Skip to main content

CP - Contingency Planning

(CP-1) Contingency Planning Policy and Procedures​

University units shall maintain a written Continuity of Operations Plan that addresses information resources so that the effects of a disaster will be minimized, and the unit will be able either to maintain or quickly resume critical functions.

(CP-2) Contingency Plan​

Maintaining a contingency plan as part of Continuity of Operations Program (COOP) is of key importance to minimize the effects of a manmade or natural disruptive event or disaster. A contingency plan kept up to date and tested on a regular basis allows a unit to resume critical functions in a timely and predictable manner.

(CP-3) Contingency Training​

The University trains personnel in their contingency roles and responsibilities for high and moderate impact information resource and provides periodic refresher training.

(CP-4) Contingency Plan Testing​

Periodic testing of the recovery and reconstitution procedures shall be performed to determine the effectiveness of the procedures and organizational readiness to execute the contingency plan.

(CP-6) Alternate Storage Site​

The location of the alternative storage site for information resources should not be subject to the same potential impact from a disaster at the University site.

(CP-9) Information System Backup​

This Control provides a set of procedures for implementing, monitoring, protecting, and testing of backup and recovery procedures for high impact information resources (user level, system level, and system documentation including security-related documentation). Operational backups shall not be used as a mechanism for meeting records retention requirements.

(CP-10) Information System Recovery and Reconstitution​

The unit provides for the recovery and reconstitution of an information resource with documented recovery procedures to a known secure state after a disruption, compromise, or failure.

(CP-11) Alernate Communications Protocols​

Alternative communication protocols offer resilience to counter potential impact from a disaster impacting University information resources.