University units shall maintain a written Continuity of Operations Plan that addresses information resources so that the effects of a disaster will be minimized, and the unit will be able either to maintain or quickly resume critical functions.

Maintaining a contingency plan as part of Continuity of Operations Program (COOP) is of key importance to minimize the effects of a manmade or natural disruptive event or disaster. A contingency plan kept up to date and tested on a regular basis allows a unit to resume critical functions in a timely and predictable manner.

The University trains personnel in their contingency roles and responsibilities for high and moderate impact information resource and provides periodic refresher training.

Periodic testing of the recovery and reconstitution procedures shall be performed to determine the effectiveness of the procedures and organizational readiness to execute the contingency plan.

The location of the alternative storage site for information resources should not be subject to the same potential impact from a disaster at the University site.

This Control provides a set of procedures for implementing, monitoring, protecting, and testing of backup and recovery procedures for high impact information resources (user level, system level, and system documentation including security-related documentation). Operational backups shall not be used as a mechanism for meeting records retention requirements.

The unit provides for the recovery and reconstitution of an information resource with documented recovery procedures to a known secure state after a disruption, compromise, or failure.

Alternative communication protocols offer resilience to counter potential impact from a disaster impacting University information resources.