Contingency Planning Policy and Procedures (CP-1)

University units shall maintain a written Continuity of Operations Plan that addresses information resources so that the effects of a disaster will be minimized, and the unit will be able either to maintain or quickly resume critical functions.

Contingency Plan (CP-2)

Maintaining a contingency plan as part of Continuity of Operations Program (COOP) is of key importance to minimize the effects of a manmade or natural disruptive event or disaster. A contingency plan kept up to date and tested on a regular basis allows a unit to resume critical functions in a timely and predictable manner.

Contingency Training (CP-3)

The University trains personnel in their contingency roles and responsibilities for high and moderate impact information resource and provides periodic refresher training.

Contingency Plan Testing (CP-4)

Periodic testing of the recovery and reconstitution procedures shall be performed to determine the effectiveness of the procedures and organizational readiness to execute the contingency plan.

Alternate Storage Site (CP-6)

The location of the alternative storage site for information resources should not be subject to the same potential impact from a disaster at the University site.

Information System Backup (CP-9)

This Control provides a set of procedures for implementing, monitoring, protecting, and testing of backup and recovery procedures for high impact information resources (user level, system level, and system documentation including security-related documentation). Operational backups shall not be used as a mechanism for meeting records retention requirements.

Information System Recovery and Reconstitution (CP-10)

The unit provides for the recovery and reconstitution of an information resource with documented recovery procedures to a known secure state after a disruption, compromise, or failure.