Tel: (515) 865-4591
 
 
 

Package 8: Disaster Recovery Plan (DRP) templates and Samples

This Disaster Recovery Plan (DRP) template suite can be used as a Disaster Planning & Business Continuity plan (BCP) by any organization. The Disaster Recovery template suite can help in complying with requirements of HIPAA, Sarbanes Oxley (SOX), FISMA and ISO 17799. Main sections covered are:

  • Disaster Recovery Plan and Business Continuity Plan Template
  • Business Resumption Plan examples for depts. Like Accounting, Human resources etc
  • Emergency Mode Operation Plan (EMOP)
  • Testing and Revision Plan for DRP & BCP
  • Policies and procedures
  • Department Disaster Recovery Activation
  • Backup Strategies and Plans
  • Recovery Strategies
  • Training of the Disaster Recovery Team
  • Testing of the Disaster Recovery Plan
  • Evaluation of the Disaster Recovery Plan Tests
  • Maintenance of the Disaster Recovery Plan

The Disaster Planning Template Suite comes as a Word & excels documents and has more than 900 pages of content (including examples of different plans 552 pages) which can be easily scaled based on size of your organization. It is advisable to create the disaster plan based on worse case scenario.

  • Data Backup Plan Template (18 pages)
  • Data Backup Plan Development Guide (11 pages)
  • Example Data Backup Plan (19 pages)
  • Application Recovery Plan Template (23 pages)
  • Application Recovery Plan Development Guide (18 pages)
  • Example Application Recovery Plan (23 pages)
  • Database Recovery Plan Template (19 pages)
  • Database Recovery Plan Development Guide (16 pages)
  • Network Recovery Plan Template (20 pages)
  • Network Recovery Plan Development Guide (15 pages)
  • Disaster Recovery Plan Template (38 pages)
  • Disaster Recovery Plan Development Guide (17 pages)
  • Example Disaster Recovery Plan (38 pages)
  • Server Recovery Plan Template (19 pages)
  • Server Recovery Plan Development Guide (15 pages)
  • Telecom Recovery Plan Template (19 pages)
  • Telecom Recovery Plan Development Guide (17 pages)
  • Emergency Mode Operations Plan (EMOP) Template ( 18 pages)
  • Emergency Mode Operations Plan Development Guide (11 pages)
  • Business Resumption Plan (BRP) Template (16 pages)
  • Emergency Mode Operation Planning Standards (38 pages)
  • Business
  • Resumption Plan (BRP) Template (38 pages)
  • Business Resumption Plan Development Guide (14 pages)
  • Example Accounting Business Resumption Plan (42 pages)
  • Example BIOMED Business Resumption Plan (37 pages)
  • Example Corporate Communication Business Resumption Plan (38 pages)
  • Example Emergency Services Business Resumption Plan (37 pages)
  • Example Facilities & Security Business Resumption Plan (38 pages)
  • Example Human Resources Business Resumption Plan (38 pages)
  • Example Laboratory Business Resumption Plan (38 pages)
  • Example Materials Management Business Resumption Plan (38 pages)
  • Example Surgery Business Resumption Plan (36 pages)
  • Example Pharmacy Business Resumption Plan (37 pages)
  • Testing and Revision Program (18 pages)
  • Business Unit Test Plan (16 pages)
  • Business Unit Test Plan Development Guide (10 pages)
  • Technology Test Plan (18 pages)
  • Technology Test Plan Development Guide (10 pages)
  • Test Schedule Template (2 pages)
  • Test Notification Memo (1 pages)
  • Types of Tests (1 pages)
  • Example Business Unit Test Plan (14 pages)
  • Example Technology Test Plan (16 pages)
  • Example Test Notification Memo (1 pages)
  • Example Test Schedule (2 pages)
  • Business Unit Plan Audit Checklist (16 pages)
  • Application Plan Audit Checklist (7 pages)
  • Database Plan Audit Checklist (6 pages)
  • Disaster Plan Audit Checklist (6 pages)
  • Network Plan Audit Checklist (6 pages)
  • Server Plan Audit Checklist (6 pages)
  • Telecom Plan Audit Checklist (6 pages)
  • Audit Notification Memo (1 pages)
  • Plan Audit Final Report Template (1 pages)
  • Example Business Unit Plan Audit Checklist (6 pages)
  • Example Audit Notification Memo (1 pages)
  • Example Plan Audit Final Report (2 pages)
  • Example Plan Audit Follow Up Memo (1 pages)
  • Contingency Planning Policy (10 pages)
  • Disaster Recovery Planning Standard (69 pages)
  • Emergency Mode Operation Plan Standards (14 pages)
  • Business Resumption Planning Standards (20 pages)
  • Testing & Revision Policy(17 pages)
  • Testing & Revision Standards (14 pages)
  • Data Backup Plan Policy(15 pages)
  • Data Backup Standard (8 pages)
  • Training & Awareness Standard(7 pages)
  • Instructions on how to update all standards(3 pages)
  • Types of Contingency Plans (9 pages)

