Minnesota  State Archives

Handbook for Trustworthy Information Systems: Section 9

Criteria Group 4: Disaster recovery Plan

Criteria Group 4: System administrators should establish a comprehensive disaster recovery plan.

 

4A. Disaster and security incident recovery plans should be periodically reviewed for currency and tested for efficiency.

 

Did You Know:

  • "Agencies shall ensure the backup, transport, storage, and recovery of their computerized information resources.” (Minnesota Department of Administration, Office of Technology, Computerized Information Resources Security Standards for State Agencies. IRM Standard 16, Version 1. June 1998.) Refer to Bibliography.
  • “Agency heads shall ensure that security policies are included in their Disaster Recovery Plans.” (Minnesota Department of Administration, Office of Technology, Computerized Information Resources Security Standards for State Agencies. IRM Standard 16, Version 1. June 1998.) Refer to Bibliography.


4B. Security incident recovery plans.


1. Hazards include:

a. hardware failure or malfunction
b. software failure or malfunction
c. network failure or malfunction
d. human error
e. unauthorized access and activity

2. Government agencies should contact the Minnesota Department of Administration, InterTechnologies Group for assistance with incident-handling procedures and support.

a. Information regarding the Minnesota Computer Emergency Response Team (MNCert) is available from James Johnson (651.296.6364; james.johnson@state.mn.us) and Arik Nelson (651-296-6361).

3. Related resources include :

a. CERT Coordination Center

  4C. Disaster recovery plans.

1. Hazards include:

a. fire and/or explosion
b. water or flood
c. wind or tornado
d. lightening
e. power outage
f. rodents
g. insects
h. human error
i. violence and/or terrorism
 

2. Government agencies should contact the Minnesota Department of Administration, InterTechnologies Group, Business Continuation Management (BCM) Unit.

a. The BCM can assist with:

1. business impact analysis
2. recovery strategy development
3. plan development
4. training
5. plan test coordination
6. plan maintenance

b. Information regarding the BCM and its services found here

3. Related resources include:

a. Minnesota State Archives’ record storage and disaster preparedness guidelines
 
b. Federal Emergency Management Agency (FEMA), emergency response and recovery information
 

 

 

go to Criteria › ›:   1, 2, 3, 4, 5next

‹ ‹back: Section 9

Go to Table of Contents

 

TIS Handbook last updated July 2002, Version 4.