Policy 7230A - Department of Administration
Policy 7230A - Department of Administration
Policy 7230A - Department of Administration
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
9.2.1.a Required Contingency Infrastructure<br />
• The use <strong>of</strong> data backup and restoration is an appropriate<br />
contingency measure for circumstances where data may<br />
become corrupted but primary systems continue to be<br />
available.<br />
• The use <strong>of</strong> redundant systems in the primary location is an<br />
appropriate contingency measure for circumstances where<br />
primary systems may become unavailable but primary<br />
facilities continue to be available.<br />
• The use <strong>of</strong> redundant facilities in an alternate location is an<br />
appropriate contingency measure for circumstances where<br />
primary facilities may become unavailable. Primary and<br />
redundant facilities must be geographically disparate enough<br />
so as not to be affected by the same event.<br />
• The use <strong>of</strong> redundant power delivery systems is an<br />
appropriate contingency measure where power fluctuations<br />
may render primary or secondary processing facilities<br />
powerless. Uninterruptible power supplies must provide for at<br />
least 5 minutes <strong>of</strong> continuous operations and generators must<br />
be provided with sufficient fuel for at least 48 hours <strong>of</strong><br />
continuous operations.<br />
• The use <strong>of</strong> redundant telecommunications links is an<br />
appropriate contingency measure for circumstances where<br />
primary links may be lost but where systems require<br />
continuous inbound and outbound network connectivity.<br />
9.3. Contingency Operations<br />
The following are the Mandatory Procedures that support the Contingency Operations<br />
section <strong>of</strong> the Default Security Requirements:<br />
9.3.1. Build a Team and Provide Training<br />
Contingency planning is a security control that requires specialized capabilities.<br />
Building a team ensures they are always appropriately provided for:<br />
9.3.1.a Required Contingency Capabilities<br />
• Communications and coordination skills are required to<br />
manage the various team members and activities and to share<br />
information with employees <strong>of</strong> the organization outside <strong>of</strong> the<br />
contingency team.<br />
• Network management skills are required to ensure efficient<br />
and effective migration <strong>of</strong> communications functions during a<br />
disruption.<br />
Mandatory Baselines<br />
Page 18 <strong>of</strong> 25