Communicates Internet connectivity requirements with providers Communicates with telephone vendors as needed Establishes communications between the alternate site and the users Coordinates transportation of salvageable telecomm equipment to the alternative site Plans for procuring new hardware and telecommunication equipment Advises the PLC if new equipment needs to be purchased Retrieves communications configuration from the off-site storage facility Plans, coordinates and installs communication equipment as needed at the alternate site Maintains plan for installing and configuring VOIP Maintains current telecommunications configuration information at off-site storage facility Procurement and Logistics Coordinator (PLC) The PLC performs the following duties: Procures new equipment and supplies as necessary Prepares, coordinates, and obtains approval for all procurement requests Authorizes purchases up to for recovery operations Ensures that equipment and supplies are delivered to locations Coordinates deliveries Updates the CPC with status Works with the CPC to provide transportation for staff as needed Ensures details of administering emergency funds expenditures are known. Processes requests for payment of all invoices related to the incident Arranging for travel and lodging of staff to the alternate site as needed Procures telephone equipment and leased lines as needed Procures alternate communications for teams as needed Security Coordinator (SC) The Security Coordinator performs the following duties: Provides training for employees in facility emergency procedures and measures Provides physical security, access control, and safety measures to support recovery effort Cordons off the facility including offices to restrict unauthorized access Coordinates with the building management and the CPC for authorized personnel access Coordinates and manages additional physical security/guards as needed Acts as a liaison with emergency personnel, such as fire and police departments Provides assistance to officials in investigating the damaged facility/site Ensures that data room/center at alternate site has locks (access controls) on the doors Coordinates and secures the transportation of files, reports, and equipment in coordination with the CPC Plan Distribution and Availability During a disaster situation, the availability of the contingency plan is essential to the success of the restoration efforts. The Contingency Plan Team has immediate access to the plan upon
The following procedures are provided for recovery of at the original or established alternate location. Recovery procedures are outlined per team and must be executed in the sequence presented to maintain an efficient recovery effort. Instruction: Provide general procedures for the recovery of the system from backup media. Specific keystroke-level procedures may be provided in an appendix. If specific procedures are provided in an appendix, a reference to that appendix must be included in this section. Teams or persons responsible for each procedure must be identified. Delete this instruction from your final version of this document. Notifications during recovery include problem escalation to leadership and status awareness to system owners and users. This section describes the procedures for handling escalation notices that define and describe the events, thresholds, or other types of triggers that may require additional action. Instruction: Provide appropriate procedures for escalation notices during the recovery efforts. Teams or persons responsible for each escalation/awareness procedure must be identified. Delete this instruction from your final version of this document. Reconstitution is the process by which recovery activities are completed and normal system operations are resumed. If the original facility is unrecoverable, the activities in this phase can also be applied to preparing a new permanent location to support system processing requirements. A determination must be made whether the system has undergone significant change and will require reassessment and reauthorization. The phase consists of two major activities: (1) validating successful reconstitution and (2) deactivation of the plan. Concurrent processing is the process of running a system at two separate locations concurrently until there is a level of assurance that the recovered system is operating correctly and securely. Validation data testing is the process of testing and validating data to ensure that data files or databases have been recovered completely at the permanent location. Instruction: Describe procedures for testing and validation of data to ensure that data is correct and up to date as of the last available backup. Teams or persons responsible for each procedure must be identified. An example of a validation data test for a moderate-impact system would be to compare a database audit log to the recovered database to make sure all transactions were properly updated. Detailed data test procedures may be provided in F Appendix – System Validation Test Plan. Delete this instruction from your final version of this document.
– Instruction: Provide a system Interconnection Table which must be consistent with the Interconnections Table found in the System Security Plan (SSP). The Interconnections Table from the System Security Plan can be copied and pasted into this Appendix. Delete this instruction from your final version of this document. Table J8 System Interconnections below is consistent with SSP Table 11-1 System Interconnections and SSP Table 12 3 CA-3 Authorized Connections. Table J System Interconnections SP IP Address and Interface External Organization Name and IP Address of System External Point of Contact and Phone Number Connection Security (IPSec VPN, SSL, Certificates, Secure File Transfer etc.) Data Direction (incoming, outgoing, or both) Information Being Transmitted Ports or Circuit #