Question DOCU-09

Do you have a well-documented Business Continuity Plan (BCP) that is tested annually?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Briefly summarize your response.

Answering "YES"

Provide a reference to your BCP and supporting documentation or submit it along with this fully populated HECVAT.

Reason for Question

It is expected that a vendor will maintain an accurate BCP and for it to be tested at a regular interval. Any variance to this should be clearly explained. A vendor's response to this question can reveal the value that they place on testing their BCP (and possibly other aspects of their programs).

Follow-Up Inquiries

If the vendor does not have a BCP, point them to https://www.sans.org/reading-room/whitepapers/recovery/business-continuity-planning-concept-operations-1653 (opens in a new tab)

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]