YALE-MSS-3.1: Create a Disaster Recovery Plan

Standards Group:
YALE-MSS-3: Disaster Recovery (DR)

YALE-MSS-3.1: Create a Disaster Recovery (DR) Plan

Low Risk Endpoint Not Required Moderate Risk Endpoint Not Required High Risk Endpoint Not Required Low Risk Server Not Required Moderate Risk Server Not Required High Risk Server Upcoming Required for HIPAA Low Risk Mobile Device Not Required Moderate Risk Mobile Device Not Required High Risk Mobile Device Not Required Low Risk Network Printer Not Required Moderate Risk Network Printer Not Required High Risk Network Printer Not Required

Details

Creating your DR plan means making a step-by-step procedure to restore the IT System. This can be in the event of: 

  • a component loss (e.g. a single server or database) 
  • a facility loss (e.g. a data center or distribution room) 

Please note that these steps may need coordination of actions from a variety of people or groups. 

Disasters are stressful. Time is of the essence. Creating a DR Plan organizes the information you need during a disaster. This allows you to restore the IT System within its specified availability requirement.

 

Below are questions you can ask to determine if your DR plan is complete: 

  • Do you know what personnel are affected if your system goes down? Do you know how you will communicate with affected personnel?
  • How will you get support when needed from other Yale staff or vendors?
  • Do you understand what other IT Systems must be available in order for this IT System to be available?
  • Do your steps completely restore the IT System within the  defined availability requirement time?
  • How will you determine if the IT System is healthy?
  • How will you recover the data lost to a point in time needed? This point in time is set by YALE-MSS-1.5: Plan for data recovery requirements.
  • What if the Subject Matter Expert isn't available? Is there a backup person to perform this work? Does your team know what to do?

We recommend all team members review the plan to minimize potential mistakes. If everyone plays a role in DR plan creation, they will all know what to do. This ensures you can restore the IT System as fast as possible (within your availability requirement time).  

Controls