What to Provide
The most recent Business Continuity (BC) and Disaster Recovery (DR) plan.
The evidence should demonstrate:
Defined policies and procedures to follow when a disaster or incident occurs
Defined essential business functions and processes
When the plan was last reviewed
Who reviewed and approved the plan
Evidence of your most recent Disaster Recovery (DR) test.
The evidence should demonstrate:
When the test was conducted
Who was involved in the test
The procedures you followed to conduct the test
The results of the test
Any lessons that were learned from testing
The products involved in the test
Evidence Format
Exported word processing documents in a common file type such as .docx or .pdf, screenshots, or exported images in a common image file type such as .jpg, .png, or .pdf.
Associated Unified Control ID | Associated Framework Control |
CTRL-276 | LCL-58 |