INQ313 | Tools: BNHCRC Driving Change

TitleLong

Disaster recovery planning

Year

2017

InquiryType

DisasterType

State

Recommendations for this Inquiry

INQ-ref	REC-UID	CODE	SubCode	SrcNUM	Recommendation
INQ313	REC313-2507	A - Responsibility A - Responsibility	35 - Business and Industry in relation to industry 35 - Business and Industry in relation to industry	Recommendation 1	Developing, approving and implementing disaster recovery plans for all key business systems.
INQ313	REC313-2515	A - Responsibility A - Responsibility	35 - Business and Industry in relation to industry 35 - Business and Industry in relation to industry	Recommendation 9	Conducting a risk assessment of disaster recovery plans for key business systems.
INQ313	REC313-2514	E - Agency Organisation E - Agency Organisation	16 - Training and behaviour 16 - Training and behaviour	Recommendation 8	Upskilling IT resources through disaster recovery testing or formal training.
INQ313	REC313-2513	D - Recovery D - Recovery	33 - Relief and recovery 33 - Relief and recovery	Recommendation 7	Assessing the availability and skillsets of the resources needed to respond to a major disaster recovery event.
INQ313	REC313-2512	A - Responsibility A - Responsibility	38 - Agency/Department Reporting 38 - Agency/Department Reporting	Recommendation 6	Documenting results and recommendations from disaster recovery tests.
INQ313	REC313-2511	A - Responsibility A - Responsibility	35 - Business and Industry in relation to industry 35 - Business and Industry in relation to industry	Recommendation 5	Scheduling disaster recovery tests for key business systems regularly, in line with their importance.
INQ313	REC313-2510	A - Responsibility A - Responsibility	35 - Business and Industry in relation to industry 35 - Business and Industry in relation to industry	Recommendation 4	Defining recovery time objectives and recovery point objectives for key business systems.
INQ313	REC313-2509	D - Recovery D - Recovery	33 - Relief and recovery 33 - Relief and recovery	Recommendation 3	Developing detailed recovery procedures.
INQ313	REC313-2508	A - Responsibility A - Responsibility	25 - Inquiry, audit, lessons management and after action review 25 - Inquiry, audit, lessons management and after action review	Recommendation 2	Regularly reviewing these plans to ensure that they reflect the current operating environment.
INQ313	REC313-2516	D - Recovery D - Recovery	33 - Relief and recovery 33 - Relief and recovery	Recommendation 10	Documenting disaster recovery risks in agency risk registers, along with controls and treatment plans.