3.6 Lack of Contingency Plans

Disasters can strike at any given moment. Can you confirm that you have adequate plans in place to address how your department (or the areas which you are responsible for) would operate in the event of a fire, flood, tornado, earthquake, loss or unavailability of computer resources, missing personnel, telecommunications outage, etc.? It's important to have contingency plans in place that address how critical operations would continue in the event that one or more important services become unavailable. The plan should provide for short and extended periods when these services are not available. See "Basics of Information Security: Maintaining the Confidentiality, Integrity, and Availability of Information" for more details about contingency plans.