Maintaining and Updating the Plan
The Disaster Recovery Plan must always be kept up to date and applicable to current business circumstances. This means that any changes to the business process or changes to the relative importance of each part of the business process must be properly reflected within the Plan.
It is important, therefore, to ensure that information concerning changes to the business process are properly communicated to the person responsible for the Plan.
Any changes or amendments made to the Plan must be fully tested. Personnel should also be kept abreast of such changes insofar as they affect their duties and responsibilities.
The following guidelines may assist:
The DRP Must be Updated Regularly
Ensure that updates are initiated following any material changes to people, process, systems or legislation (etc) during the period in question
Responsibility for Maintaining the DRP must be Formally Allocated
Designate a key individual who will take responsibility for the maintenance, updating and further testing of the DRP.
Ongoing Testing Requirements
Initiate a test of the plan following updates of significance.
Amendments to the DRP must not affect Integrity of Plan
Where the updates to the DRP have not fully covered the implications and underlying assumptions resulting from changes to the organisation's business operations, the execution of the DRP could, potentially, be flawed.
Change Control Procedures
The DRP must be managed through formal change control mechanisms to ensure that the updates have received the appropriate level of consideration.
Responsibility for, and Ownership of, the DRP must be maintained
The updating and maintenance of the DRP should be performed by those nominated as responsible for the execution of the plan.
|