What happens if an agency does not submit a Disaster Recovery Plan (DRP) or the DRP does not meet the minimum requirements?
The California Office of Information Security (OIS) has enhanced its DRP compliance review process. The agency will be notified when it does not file a DRP or their DRP does not meet the minimum requirements as identified in the Disaster Recovery Plan Documentation Instructions (SIMM 65A). Notification is made through an escalation process from the Disaster Recovery Coordinator, Information Security Officer, the Chief Information Officer, agency Director, and in some cases, up to the Agency Information Officer.
Related Questions
- When is it possible for an agency to not submit a copy of their Disaster Recovery Plan (DRP) to the California Office of Information Security?
- What happens if an agency does not submit a Disaster Recovery Plan (DRP) or the DRP does not meet the minimum requirements?
- What might the expected costs be to modify an existing Disaster Recovery Plan (DRP) to meet the new minimum requirements?
