ITDisasterRecoveryManagementChecklistReportonRECOVERY.docx

RECOVERY

 Is the recovery management process periodically reviewed and updated to ensure its effectiveness?

 What is a mobile recovery center?

 Are post-recovery reports prepared for use by appropriate levels of management (measurement)?

 Can the backup power operate for the length of time necessary for implementing the recovery plan?

 What is your recovery time objective (RTO) in hours?

 What are the assumptions about the sudden spurt in data volumes that will hit the systems post recovery?

 Who pays for business continuity and recovery and how much?

 How well is the IT service continuity management recovery plan defined?

 What is a recovery time objective (RTO)?

 What critical operational or security controls require implementation prior to recovery?

 What impact did the governance arrangements have on the recovery process?

 How confident are you in the robustness of your organizations IT recovery and business continuity plans should you face a data breach, corruption, or loss?

 Can the backup power run long enough to implement the recovery plan?

 What practical recovery activities could one be doing?

 What is the anticipated recovery / restoration time?

 What measures will organization put in place to capture all costs associated with the recovery e ort?

 Can a leading provider give clients complete freedom on security and recovery issues?

 How often do you test your business recovery tech?

 What are the key considerations for pursuing an internal versus a third-party recovery solution?

 How many generations of backup files are needed to be sure there is rapid, accurate recovery?

CHECKLIST

1

 Do you test and audit recovery capability and requirements?

 What communication devices would be needed at a recovery site?

 Has your recovery budget increased or decreased and was that decision based on calculated costs of downtime (or other factors)?

 What does a typical tape backup and recovery solution deliver?

 Does your organization have an IT recovery plan?

 What is your current IT recovery strategy?

 Does your contract reflect current requirements for backup and recovery services?

 Where should the recovery occur?

 Is there a need for synchronized recovery of lost data, backed-up data and data from any continuing business transactions during an outage?

 Which backup sites takes the longest recovery time?

 What is the minimum number of staff and amount of space that would be required at a recovery site?

 Have backup and recovery procedures been established and tested to ensure availability of data?

 Is there any potential impact from common recovery sites?

 Are you unable to meet your recovery time objective upon an application, database or server fault?

 What is the minimum number of staff and space that would be required at a recovery site?

 Is the recovery management process communicated to all affected areas within your organization?

 What are the key considerations when developing recovery strategies?

 Which best reflects ITIL guidance for how often an IT Service Continuity recovery plan should be tested?

 What special forms or supplies would be needed at a recovery site?

 Has your backup and recovery system been tested?

 NOTES: