164.308(a)(7)(ii)(B) - Disaster Recovery Plan (Required)

Illustrative Controls and TIBCO LogLogic Solution

Organizations must develop a framework for IT continuity to support enterprise-wide business continuity management with a consistent process. The objective of the framework is to assist in determining the required resilience of the infrastructure and to drive the development of disaster recovery and IT contingency plans. The framework should address the organizational structure for continuity management, covering the roles, tasks and responsibilities of internal and external service providers, their management and their customers, and the rules and structures to document, test and execute the disaster recovery and IT contingency plans. The plan should also address items such as the identification of critical resources, the monitoring and reporting of the availability of critical resources, alternative processing, and the principles of backup and recovery.

Organizations must have procedures in place to back up data and programs based on IT and user requirements. Organizations must define and implement procedures for backup and restoration of systems, data and documentation in line with business requirements and the continuity plan. Verify compliance with the backup procedures, and verify the ability to and time required for successful and complete restoration. Test backup media and the restoration process.

To satisfy this Implementation specification, administrators must back up data on a regular basis. In addition, administrators must review backup logs periodically to ensure backups are performed successfully. Backup logs must be reviewed periodically to ensure backup and restore are performed successfully on a regular basis.

TIBCO LogLogic directly supports this Implementation specification since TIBCO LogLogic reports and alerts are capable of extracting system records that validate when and if a backup was performed and if the backup is an exact copy of the original. TIBCO LogLogic can monitor systems to ensure that data backups are successfully accomplished on time and so that data restores are possible. They can also monitor and alert you when a data restore is completed successfully or unsuccessfully, so that the integrity of backup data is retained if you need to exercise a disaster recovery plan.

Reports and Alerts

Use the following link or reference to see the 164.308(a)(7)(ii)(B) reports and alerts: 164.308(a)(7)(ii)(B) - Disaster Recovery Plan (Required).