Question BCPL-04

Are all components of the BCP reviewed at least annually and updated as needed to reflect change?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Describe any plans to annually review and update (as needed) your BCP.

Answering "YES"

Describe your BCP component review strategy.

Reason for Question

It is expected that a vendor will maintain an accurate BCP to be tested at a regular interval. Any variance to this should be clearly explained. A vendor's response to this question can reveal the value that they place on testing their BCP (and possibly other aspects of their programs).

Follow-Up Inquiries

If the vendor does not have a BCP, point them to https://www.sans.org/reading-room/whitepapers/recovery/business-continuity-planning-concept-operations-1653 (opens in a new tab)

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]