Overview
A disaster plan exists that provides for the resumption of mission or business essential functions within 24 hours of activation. (Disaster recovery procedures include business recovery plans, system contingency plans, facility disaster recovery plans, and plan acceptance.)
Threat
Mission and business essential functions are at risk to interruption from a disaster without a disaster recovery plan properly documented and executed within 24 hours of activation.
Guidance
1. A disaster plan shall exist that provides for all resumption of mission or business essential functions within 24 hours of activation.
2. Disaster recovery procedures shall include business recovery plans, system contingency plans, facility disaster recovery plans, and plan acceptance.
DoD classifies this control in the subject area of “Continuity” with a impact of “Medium”.