Policy 7230A - Department of Administration

9.1.2.3 Review Test Results and Take Corrective Action
Once the test has been completed, the results should be reviewed to
see if the contingency plan accurately reflects the needs of the
organization or if an adjustment is required.
9.2. Contingency Infrastructure
No applicable Mandatory Procedures.
9.3. Contingency Operations
The following are the Mandatory Procedures that support the Contingency Operations
section of the Default Security Requirements:
9.3.1. Build a Team and Provide Training
Contingency planning is a security control that requires specialized capabilities.
Building a team ensures they are always appropriately provided for:
9.3.1.1 Identify Roles with Contingency Responsibilities
To be able to efficiently and effectively respond to disruptions as they
occur, a variety of skills are required. Defining roles that offer those
skills ensures that appropriate personnel can be identified.
9.3.1.2 Associate Personnel with Contingency Roles
Once roles have been determined, individual employees must be
associated with those roles according to the skill sets required of the
role and available within the employee pool.
9.3.1.3 Identify Contingency Responsibilities of those Roles
Once individual employees have been associated with particular
roles, it is important to define and assign specific responsibilities so
that in the event of a disruption all members of the team know who
will be handling what.
9.3.1.4 Build and Deliver a Contingency Training Program
To ensure that all members of the contingency team are able to
execute their responsibilities in the most efficient manner possible a
training program must be devised and delivered:
• Determine needs and design a program accordingly.
• Create the materials to support the delivery of the program.
• Provide instructive training as per the program.
• Provide training support materials as per the program.
9.3.2. Backup Scheduling and Frequency
Systems and data backups are an important component of any contingency
plan or contingency operations and so backups must be taken according to
appropriate schedule:
23