Information Security Standard

 

IT Contingency Planning - Continuity of Operations Planning (COOP)

Version: 1.0
Status: Approved: 02/21/07
Contact: Director, Technology Services

 

PURPOSE

To provide continuity of operations planning in support of the preparation of a comprehensive security plan.

SCOPE

Continuity of Operations Planning (COOP) includes developing plans necessary to provide continuity of essential VCCS college IT systems and data in accordance with COV ITRM 501-01.

APPLICABILITY

The Continuity of Operations Standard is applicable to the System Office and all Colleges.

STANDARD

This Standard addresses the development, implementation, exercise, and maintenance of the Continuity of Operations Plans as it relates to IT systems and data.

The following requirements must be addressed in the plan.

Requirement: Designate an employee to work with the COOP coordinator on IT related aspects of COOP and Disaster Recovery Planning.

Requirement: Based on the Business Impact Analysis and Risk Assessment results develop COOP documents relating to IT systems and data. This includes identification of the following:

  • The essential business functions that require restoration and the Recovery Time Objective (RTO) for each.
  • Recovery requirements for the IT systems and data that have been associated with the essential business processes.
  • The incident notification procedures.
  • The contact information for each team member involved in the incident handling and notification phases.
    •

    Requirement: Participate in the required annual COOP exercise or perform an annual exercise of the IT COOP related components to evaluate the effectiveness and adequacy. Perform additional exercises as needed; such as when systems are upgraded or new systems are implemented.

    Requirement: Review and evaluate the exercise and make changes accordingly following the exercise.

    RELATED LINKS

    IT Contingency Planning, Disaster Recovery Planning

    Contingency Planning and Business Recovery Program, Business Impact Analysis

    Contingency Planning and Business Recovery Program, Risk Assessment