| Disaster Recovery and Contingency planning is often overlooked as an immediate need because it is only used in the event of a major service interruption. However, with the increased dependence on information systems and threats to government agencies, contingency planning is critical. We have supported clients’ contingency planning efforts through planning, testing and implementation of disaster recovery plans. Specifics of our solutions include:
• Communication protocols
• Decision trees
• Recovery procedures
• Key personnel contact lists
• Alternate computing sites
• Relocation procedures
• Emergency contacts
• Service Level Agreements
• External service provider lists
• Memorandum of Understandings
Testing is the key to ensuring that the contingency planning efforts are effective. Tests will be performed in accordance with NIST and OMB guidance on a semi-annual basis for limited scope tests and on an annual basis for full scope tests. Additionally, we conduct post-test meetings to discuss and incorporate “Lessons Learned” in order to continually improve an agency’s Continuity Planning capability.
We fully developed the contingency planning template for ATF and assisted in the completion of approximately 57 contingency plans resulting in the certification and accreditation of the respective systems. Additionally, using our comprehensive test plans we performed limited scope tests on ATF’s Network Infrastructure to successfully close audit recommendations for FY 03 FISMA audit.
Success Story In support of the Department of Labor, Employment Standards Administration, Division of Information Technology Management and Support (DITMS), we developed and implemented the agency’s contingency and disaster recovery plans. We continue to provide testing, updates and support to these vital plans for DTIMS and its major applications.
Please review other components of our Operational Solutions Suite:
• Physical IT Security
• Security Awareness and Training
• System Security Administration
• Configuration Management / Change Control
• Incident Response Capability |