Cost: $840

 

Data Backup Plan Template

Purpose

The purpose of the Data Backup Plan is to establish and implement procedures to create and maintain retrievable exact copies of electronic Protected Health Information (ePHI) and related technology components that are necessary for recovery activities.  This document will define the following standards for organization backup processing:

  • To provide a standard operating procedure for backup up organization data
  • To provide a standard for labeling backup media
  • To provide a standard for data retention
  • To provide a standard for offsite storage and retrieval of backup media

The data backup plan allows organization to meet the availability requirements of different regulatory compliance.

Table of Contents for Data Backup Plan Template

CONFIDENTIALITY STATEMENT         

PLAN MAINTENANCE     

COMPLIANCY        

INTRODUCTION    

Purpose           
Responsibilities
Data Backup Requirements      

PROCEDURES        

Backup Processing      
Daily Incremental Backups       
Weekly Full Backups   
Monthly Full Backups  
Daily Replication of Data         

TAPES           

Scheduling and Backup Media Rotation           
Tape Labeling  
Retention Cycle
Tape Drive Cleaning    
Backup Tape Testing   

CONTACT LISTS    

Data Backup Vendor   
Offsite Storage Vendor

APPENDIX   

Appendix A:  Tape Labeling Log         
Appendix B:  Data Backup Schedule   
Appendix C:  Backup Job Log 
Appendix D:  Tape Cleaning Log

Application Recovery Plan Template

Purpose

This Recovery Plan documents the strategies, personnel, procedures and resources necessary to recover the <Enter Application Name> Application following any type of short or long term disruption.  The following objectives have been established for this plan:

  • Maximize the value of contingency planning by establishing recovery plans that consists of the following phases:
    1. Notification / Activation:  To activate the plan and notify vendors, customers, employees, etc of the recovery activities
    2. Recovery Phase:  To recovery and resume temporary IT operations on alternate hardware (equipment) and possibly at an alternate location
    3. Restoration Phase:  To restore IT systems processing capabilities to normal operations at the primary location or the new location
  • Define the activities, procedures, and essential resources required to perform <Enter Application Name> processing requirements during prolonged periods of disruption to normal operations.
  • Allocate responsibilities to designated personnel and provide guidance for recovering <Enter Application Name> during prolong periods of interruption to normal operations. 
  • Make certain coordination with other <Enter Company Name> staff is conducted. 
  • Ensure coordination with external contacts, like vendors, suppliers, etc. who will participate in the recovery process. 

Table of Contents for Applications Recovery Plan Template

PLAN MAINTENANCE

PLAN EXERCISE          

PLAN LOCATION         

PLAN DISTRIBUTION

PLAN INTRODUCTION

Purpose                 
Applicability          
Scope   
Assumptions          
Use Of This Plan   

APPLICATION PROFILE

Application Specifications        
Server Requirements    
Database Requirements           
Network Requirements
Input (Feeders) Dependencies on Applications / Systems         
Output (Receivers) Dependencies on Applications / Systems    
Business Processes

PLAN ACTIVATION PROCEDURES       
            Plan Activation Team   

TEAM MEMBERS & RESPONSIBILITIES 

Activate Team Members          
Travel to Alternate Location     

RECOVERY PROCEDURES 

Restore Application Services   
File Verification Tasks 
Application Validation and Synchronization Tasks        
Restoration Procedures
Original or New Site Restoration          
Concurrent Processing 
Plan Deactivation   

APPENDIX

Appendix A:  Employee Contact List   
Appendix B:  Vendor Contact List

Database Recovery Plan Template

Purpose

This Recovery Plan documents the strategies, personnel, procedures and resources necessary to recover the Database following any type of short or long term disruption.  The following objectives have been established for this plan:

