Question DRPL-09
Describe or provide a reference to how your disaster recovery plan is tested. (i.e., scope of DR tests, end-to-end testing, etc.)
| Weight | 20 |
| High Risk | No |
| Required | No |
| Compliant Answer | Yes |
Standard Guidance
Ensure that all elements of DRPL-09 are clearly stated in your response.
Answering "NO"
EDUCAUSE provides no guidance here
Answering "YES"
EDUCAUSE provides no guidance here
Reason for Question
Testing a DRP is an important action that improves the efficiency and accuracy of a vendor's recovery plans. Vague responses to this question should be met with concern and appropriate follow-up, based on your institutions risk tolerance.
Follow-Up Inquiries
If the vendor does not have a DRP, point them to https://www.sans.org/reading-room/whitepapers/recovery/disaster-recovery-plan-1164 (opens in a new tab)
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]