Handbook for Trustworthy Information Systems: Section 9

Criteria Group 4: System administrators should establish a comprehensive disaster recovery plan.

4A. Disaster recovery plans should be periodically reviewed for currency and tested for efficiency.

Did you know?

"Agencies shall ensure the backup, transport, storage, and recovery of their computerized information resources." (Minnesota Department of Administration, Office of Technology, Computerized Information Resources Security Standards for State Agencies. IRM Standard 16, Version 1. June 1998.) Refer to Bibliography.

"Agency heads shall ensure that security policies are included in their Disaster Recovery Plans." (Minnesota Department of Administration, Office of Technology, Computerized Information Resources Security Standards for State Agencies. IRM Standard 16, Version 1. June 1998.) Refer to Bibliography.

4B. Security incident recovery plans.

1. Hazards include:

a. hardware failure or malfunction

b. software failure or malfunction

c. network failure or malfunction

d. human error

e. unauthorized access and activity

2. Government agencies should contact the Minnesota Department of Administration, InterTechnologies Group for assistance with incident-handling procedures and support.

a. Information regarding the Minnesota Computer Emergency Response Team (MNCert) is available from James Johnson (651-296-6364; james.johnson@state.mn.us) and Arik Nelson (651-296-6361).

3. Related resources include :

a. CERT Coordination Center

http://www.cert.org

4C. Disaster recovery plans.

1. Hazards include:

a. fire and/or explosion

b. water or flood

c. wind or tornado

d. lightening

e. power outage

f. rodents

g. insects

h. human error

i. violence and/or terrorism

2. Government agencies should contact the Minnesota Department of Administration, InterTechnologies Group, Business Continuation Management (BCM) Unit.

a. The BCM can assist with:

1. business impact analysis

2. recovery strategy development

3. plan development

4. training

5. plan test coordination

6. plan maintenance

b. Information regarding the BCM and ts services is available at:

http://www.intertech.state.mn.us/bcm

3. Related resources include:

a. Minnesota State Archives' record storage guidelines available at:

http://www.mnhs.org/preserve/records/recser.html

b. Federal Emergency Management Agency (FEMA), emergency response and recovery guidelines available at:

http://www.fema.gov/hazard/index.shtm

go to Criteria › ›: 1 2 3 4 5

Go to Table of Contents

‹ ‹back: Section 9

TIS Handbook last updated July 2002, Version 4.