Program Direction

Disaster Recovery (DR) works continuously to reduce DR-related risk at the university.   

The DR Framework consists of five tenets: 

  • Governance and Engagement: Re-define policies and procedures that govern DR activities across the institution and assist units in improving compliance with applicable regulations, standards, and policies. 

  • Assessment and Planning: Assess disaster recovery risk at the university and support DR planning and testing activities with stakeholders to continue to align efforts and mitigate risk. 

  • Communication and Training: Deliver a communication structure that addresses university risks. Create educational resources and build recovery best practices knowledge within the university community. 

  • Response and Resiliency: Define, develop, and implement a university-wide approach that incorporates recovery and resiliency-by-design. 

  • Evaluation and Reporting: Provide reporting to program stakeholders and leadership. 

Program Activities

DR has outlined the following activities to uphold their framework. This plan is evolving as we continue to gain input from our partners and the university community. As such, it will be updated regularly.




Target Date 

Governance and Engagement  

Program and Governance 

Develop a program and governance model to improve how the university responds to and recovers from a disaster.  


Governance and Engagement  

DR Coordinators 

Ensure all areas have a disaster recovery coordinator.  


Governance and Engagement  

ISCR Controls 

Review and revise DR Information Security Control Requirement wording.  


Assessment and Planning and Response and Resiliency  

System Criticality Registry 

Develop a University System Criticality Registry.  


Assessment and Planning and Response and Resiliency 

Recovery Time Objective and Recovery Point Objective Parameters  

Define parameters and standards around Recovery Time Objective and Recovery Point Objective; these are two key elements in a DR plan.  


Communication and Training and Response and Resiliency  


Build a DR website to lead and educate the university.  


Assessment and Planning and Evaluation and Reporting 

Annual Testing 

Annually evaluate Disaster Recovery plans and procedures through an annual exercise to meet IT1.2.3 DR Plan Testing.  

Spring/Summer 2024 

Assessment and Planning, Response and Resiliency, and Evaluation and Reporting 


Expand critical system registry data captured in the Configuration Management Database (CMDB) through MyRME.  


Assessment and Planning, Response and Resiliency, and Evaluation and Reporting 

DR Assessments 

Using the DR CARE process, assess critical systems (applications and services) to confirm they are disaster ready – beginning with systems that are foundational to the university.  

Priority 1 Foundational Systems (Digital Security and Trust and Office of Technology and Digital Innovation) in 2024