  • Maximize the value of contingency planning by establishing recovery plans that consists of the following phases:
    1. Notification / Activation:  To activate the plan and notify vendors, customers, employees, etc of the recovery activities
    2. Recovery Phase:  To recovery and resume temporary IT operations on alternate hardware (equipment) and possibly at an alternate location
    3. Restoration Phase:  To restore IT systems processing capabilities to normal operations at the primary location or the new location
  • Define the activities, procedures, and essential resources required to perform <Enter Database Name> processing requirements during prolonged periods of disruption to normal operations.
  • Allocate responsibilities to designated personnel and provide guidance for recovering <Enter Database Name> during prolong periods of interruption to normal operations. 
  • Make certain coordination with other <Enter Company Name> staff is conducted. 
  • Ensure coordination with external contacts, like vendors, suppliers, etc. who will participate in the recovery process. 

Table of Contents for Database Recovery Plan Template

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION         

PLAN INTRODUCTION    

Purpose           
Applicability    
Scope 
Assumptions    
Use of This Plan          

DATABASE PROFILE  

Database Specifications           
Server Requirements    

PLAN ACTIVATION PROCEDURES       

Plan Activation Team   

TEAM MEMBERS & RESPONSIBILITIES

Activate Team Members          
Travel to Alternate Location     

RECOVERY PROCEDURES    

Restore Database Services      

RESTORATION PROCEDURES 

Original or New Site Restoration          
Concurrent Processing 
Plan Deactivation         

APPENDIX

Appendix A:  Employee Contact List   
Appendix B:  Vendor Contact List

Network Recovery Plan Template

Purpose

This Recovery Plan documents the strategies, personnel, procedures and resources necessary to recover the <Enter Company Name> network following any type of short or long term disruption.  The following objectives have been established for this plan:

  • Maximize the value of contingency planning by establishing recovery plans that consists of the following phases:
    1. Notification / Activation:  To activate the plan and notify vendors, customers, employees, etc of the recovery activities
    2. Recovery Phase:  To recovery and resume temporary IT operations on alternate hardware (equipment) and possibly at an alternate location
    3. Restoration Phase:  To restore IT systems processing capabilities to normal operations at the primary location or the new location
  • Define the activities, procedures, and essential resources required to perform network recovery during prolonged periods of disruption to normal operations.
  • Allocate responsibilities to designated personnel and provide guidance for recovering the network during prolong periods of interruption to normal operations. 
  • Make certain coordination with other <Enter Company Name> staff is conducted. 

Ensure coordination with external contacts, like vendors, suppliers, etc. who will participate in the recovery process. 

Table of Contents of Network Recovery Plan Template

PLAN MAINTENANCE     

PLAN EXERCISE          

PLAN LOCATION         

PLAN DISTRIBUTION

PLAN INTRODUCTION

Purpose                 
Applicability          
Scope                   
Assumptions          
Use of this Plan      

NETWORK PROFILE  

Network Specifications
Network Requirements

PLAN ACTIVATION PROCEDURES       
            Plan Activation Team   

TEAM MEMBERS & RESPONSIBILITIES       

Activate Team Members          
Travel to Alternate Location     

RECOVERY PROCEDURES

Restore Network Services       
Restoration Procedures
Original or New Site Restoration          
Concurrent Processing 
Plan Deactivation   

APPENDIX 

Appendix A:  Employee Contact List   
Appendix B:  Vendor Contact List       
Appendix C:  Network Diagrams

Disaster Recovery Plan Template

This main document contains the non-technical activities that need to be completed in support of Disaster Recovery operations.  The following sections contain contact numbers, contact personnel, activation and notification procedures, overview of recovery teams, vendor contact information and recovery locations. 

The detailed technical recovery procedures for all components are located in the appendix since these recovery plans are modified on a regular basis due to periodic configuration changes of the company’s Technology Environment.  Furthermore, with continual changes to the hardware, network, and operating systems (OS), technical documents such as the detailed individual DR Plans for this environment will be updated on a regular basis to ensure changes in hardware and operating systems are reflected in the technical DR Procedures. 

