Overview: • Develop a conngency plan that outlines recovery objecves, restoraon priories and metrics, addresses roles and responsibilies, and idenfies essenal missions and business funcons. • Manage the conngency plan by distribung it to key conngency personnel and protect the conngency plan from unathorized disclosure and modificaon. • As part of a comprehensive conngency plan, an alternate storage site and alternate processing site shall be established to house the storage and recovery of informaon system backup. The alternave storage site shall be easily accessible and will be separate from the primary site. • Priority-of-services provisions shall be established for the alternate processing site to transfer and resume state informaon system operaons. Priority-of-service provisions shall also be established for all telecommunicaons services used for naonal or state security emergency preparedness. • Backup informaon shall be tested for reliability and integrity at least annually to provide for the recovery and reconsituon of the state informaon system in the event of a disrupon, compromise or failure. Purpose: Minimize the risk of system and service unavailability due to a variety of disrupons by providing effecve and efficient soluons to enhance system availability. Why it’s important: Minimizes downme and unavailability of services. Helps to maintain essenal funcons despite an informaon system disrupon, compromise or failure. Provides a clear plan for disaster recovery and system restoraon. Target audience: IT personnel 06.16.14 8230 IT SECURITY POLICY 8230 IT SECURITY POLICY Conngency Planning Conngency Planning Distribute the contingency plan to key personnel and coordinate contingency planning activities with incident handling activities. Contingency training shall be provided to state information system users consistent with assigned roles and responsibilities. A priority-of-service provision shall be developed for the restoration of data, communications and systems. The contingency plan will outline a restoration timeframe based on priorities, regulations and other organizations. User-level and system-level information backups shall be conducted for a timely recovery and reconstitution of data and services. For more informaon about this IT Security Policy, contact [email protected]. 07.07.14 7

8230 Contingency Planning V2 NewLogo - aset.az.gov POLICY P8230... · The contingency plan will outline a restoration timeframe based on priorities, regulations and other organizations

Download PDF Report

Upload
hathuan
View
222
Download
0

Embed Size (px)

Citation preview

Page 1: 8230 Contingency Planning V2 NewLogo - aset.az.gov POLICY P8230... · The contingency plan will outline a restoration timeframe based on priorities, regulations and other organizations

Overview:

• Develop a contingency plan that outlines recovery objectives, restoration priorities and metrics, addresses roles and responsibilities, and identifies essential missions and business functions.

• Manage the contingency plan by distributing it to key contingency personnel and protect the contingency plan from unathorized disclosure and modification.

• As part of a comprehensive contingency plan, an alternate storage site and alternate processing site shall be established to house the storage and recovery of information system backup. The alternative storage site shall be easily accessible and will be separate from the primary site.

• Priority-of-services provisions shall be established for the alternate processing site to transfer and resume state information system operations. Priority-of-service provisions shall also be established for all telecommunications services used for national or state security emergency preparedness.

• Backup information shall be tested for reliability and integrity at least annually to provide for the recovery and reconsitution of the state information system in the event of a disruption, compromise or failure.

Purpose:Minimize the risk of system and service unavailability due to a variety of disruptions by providing effective and efficient solutions to enhance system availability.

Why it’s important:Minimizes downtime and unavailability of services. Helps to maintain essential functions despite an information system disruption, compromise or failure. Provides a clear plan for disaster recovery and system restoration.

Target audience:IT personnel

06.16.14

8230IT SECURITY POLICY

8230IT SECURITY POLICYContingency

PlanningContingency

Planning

Distribute the contingency plan to key personnel and coordinate contingency planning activities with incident handling activities.

Contingency training shall be provided to state information system users consistent with assigned roles and responsibilities.

A priority-of-service provision shall be developed for the restoration of data, communications and systems.

The contingency plan will outline a restoration timeframe based on priorities, regulations and other organizations.

User-level and system-level information backups shall be conducted for a timely recovery and reconstitution of data and services.

For more information about this IT Security Policy, contact [email protected].