INQ313

TitleLong
Disaster recovery planning
Year
InquiryType
DisasterType
State

Recommendations for this Inquiry

INQ-ref REC-UID CODE SubCode SrcNUM Recommendation
INQ313 REC313-2507 A - Responsibility 35 - Business and Industry in relation to industry Recommendation 1

Developing, approving and implementing disaster recovery plans for all key business systems.

INQ313 REC313-2515 A - Responsibility 35 - Business and Industry in relation to industry Recommendation 9

Conducting a risk assessment of disaster recovery plans for key business systems.

INQ313 REC313-2514 E - Agency Organisation 16 - Training and behaviour Recommendation 8

Upskilling IT resources through disaster recovery testing or formal training.

INQ313 REC313-2513 D - Recovery 33 - Relief and recovery Recommendation 7

Assessing the availability and skillsets of the resources needed to respond to a major disaster recovery event.

INQ313 REC313-2512 A - Responsibility 38 - Agency/Department Reporting Recommendation 6

Documenting results and recommendations from disaster recovery tests.

INQ313 REC313-2511 A - Responsibility 35 - Business and Industry in relation to industry Recommendation 5

Scheduling disaster recovery tests for key business systems regularly, in line with their importance.

INQ313 REC313-2510 A - Responsibility 35 - Business and Industry in relation to industry Recommendation 4

Defining recovery time objectives and recovery point objectives for key business systems.

INQ313 REC313-2509 D - Recovery 33 - Relief and recovery Recommendation 3

Developing detailed recovery procedures.

INQ313 REC313-2508 A - Responsibility 25 - Inquiry, audit, lessons management and after action review Recommendation 2

Regularly reviewing these plans to ensure that they reflect the current operating environment.

INQ313 REC313-2516 D - Recovery 33 - Relief and recovery Recommendation 10

Documenting disaster recovery risks in agency risk registers, along with controls and treatment plans.