Table of Contents for Server Recovery Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE 

PLAN EXERCISE            

PLAN LOCATION          

PLAN DISTRIBUTION   

MEDIA POLICY

EXECUTIVE SUMMARY  

Definition of A Disaster
Disaster Declaration Criteria    

QUICK REFERENCE GUIDE       

SCOPE & OBJECTIVES     

Scope of This Plan       
Objectives of This Plan

RECOVERY STRATEGY  

Recovery Strategy       
Application & System Recovery          
Network Recovery      
Telecommunications Recovery 
Contractual Agreement for Recovery Services  

PLAN ASSUMPTIONS & EXPOSURES 

Planning Assumptions  
Known Exposures       

DISASTER DECLARATION PROCEDURE       

Declaration Authority   

NOTIFICATION PROCEDURES

Notification & Activation Team

RECOVERY TEAMS   

Management Team      
Administrative Team    
Alternate Site Team     
Offsite Storage Team   

CONTACT LISTS

Employee Contact Information 
Department Notifications         
Vendor Notification     
Other Emergency Contact Numbers

ALTERNATE LOCATIONS 

Assembly Site  
Command Center        
Recovery Site Information        

OFFSITE STORAGE LOCATION 

Offsite Storage Information      

PLAN CERTIFICATION    

Plan Certification         

APPENDIX ITEMS 

I.  Application Technical Recovery       
II. Systems Technical Recovery           
III. Network Technical Recovery         
IV. Telecommunications Technical Recovery    
V. Database Technical Recovery         
Appendix A – Employee Notification Procedures         
Appendix B – Notification Log
Appendix C – Event / Disaster Information       
Appendix D – Record Log      
Appendix E – Alternate Site Authorization Form          
Appendix F – Recovery Status Report 
Appendix G – Disaster Recovery Report         
Appendix H – Travel Accommodations Request Form 
Appendix I – Employee Tracking Form
Appendix J – Assessing Potential Business Impact

Server Recovery Plan Template

Purpose

This Recovery Plan documents the strategies, personnel, procedures and resources necessary to recover the <Enter Server Name> Server following any type of short or long term disruption.  The following objectives have been established for this plan:

  • Maximize the value of contingency planning by establishing recovery plans that consists of the following phases:
    1. Notification / Activation:  To activate the plan and notify vendors, customers, employees, etc of the recovery activities
    2. Recovery Phase:  To recovery and resume temporary IT operations on alternate hardware (equipment) and possibly at an alternate location
    3. Restoration Phase:  To restore IT systems processing capabilities to normal operations at the primary location or the new location
  • Define the activities, procedures, and essential resources required to perform <Enter Server Name> processing requirements during prolonged periods of disruption to normal operations.
  • Allocate responsibilities to designated personnel and provide guidance for recovering <Enter Server Name> during prolong periods of interruption to normal operations. 
  • Make certain coordination with other <Enter Company Name> staff is conducted. 
  • Ensure coordination with external contacts, like vendors, suppliers, etc. who will participate in the recovery process. 

Table of Contents for Server Recovery Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE 

PLAN EXERCISE            

PLAN LOCATION          

PLAN DISTRIBUTION   

PLAN INTRODUCTION

Purpose                 
Applicability          
Scope                   
Assumptions          
Use of this Plan      

SERVER PROFILE 

Server Specifications   
Network Requirements
Applications          

PLAN ACTIVATION PROCEDURES       
            Plan Activation Team   

TEAM MEMBERS & RESPONSIBILITIES       

Activate Team Members          
Travel to Alternate Location     

RECOVERY PROCEDURES 

            Restore Server Services

RESTORATION PROCEDURES

Original or New Site Restoration          
Concurrent Processing 
Plan Deactivation   

APPENDIX  

Appendix A:  Employee Contact List   
Appendix B:  Vendor Contact List

Telecom Recovery Plan Template

Overview:

Telecommunications Recovery Plan documents the strategies, personnel, procedures and resources necessary to recover company’s Telecommunications following any type of short or long term disruption.  The following objectives have been established for this plan:

  • Maximize the value of contingency planning by establishing recovery plans that consists of the following phases:
    1. Notification / Activation:  To activate the plan and notify vendors, customers, employees, etc of the recovery activities
    2. Recovery Phase:  To recovery and resume temporary IT operations on alternate hardware (equipment) and possibly at an alternate location
    3. Restoration Phase:  To restore IT systems processing capabilities to normal operations at the primary location or the new location
  • Define the activities, procedures, and essential resources required to perform network recovery during prolonged periods of disruption to normal operations.
  • Allocate responsibilities to designated personnel and provide guidance for recovering the network during prolong periods of interruption to normal operations. 
  • Make certain coordination with other staff is conducted. 
  • Ensure coordination with external contacts, like vendors, suppliers, etc. who will participate in the recovery process. 

