Security Policies Subject: Information System Resource and Data Recovery

information system resources and data are identified and covered by recovery plans and procedures to ensure business continuity and the ability to restore any loss of sensitive information system resources and data. Purpose: This policy reflects the University’s commitment to identify and implement security controls that will keep risks to information system resources at reasonable and appropriate levels. Policy: Information System Resource and Data Owners must establish, test and revise, and implement, as needed, resource and data recovery plans and procedures to ensure business continuity and the ability to restore any loss of sensitive information system resources or data. At a minimum, these recovery plans must include: • The conditions for activating the plan or procedure. • Business, infrastructure, and resource requirements. • Identification and definition of employee roles and responsibilitie