Standard:
YALE-MSS-3.2: Test the Disaster Recovery Plan
YALE-MSS-3.2.9: Identify and record any gaps found during the testing of this DR Plan
Low Risk Endpoint
Not Required
Moderate Risk Endpoint
Not Required
High Risk Endpoint
Not Required
Low Risk Server
Not Required
Moderate Risk Server
Not Required
High Risk Server
Upcoming
Required for HIPAA
Low Risk Mobile Device
Not Required
Moderate Risk Mobile Device
Not Required
High Risk Mobile Device
Not Required
Low Risk Network Printer
Not Required
Moderate Risk Network Printer
Not Required
High Risk Network Printer
Not Required
Details
The outcome of DR plan testing should be documented, securely stored, and reviewed. This will enable a team to identify gaps that may result in an ineffective or incomplete system recovery. Simple techniques of rating/scoring the execution of Plan activities can also be helpful, here.
In some cases, there may be an external obligation (e.g., regulation) requiring that test results be archived.