Disaster Recovery (DR) works continuously to reduce DR-related risk at the university.
The DR Framework consists of five tenets:
- Governance and Engagement: Re-define policies and procedures that govern DR activities across the institution and assist units in improving compliance with applicable regulations, standards, and policies.
- Assessment and Planning: Assess disaster recovery risk at the university and support DR planning and testing activities with stakeholders to continue to align efforts and mitigate risk.
- Communication and Training: Deliver a communication structure that addresses university risks. Create educational resources and build recovery best practices knowledge within the university community.
- Response and Resiliency: Define, develop, and implement a university-wide approach that incorporates recovery and resiliency-by-design.
- Evaluation and Reporting: Provide reporting to program stakeholders and leadership.
Program Activities
DR has outlined the following activities to uphold their framework. This plan is evolving as we continue to gain input from our partners and the university community. As such, it will be updated regularly.
| Element | Item | Description | Target Date |
|---|---|---|---|
| Governance and Engagement | Program and Governance | Develop a program and governance model to improve how the university responds to and recovers from a disaster. | Complete |
| Governance and Engagement | DR Coordinators | Ensure all areas have a disaster recovery coordinator. | Complete |
| Governance and Engagement | ISCR Controls | Review and revise DR Information Security Control Requirement wording. | Complete |
| Assessment and Planning and Response and Resiliency | System Criticality Registry | Develop a University System Criticality Registry. | Complete |
| Assessment and Planning and Response and Resiliency | Recovery Time Objective and Recovery Point Objective Parameters | Define parameters and standards around Recovery Time Objective and Recovery Point Objective; these are two key elements in a DR plan. | Complete |
| Communication and Training and Response and Resiliency | Website | Build a DR website to lead and educate the university. | Complete |
| Assessment and Planning and Evaluation and Reporting | Annual Testing | Annually evaluate Disaster Recovery plans and procedures through an annual exercise to meet IT1.2.3 DR Plan Testing. | Spring/Summer 2024 |
| Assessment and Planning, Response and Resiliency, and Evaluation and Reporting | Integration | Expand critical system registry data captured in the Configuration Management Database (CMDB) through MyRME. | 2024 |
| Assessment and Planning, Response and Resiliency, and Evaluation and Reporting | DR Assessments | Using the DR CARE process, assess critical systems (applications and services) to confirm they are disaster ready â beginning with systems that are foundational to the university. | Priority 1 Foundational Systems (Digital Security and Trust and Office of Technology and Digital Innovation) in 2024 |