Table of Contents for Telecommunications Recovery Plan Template

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION
           
PLAN INTRODUCTION    

Purpose           
Applicability    
Scope 
Assumptions    
Use of this Plan

TELECOMMUNICATION PROFILE

Telecommunication Specifications        
Telecommunication Requirements         

PLAN ACTIVATION PROCEDURES

Plan Activation Team   

TEAM MEMBERS & RESPONSIBILITIES 

Activate Team Members          
Travel to Alternate Location     

RECOVERY PROCEDURES    

Restore Telecommunication Services    

RESTORATION PROCEDURES

Original or New Site Restoration          
Concurrent Processing 
Plan Deactivation         

APPENDIX 

Appendix A:  Employee Contact List   
Appendix B:  Vendor Contact List

Emergency Mode Operations Plan Template

This main document contains the non-business unit activities that need to be completed in support of Emergency Mode Operations procedures.  The following sections contain contact numbers, contact personnel, activation and notification procedures, overview of recovery teams, vendor contact information and recovery locations. 

The detailed recovery procedures for all business units (departments) are located in the appendix since these recovery plans are modified on a regular basis due to periodic configuration changes of the company’s Business Environment.  Furthermore, with continual changes to the daily business processing activities and operations, personnel, resources, and vital documents such as the detailed individual Business Resumption Plans for each department will be updated on a regular basis to ensure changes in the business processing (operations) environment are reflected in the detailed Business Resumption Procedures. 

Objectives

The objective of this plan is to document critical resources and personnel requirements to protect the company if all or parts of its operations or computer services are interrupted by an outage or disruptive event.  Information such as; critical business processes, technology components required, manual work-around procedures, identified alternate recovery sites, and key personnel contact information will be documented. 

To make this plan functional, each member of the business unit (department) must be trained in their respective recovery responsibilities, overall company emergency management procedures (Crisis Management) and Disaster Recovery (Technology) Plans.  Each member shall have in possession an electronic copy or printed plan that is not located at the work site.  This copy can be kept at employee’s home, in the offsite storage location, another facility, etc.   

Table of Contents

Confidentiality Statement          
Plan Maintenance        
Plan Exercise   
Plan Location  
Plan Distribution          
Media Policy   

EXECUTIVE SUMMARY  

Definition of a Disaster 
Disaster Declaration Criteria    

QUICK REFERENCE GUIDE  

SCOPE & OBJECTIVES     

Scope of This Plan       
Objectives       
Assumptions    
Corporate (applies to every department within the company)    
Known Exposures       

EMERGENCY MODE RESPONSIBILITIES      

BIA & RA EXECUTIVE SUMMARY       

RECOVERY STRATEGY   

Recovery Strategy       
Business Unit Recovery Strategy          

DISASTER DECLARATION PROCEDURE

Declaration Authority   

NOTIFICATION PROCEDURES

Notification & Activation Team
Department Notifications         

MANAGEMENT TEAM & TASKS 

Management Team      

PLAN CERTIFICATION

Plan Certification         

APPENDIX ITEMS 

Appendix A:   <Enter Department Name>       
Appendix B:   <Enter Department Name>        
Appendix C:   <Enter Department Name>

Business Resumption Plan Template

Table of Contents for Dept. Business Resumption Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION
           
MEDIA POLICY

PLAN ASSUMPTIONS & EXPOSURES 

Planning Assumptions  
Known Exposures       

DEPARTMENT INFORMATION

Department Overview  
Department Recovery Strategy & RTO
Staff Shift Schedule      

PLAN ACTIVATION PROCEDURES

Plan Declaration          

RECOVERY TEAMS 

Notification & Activation Team
Management Team      
Administrative Team    
Alternate Site Team     
Offsite Storage Team   

CONTACT LISTS

Employee Contact Information 
Department Notifications         
Vendor Notification     
Other Emergency Contact Numbers (Local EMS, Fire, Police, Etc)     

PROCESS INFORMATION  

Critical Business Processes      
Applications & Systems           
Process Dependencies 
Process Recovery Procedures 

