YALE-MSS-3.1.4: Ensure a current DR plan is widely available

Standard:
YALE-MSS-3.1: Create a Disaster Recovery Plan

YALE-MSS-3.1.4: Ensure a current DR plan is widely available

Low Risk Endpoint Not Required Moderate Risk Endpoint Not Required High Risk Endpoint Not Required Low Risk Server Not Required Moderate Risk Server Not Required High Risk Server Upcoming Required for HIPAA Low Risk Mobile Device Not Required Moderate Risk Mobile Device Not Required High Risk Mobile Device Not Required Low Risk Network Printer Not Required Moderate Risk Network Printer Not Required High Risk Network Printer Not Required

Details

The DR plan must be available to relevant staff to ensure it can be activated when needed.

All members of the recovery team must be able to access the DR plan and supporting documentation.

All members of the recovery team must be able to execute the plan without any assistance from the subject matter expert, if needed.

A physical copy of the plan must be provided to all team members.

While the subject matter expert should validate the DR plan, it should be able to be executed by any member of the team.

A mechanism to locally store a digital copy of the DR plan must be provided to all team members (e.g. OneDrive sync).

Important Note: if the DR plan is only stored in a location that requires the network or on a platform that does not have a high availability requirement, the team may not be able to access the DR Plan unless it is locally available.

See the Guideline for Completing an ITS Disaster Recovery (DR) Plan (Yale-MSS-3.1 GD.01)