Standard:
YALE-MSS-3.2: Test the Disaster Recovery Plan
YALE-MSS-3.2.8: Validate that the IT System can be restored to health within the availability requirements you established
Low Risk Endpoint
Not Required
Moderate Risk Endpoint
Not Required
High Risk Endpoint
Not Required
Low Risk Server
Not Required
Moderate Risk Server
Not Required
High Risk Server
Upcoming
Required for HIPAA
Low Risk Mobile Device
Not Required
Moderate Risk Mobile Device
Not Required
High Risk Mobile Device
Not Required
Low Risk Network Printer
Not Required
Moderate Risk Network Printer
Not Required
High Risk Network Printer
Not Required
Details
Validate that the IT System can be restored to health within the availability requirements (Recovery Time Objective - RTO) you established. If the availability requirement cannot be attained, identify it as a gap and determine if that is acceptable or not from the Initiator (user). If it is not acceptable, design changes should be made or a workaround provided.
Can the DR plan facilitate a successful recovery within the expected Recovery Time Objective?