
C. Audit Process
D. Audit Responsibility
E. Audit Reporting Process
F. Audit Frequency
P. Approval

III. TESTING REQUIREMENTS  
A.  Frequency
B.  Walkthroughs / Orientations
C.  Tabletop Testing
D.  Component Testing
E.  Functional Testing
F.  Business Unit Test Modules (Plans)
G.  Technology Unit Test Modules (Plans)

IV. TESTING RESULTS (REPORTING)  
A.  Test Summary Report

V. AUDITING REQUIREMENTS 
A.  Frequency
B.  Retention

APPENDIX
Appendix A – Testing & Revision Standards

Data Backup Policy

Purpose:

The Data Backup Policy document establishes the activities that need to be carried out by each Business Unit, Technology Unit, and Corporate Unit (departments) within the organization.

All departments must use this methodology to properly back up and storage media that contains vital electronic data.   All electronic records existing on the organization’s data processing systems must be backed up and sent to an offsite location according to the Offsite Storage Requirements of this policy.  Retention standards must be defined and put into action to support business and regulatory requirements.

Table of Content

TERMINOLOGY     

ACCOUNTABILITY

I.  POLICY OVERVIEW
A. Purpose
B. Scope
C. Ownership Roles & Responsibilities
D. Data Backup Process
E. Data Backup Types
F. Data Backup Requirements
G. Data Backup Frequency
H. Data Backup Testing
H. Offsite Storage

II. DATA BACKUP REQUIREMENTS
A. Electronic Storage Media
B. Retention of Media
C. Backup Frequency
D. Monitoring Requirements
E. Regulatory Requirements
F. Change Management Requirements
G.  New Project Requirements
H. Audit Requirements

III. OFFSITE STORAGE REQUIREMENTS
A. Specifications & Location Of Offsite Facility
B. Security of Facility & Data
C. Authorized Personnel
D. Storage of Materials
E. Audits
F. Provider Expectations

APPENDIX   
Appendix A – Data Backup Plan Standards
Appendix B – HIPAA Security Rule for Data Backup Plan
Appendix C- HIPAA Security Rule for Device & Media Controls

To view a specific section of this document, please contact us at Bob@supremusgroup.com or call us at (515) 865-4591.

To buy individual template packages, visit the following links:

 

USER RATING:

Disaster Recovery Business Continuity Plan is rated 4.7 out of 5 by 84 users.