MANUAL WORK-AROUND PROCEDURES

Work-Around Procedures       

RESOURCE REQUIREMENTS    

ALTERNATE LOCATIONS     

Assembly Site  
Command Center        
Recovery Site Information        

OFFSITE STORAGE LOCATION

Offsite Storage Information      

RESTORATION OF NORMAL OPERATIONS

Work-Area Restore Procedures          
System Validation        
Backlogged Work          

PLAN CERTIFICATION    
           
APPENDIX ITEMS 

Appendix A – Employee Notification Procedures         
Appendix B – Notification Log
Appendix C – Event / Disaster Information       
Appendix D – Record Log      
Appendix E – Alternate Site Authorization Form          
Appendix F – Recover Status Report   
Appendix G – Business Recovery Report         
Appendix H – Travel Accommodations Request Form 
Appendix I – Employee Tracking Form

Business Resumption Plan Template

Table of Contents for Dept. Business Resumption Plan

CONFIDENTIALITY STATEMENT

PLAN MAINTENANCE       

PLAN EXERCISE      

PLAN LOCATION    

PLAN DISTRIBUTION
           
MEDIA POLICY

PLAN ASSUMPTIONS & EXPOSURES 

Planning Assumptions  
Known Exposures       

DEPARTMENT INFORMATION

Department Overview  
Department Recovery Strategy & RTO
Staff Shift Schedule      

PLAN ACTIVATION PROCEDURES

Plan Declaration          

RECOVERY TEAMS 

Notification & Activation Team
Management Team      
Administrative Team    
Alternate Site Team     
Offsite Storage Team   

CONTACT LISTS

Employee Contact Information 
Department Notifications         
Vendor Notification     
Other Emergency Contact Numbers (Local EMS, Fire, Police, Etc)     

PROCESS INFORMATION  

Critical Business Processes      
Applications & Systems           
Process Dependencies 
Process Recovery Procedures 

MANUAL WORK-AROUND PROCEDURES

Work-Around Procedures       

RESOURCE REQUIREMENTS    

ALTERNATE LOCATIONS     

Assembly Site  
Command Center        
Recovery Site Information        

OFFSITE STORAGE LOCATION

Offsite Storage Information      

RESTORATION OF NORMAL OPERATIONS

Work-Area Restore Procedures          
System Validation        
Backlogged Work          

PLAN CERTIFICATION    
           
APPENDIX ITEMS 

Appendix A – Employee Notification Procedures         
Appendix B – Notification Log
Appendix C – Event / Disaster Information       
Appendix D – Record Log      
Appendix E – Alternate Site Authorization Form          
Appendix F – Recover Status Report   
Appendix G – Business Recovery Report         
Appendix H – Travel Accommodations Request Form 
Appendix I – Employee Tracking Form

Business Unit Test Plan

Overview:

The fundamental goal of Contingency Plan Testing is to carry out all the steps documented in the contingency plan.  However, during a test this may not be probable.  The Test Plan permits a plan to be tailored for testing without modifying the actual contingency plan. 

The goal of this document is to identify the sections of the plan to perform, additional tasks required for testing and those tasks in the plan that cannot be completed because this is a test.  

Furthermore, this Test Plan helps out in analyzing the performance of the test by rating the outcome of the activities performed during the test.  Rating each task shows areas where the test team did extremely well and areas requiring attention.  In addition, rating the tasks aids in ranking the overall objectives and in turn, the success of the test. 

Table of Contents for Business Unit Test Plan Template

TEST OVERVIEW   

Plan Information          
Test Type & Elements 
Test Participants          
Test Scenario  
Test Assumptions        
Leverage Testing         

TEST OBJECTIVES

TEST REQUIREMENTS    

TEST SCRIPT          

TEST SCORING SUMMARY        

TEST ISSUES SUMMARY

Technology Test Plan

Overview:

The fundamental goal of Contingency Plan Testing is to carry out all the steps documented in the contingency plan.  However, during a test this may not be probable.  The Test Plan permits a plan to be tailored for testing without modifying the actual contingency plan. 

The goal of this document is to identify the sections of the plan to perform, additional tasks required for testing and those tasks in the plan that cannot be completed because this is a test. 

Furthermore, this Test Plan helps out in analyzing the performance of the test by rating the outcome of the activities performed during the test.  Rating each task shows areas where the test team did extremely well and areas requiring attention.  In addition, rating the tasks aids in ranking the overall objectives and in turn, the success of the test.

Table of Contents for Technology Test Plan Template

TEST OVERVIEW

Plan Information          
Test Type & Elements 
Test Participants          
Test Scenario  
Leverage Testing         

TEST OBJECTIVES

TEST REQUIREMENTS    

TEST SCRIPT          

TEST SCORING SUMMARY        

TEST ISSUES SUMMARY 

Contingency Planning Policy

The Contingency Planning Policy document establishes the activities that need to be carried out by each Business Unit, Technology Unit, and Corporate Units (departments) within the organization. 

