Disaster Recovery Plan Template
Business Continuity
ISO 27000 Series, Sarbanes - Oxley,
CobiT, PCI-DSS, & HIPAA Compliant
Version History
This Disaster Recovery Plan (DRP) can be used as a Disaster Planning template for any enterprise. The Disaster Recovery template and supporting material have been updated to be Sarbanes-Oxley and HIPAA compliant.
Version 5.6 - Release Date February 2010
- Updated Risk Assessment Business and IT Impact Questionnaire
- Updated for COBIT compliance
- Updated for PCI-DSS compliance
- Updated for US state level compliance (New York, Massachusetts, and California)\
- Update for ISO security requirements
Version 5.5 - Release Date January 2010
- Updated to comply with CobiT requirements
- Added Sample Disaster Recovery Plan Service Agreement
Version 5.4 - Release Date May 2009
- Added Pandemic Coordinator job description
- Added Business Pandemic Planning Checklist
- Updated organization chart to include Pandemic Coordinator
- Corrected minor errata
Version 5.3 – Release date January 2009
- Updated backup and backup retention section
- Updated style sheet to be CSS Style sheet format
- Added Disaster Recovery Business Continuity General
Distribution Information
- What to do after an explosion / terrorist attack
- How to clean up after a disaster
Version 5.2 – Release date August 2008
- Replaced WORD 2003 style sheet with WORD 2007 style sheet
- Updated all forms used in the template
Version 5.1 – Release date July 2008
- Added Backup & Backup Retention Policy (9 pages)
- Minor Formatting Changes
Version 5.0 – Release date February 2008
- Updated Disaster Recovery / Business Continuity Plan Audit Program to be compliant with ISO 27000 Series (ISO 27001 and ISO 27002)
- Added a section on Communication Strategy and Policy to be implemented when the Disaster Recovery / Business Continuity Plan is activated
- Added a section on Disaster Recovery / Business Continuity and Security basics
- Added Personnel Location Report
- Added Project Status Report Form
Version 4.5 – Release date November 2007
- Added Disaster Recovery / Business Continuity Audit Program
- Updated excel work plan to refer to sections versus pages
Version 4.4 – Release date September 2007
- Section added on implications of Sarbanes-Oxley, Treadway Commission, and PCI DSS requirements
- Disaster Planning Branch Offices added
- Back-up strategy table added
- Back-up strategy for PDA’s updated to reflect smartphones
Version 4.3 – Release date July 2007
- Defined generic metrics for DR/BC success
- Business & IT Impact Analysis Questionnaire Updated
- Updated references to the DRP card
- Updated formatting to meet WORD 2007 requirements
- A fully indexed version of the Template in PDF format included with the Word format
- Now comes in both Office 2003 and Office 2007 formats
Version 4.2 – Release date February 2007
- Added Section defining the ISO 17799 compliance requirements
- Review and modified entire DRP/BCP template to ensure compliance with ISO 17799
- Business & IT Impact Questionnaire updated to meet ISO 17799 compliance requirements
- Corrected errata
- Added Best Data Retention and Destruction Practices Section
Version 4.1 – Release date August 2006
- Department DRP / BCP Activation Workbook Updated in the appendix
- Correct work plan formatting and numbering for project initiation
- Web Site Disaster Recovery Planning Form added to the appendix
Version 4.0 - Release date March 2006
- Vendor Disaster Recovery Planning Questionnaire added to the appendix
- Department Disaster Recovery Planning Workbook added to the appendix
- Vendor Phone List form updated
- Key Customer Notification List form added
- Critical Resources to be Retrieved form added
- Business Continuity Off-Site Materials form added
Version 3.1 - Release date January 2006
- Site Strategy section added (Section 3.1) all other section numbers in Chapter 3 were increased to adjust for this modification.
- Audit Disaster Recovery Plan Process added (Section 8.13).
- Manager Disaster Recovery and Business Continuity job description added
- Entire template reviewed to validate compliance with Sarbanes-Oxley
This template is not for resale or re-distribution - Disaster Recovery Planning Template Disaster Recovery Template, Disaster Recovery

