preview

Information System Recovery Plan Paper

Good Essays

Information System Recovery Plans
The following sections provide greater detail into the types of information found in a DRP and ISCP, as well as how they are used in a well-documented recovery plan. This is not an all-inclusive list of each section of the DRP or ISCP, but will help you when thinking about the types of information you will need when developing these documents for your organization. NIST SP 800-34 can provide you with additional details and templates. Let’s start by taking a closer look at some of the types of info contained in an ISCP.

Concept of Operations - ISCP
As mentioned earlier, an ISCP is application specific plan and can be activated independent of the DRP. For instance, if your data center is running several …show more content…

If the IT system is not running on a virtual machine, the recovery plan should also identify how to recover the hardware and operating system as well as the application. That is why it is crucial to ensure that your recovery documentation is tied into your asset and configurations management processes to ensure the most recent changes are updated in your recovery documentation. Depending on your data backup plan, your data may be backed up to the cloud or stored offsite. Steps to retrieve and recover backup data and system installation media should be included in the ISCP.

Reconstitution
Reconstitution takes place following recovery and includes activities for returning information systems to fully operational states. The recovered system is tested to validate system capability and functionality, recovery activities are completed and normal system operations are resumed.

Concept of Operations - DRP
The DRP is the master document that orchestrates the recovery activities for the network and IT systems. The DRP should provide guidance for the phases implemented as part of the recovery. The incorporation of checklists, rather than lengthy narratives, will help track what steps have been implemented. This is especially useful if the recovery effort takes days and you have staff rotating in and out. Like the ISCP, the DRP recovery is implemented in 3

Get Access