All departments must utilize this methodology to identify current risks and threats to the business and implement measures to eliminate or reduce those potential risks.    

Business Resumption and Disaster Recovery (Technical Recovery) Plans are a necessity to the company. By documenting recovery plans, critical business processes and the resources required to continue and/or resume those process are identified.
 
Planning assures the contingency of the business or technology unit, operations, and overall company operations and assures the timely and orderly restoration of business processes in the event the existing business environment is unavailable.  Regardless of the Recovery Time Objective of the business or technology component, all plans must be documented.  

Table of Contents

TERMINOLOGY     
ACCOUNTABILITY
COMPLIANCE        
REVISION HISTORY
ENDORSEMENT    

I.  POLICY OVERVIEW     

A. Purpose       
B.  Scope        
C.  Ownership Roles & Responsibilities           

II. PLANNING REQUIREMENTS

A.  Plan Documentation           
B.  Plan Strategy          
C.  Alternate Recovery Locations        
D. Plan Testing (Exercises)      
E. Plan Revision (Maintenance)
F.  Plan Auditing (Reviews)      
G.  Plan Distribution     
H.  Plan Certification    

APPENDIX 

Appendix A – Business Resumption Planning Standard 
Appendix B – Disaster Recovery Planning Standard (All Technology Plans)  

Disaster Recovery Planning Standard

Sample from template

The following required and/or recommended information inputs should be completed using the full electronic version of the Disaster Recovery Plan Template and the Technology Components Recovery Plan Templates.  These templates can be obtained from the <Enter Contingency Planning Department Name>.  Those sections marked with a “Required” are sections that are required to be completed.  Sections with a “Recommended” are recommended and “Optional” are optional. 

A.  General Information

Confidentiality Statement (Required)

All your documents should remain confidential to your company.  You will need to put a confidentially statement in this section.  If you company has a confidentiality statement that is used for all document, use that here. 

Plan Maintenance (Required)

Document all revisions, deletions, additions, etc. that have been made to this document.

  1. Record the Version of the Document that is located at the Top Right hand side on the cover page.
  2. Record the description of the change (i.e.: updated contact information.)
  3. Identify what Chapter, Section and Page that was updated.
  4. Document the name of the person who made the change.
  5. Record the date the change was made.

This log should be kept with the document at all times.  Never delete revision history.  Just keep expanding the table.

Plan Exercise (Required)

Document any exercises (tests) that have been conducted using this plan.  This will help the auditing of the plans by providing information about the testing activities that have taken place. 

  1. Record the date of the tests.
  2. Identify the type of exercise that was conducted.  (Call Tree, Walkthrough, Table Top, etc.)
  3. Record the results of the exercise.  (It was successful, etc.)

Table of Contents for Disaster Recovery Planning Standard

TERMINOLOGY     
ACCOUNTABILITY
COMPLIANCE        

I.  DISASTER RECOVERY PLANNING STANDARDS

A.  General Information           
B.  Executive Summary
C.  Scope & Objectives          
D.  Recovery Strategy 
E.  Plan Assumptions & Exposures      
F.  Disaster Declaration Procedures     
E.  Recovery Teams    
F.  Contact Lists          
G.  Alternate Locations
H.  Plan Certification    

II. APPLICATION RECOVERY PLAN STANDARDS

A.  General Information           
B.  Plan Introduction    
C.  Application Profile 
D.  Plan Activation Procedures
E.  Team Members & Responsibilities  
F.  Recovery Procedures         
G.  Contact Lists         
H.  Alternate Locations
I.  Restoration of Normal Operations   

III. SERVER RECOVERY PLAN STANDARDS 

A.  General Information           
B.  Plan Introduction    
C.  Server Profile         
D.  Plan Activation Procedures
E.  Team Members & Responsibilities  
F.  Recovery Procedures         
G.  Contact Lists         
H.  Alternate Locations
I.  Restoration of Normal Operations   

IV. NETWORK RECOVERY PLAN STANDARDS  

A.  General Information           
B.  Plan Introduction    
C.  Network Profile     
D.  Plan Activation Procedures
E.  Team Members & Responsibilities  
F.  Recovery Procedures         
G.  Contact Lists         
H.  Alternate Locations
I.  Restoration of Normal Operations   

