Prepare for a DRP Audit
Assess your current DRP maturity, identify required improvements, and complete an audit-ready DRP summary document.
Onsite Workshop
Ad hoc DRP audit preparation causes:
- Inefficiency, confusion, and extra work as IT scrambles to assemble documentation, often duplicating effort.
- Gaps in your audit preparation, decreasing the likelihood of passing the audit.
- Inability to leverage audit insights or your audit preparation to actually improve your DR capabilities.
A formalized DRP audit preparation process results in:
- A structured approach that minimizes the effort required to identify and meet audit requirements.
- Increased likelihood of passing the audit by efficiently identifying current DR capabilities and providing well-organized DRP documentation.
- Raising the profile of DR among senior management to get buy-in to improve DR capabilities.
Module 1: Determine if this Workshop is the Best Fit for Your Requirements (Pre-Workshop)
The Purpose
- Evaluate your current DRP status and how Info-Tech can best help you close your DR gaps.
- Understand your specific audit requirements.
Key Benefits Achieved
- Determine which Info-Tech DRP service offering best meets your needs.
- Incorporate your audit requirements into the goals for this project.
Activities: | Outputs: | |
---|---|---|
1.1 | Assess your current DRP maturity. |
|
1.2 | Determine the appropriateness of this workshop. If key elements such as a BIA and at least a high-level incident response plan are not in place, the Create a Right-Sized Disaster Recovery Plan GI or workshop is a better starting point. |
|
1.3 | Review your specific audit requirements. |
|
Module 2: Determine DRP Maturity and Gaps
The Purpose
- Determine your baseline DRP maturity.
- Identify and prioritize DRP gaps.
- Prioritize documentation deliverables for this workshop based on DRP gaps.
Key Benefits Achieved
- Objective analysis of your current DRP status.
- Prioritized goals for this workshop.
Activities: | Outputs: | |
---|---|---|
2.1 | Re-assess DRP maturity with the workshop participants to gain a common understanding of current status and gaps. |
|
2.2 | Review and validate your DRP incident response plan (IRP) with a tabletop planning exercise. |
|
2.3 | Prioritize documentation deliverables to complete during this workshop. |
|
Module 3: Finalize DR Procedures for Key Systems (Onsite - Day 2 and 3)
The Purpose
- Assess your current DR IRP.
- Determine and initiate documentation required for your DR procedures.
- Define DR roles and responsibilities.
Key Benefits Achieved
- High-level IRP reviewed, validated, and updated.
- A structured approach to document DR procedures, roles, and responsibilities.
Activities: | Outputs: | |
---|---|---|
3.1 | Update the high-level IRP for key systems. |
|
3.2 | Create supporting documentation for key steps in the IRP. |
|
3.3 | Ensure roles and responsibilities for the steps in the IRP are defined. |
|
Module 4: Create the DRP Summary Document (Onsite - Day 4)
The Purpose
- Summarize DR capabilities and DRP status for the audit.
- Determine remaining action items for the audit.
Key Benefits Achieved
- Audit-ready DRP summary document.
- Prioritized list of tasks to complete for the audit.
Activities: | Outputs: | |
---|---|---|
4.1 | Document your BIA results, including RTO/RPO tiers. |
|
4.2 | Create an audit-ready summary of your DR procedures and overall strategy. |
|
4.3 | Identify and prioritize remaining audit deliverables to complete through our Guided Implementation. |
|