Question DRPL-10

Has the Disaster Recovery Plan been tested in the past year?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

State the date of your next planned DRP test.

Answering "YES"

Please provide a summary of the results in Additional Information (including actual recovery time).

Reason for Question

Testing a DRP is an important action that improves the efficiency and accuracy of a vendor's recovery plans. Vague responses to this question should be met with concern and appropriate follow-up, based on your institutions risk tolerance.

Follow-Up Inquiries

If the vendor does not have a DRP, point them to https://www.sans.org/reading-room/whitepapers/recovery/disaster-recovery-plan-1164 (opens in a new tab)

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]