V. TELECOMMUNICATIONS RECOVERY PLAN STANDARDS 

A.  General Information           
B.  Plan Introduction    
C.  Telecommunication Profile  
D.  Plan Activation Procedures
E.  Team Members & Responsibilities  
F.  Recovery Procedures         
G.  Contact Lists         
H.  Alternate Locations
I.  Restoration of Normal Operations   

VI. DATABASE RECOVERY PLAN STANDARDS  

A.  General Information           
B.  Plan Introduction    
C.  Database Profile    
D.  Plan Activation Procedures
E.  Team Members & Responsibilities  
F.  Recovery Procedures         
G.  Contact Lists         
H.  Alternate Locations
I.  Restoration of Normal Operations   

Testing and Revision Policy

A. Purpose

The Testing & Revision Policy & Standards document establishes the standard procedures that need to be carried out by each business unit (department) within the organization.  

All departments must utilize this methodology to conduct testing activities on completed contingency (recovery) plans, facilities, and work-area relocation.  In addition, all departments will be responsible for the annual review and maintenance of recovery plans.   

B.  Scope

Testing and Revision activities are performed to identify current gaps, inconsistent data, incorrect data, and enhancements for all recovery plans.  All departments with recovery plans must perform testing and revision activities on an annual basis.  The overall RTO of the recovery plan  will define what types of activities that needs to be performed.   

Table of Contents

TERMINOLOGY           

ACCOUNTABILITY      

I.  TESTING POLICY OVERVIEW  

A. Purpose            
B.  Scope              
C.  Ownership Roles & Responsibilities           
D. Testing Process 
E. Test Types        
F. Testing Requirements           
G. Test Reporting Process       
H. Testing & Revision Frequency         
I. Approval            

II. REVISION POLICY OVERVIEW        

A. Revision Process     
B. Revision Requirements        
C. Audit Process   
D. Audit Responsibility
E. Audit Reporting Process      
F. Audit Frequency
P. Approval           

III. TESTING REQUIREMENTS  

A.  Frequency       
B.  Walkthroughs / Orientations           
C.  Tabletop Testing    
D.  Component Testing
E.  Functional Testing   
F.  Business Unit Test Modules (Plans)
G.  Technology Unit Test Modules (Plans)       

IV. TESTING RESULTS (REPORTING)  
            A.  Test Summary Report
           
V. AUDITING REQUIREMENTS 

A.  Frequency       
B.  Retention         

APPENDIX

Appendix A – Testing & Revision Standards            

Data Backup Policy

Purpose:

The Data Backup Policy document establishes the activities that need to be carried out by each Business Unit, Technology Unit, and Corporate Units (departments) within the organization. 

All departments must utilize this methodology to properly backup and store media that contains ePHI (electronic protected health information).   All electronic records existing on the organization’s data processing systems must be backed up and sent to an offsite location according to Offsite Storage Requirements of this policy.  Retention standards must be defined and put into action to support business and regulatory requirements. 

Table of Content

TERMINOLOGY     

ACCOUNTABILITY

I.  POLICY OVERVIEW

A. Purpose      
B.  Scope        
C.  Ownership Roles & Responsibilities           
D. Data Backup Process         
E. Data Backup Types 
F. Data Backup Requirements 
G. Data Backup Frequency     
H. Data Backup Testing           
H. Offsite Storage        

II. DATA BACKUP REQUIREMENTS

A. Electronic Storage Media    
B. Retention of Media  
C. Backup Frequency  
D. Monitoring Requirements    
E. Regulatory Requirements     
F. Change Management Requirements 
G.  New Project Requirements
H. Audit Requirements 

III. OFFSITE STORAGE REQUIREMENTS

A.   Specifications & Location Of Offsite Facility           
B.  Security of Facility & Data 
C.  Authorized Personnel         
D.  Storage of Materials           
E.  Audits        
F.  Provider Expectations         

APPENDIX   

Appendix A – Data Backup Plan Standards     
Appendix B – HIPAA Security Rule for Data Backup Plan      
Appendix C– HIPAA Security Rule for Device & Media Controls       

To view specific section of this document, please contact us at Bob@training-hipaa.net or call us at (515) 865-4591.

To buy individual template packages, visit following links:

 
HIPAA Certification Flyer

HIPAA Compliance Template Suites

HIPAA Training Comparison