YALE-MSS-3.1.1: Identify roles and responsibilities for your DR Plan

Standard:
YALE-MSS-3.1: Create a Disaster Recovery Plan

YALE-MSS-3.1.1:  Identify roles and responsibilities for your DR Plan

Low Risk Endpoint Not Required Moderate Risk Endpoint Not Required High Risk Endpoint Not Required Low Risk Server Not Required Moderate Risk Server Not Required High Risk Server Upcoming Required for HIPAA Low Risk Mobile Device Not Required Moderate Risk Mobile Device Not Required High Risk Mobile Device Not Required Low Risk Network Printer Not Required Moderate Risk Network Printer Not Required High Risk Network Printer Not Required

Details

Identify roles and responsibilities for carrying out your DR plan. This can include anyone who is required to:

  • Assess impact of the outage
  • Coordinate or restore the IT system to health, and
  • Test the IT system functionality once the service is restored

Roles and responsibilities can be divided among your system support providers. System support providers include anyone who plays a role in the delivery of the IT system. This can include Yale personnel or vendors/third-party support providers.

Once you identify the roles and responsibilities, document the appropriate:

  • Contact information for each role. Up-to-date contact information is critical in order to engage the right staff and vendors to work on the DR plan in a timely manner.
  • Escalation procedures

Examples of system support providers that may play a role in your DR plan can include:

  • Yale IT system owners
  • Yale IT system support staff (e.g. DBAs, system administrators, developers, storage administrators, monitoring administrators, facilities, electricians, etc)
  • The vendor or third party service that delivers all of or part of your IT system

Gather contact information for essential personnel. Options in addition to email and work phone numbers may be required for Critical IT infrastructure.

This information must be reviewed at least annually.