Question DRPL-11

Are all components of the DRP reviewed at least annually and updated as needed to reflect change?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

State plans to implement annual (at a minimum) testing of your DRP.

Answering "YES"

Summarize your DRP review and update processes and/or procedures.

Reason for Question

Testing a DRP is an important action that improves the efficiency and accuracy of a vendor's recovery plans. Vague responses to this question should be met with concern and appropriate follow-up, based on your institutions risk tolerance.

Follow-Up Inquiries

If the vendor does not have a DRP, point them to https://www.sans.org/reading-room/whitepapers/recovery/disaster-recovery-plan-1164 (opens in a new tab)

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]