Question DOCU-10

Do you have a well-documented Disaster Recovery Plan (DRP) that is tested annually?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Briefly summarize your response.

Answering "YES"

Provide a reference to your DRP and supporting documentation or submit it along with this fully populated HECVAT.

Reason for Question

It is expected that a vendor will maintain an accurate DRP and for it to be tested at a regular interval. Testing a DRP is an important action that improves the efficiency and accuracy of a vendor's recovery plans. Vague responses to this question should be met with concern and appropriate follow-up, based on your institutions risk tolerance.

Follow-Up Inquiries

If the vendor does not have a DRP, point them to https://www.sans.org/reading-room/whitepapers/recovery/disaster-recovery-plan-1164 (opens in a new tab)

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]