Policy 7230A - Department of Administration

Different types of disruptions require different types of responses and
so the organization must consider building multiple response
strategies into the overall contingency plan.
9.1.1.5 Document the Plan
Use the information derived in the foregoing steps to create a
formally documented plan that can be distributed/made available to
appropriate personnel in the event that a business disruption occurs:
• Provide plan supporting information to provide background
and context to make the plan easier to understand and
implement.
• Detail notification/activation phase in order to establish
processes to be followed once a disruption appears imminent
or has occurred.
• Detail recovery phase in order to clearly indicate the measures
that are to be taken to restore systems functionality and
operations.
• Detail reconstitution phase in order to establish a structured
return to normal operations within the primary systems
and/or facilities.
9.1.2. Test the Plan
To ensure the applicability of the plan and to verify that the plan can be acted
upon as created, periodic testing is required:
9.1.2.1 Define Testing Methodologies and Tests
Plan testing is a critical component of contingency planning as it
determines the viability of the plan and identifies any gaps that may
exist in the plan:
• Determine the capabilities to be included in the testing
program.
• Determine the manner in which testing shall be conducted.
9.1.2.2 Execute Tests
Completion of tests requires appropriate notification throughout the
organization to ensure the test achieves its desired results:
• Provide notice to test participants so that they can plan
workload to ensure availability for the test.
• Provide notice to business and IT operations staff in the event
that the plan inadvertently impacts normal operations.
22