Cyber Threat Level
Right Column
Go RIM for Policy Section 5355 - Disaster Recovery Management
The following provides a central location for information security standards, authority, guidance, forms, tools, definitions, and reference to other policies related to disaster recovery management.
- Information Security Policy (State Administrative Manual)
- Authority
- Standards
- Guidance
- Forms
- Tools
- Definitions
- Related Policies
- Go RIM Home
Authority
- Government Code Section 11549
- Statewide Security Policy, Section 5355
- Changes to Operational Recovery Planning, Budget Letter 07-03
Standards
- ISO/IEC 27002:2005 (formerly ISO 17799) , Section 14 Business Continuity Management
- Federal Information Processing Standards
- North America Electric Reliability Corporation (NERC) Standards, CIP 009, Recovery Plans for Critical Cyber Assets
- HIPAA Security Standards, Section 164.308 (a) (7)
Guidance
- Insider Threat - Information Sheet No. 5, The Hostile Takeover (.pdf, 83k)
- Disaster Recovery Plan Documentation for Agencies Instructions, SIMM 65A
- Continuity of Operations/Continuity of Government (COOP/COG) Planning Program
- Business Continuity Guideline: A Practical Approach for Emergency Preparedness, Crisis Management, and Disaster Recovery by ASIS International
- Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities, NIST SP 800-84
- Maintaining Effective Information Technology (IT) Security Through Test, Training, And Exercise Programs - NIST ITL Bulletin - December 2006
- Improving First Responder Communications: A Sampling of NIST Projects
- Improving the Safety of Occupants and First Responders
- Technologies for Public Safety and Security: Activities at the National Institute of Standards and Technology
- ORP Comparison Chart (.doc, 77k)
Forms
- Agency Disaster Plan Certification, SIMM 70B Form
- Agency Disaster Plan Transmittal Letter, SIMM 70D Form
Last Updated: Monday, November 10, 2008

