Data Recovery and Cybersecurity Should Be Part of a Disaster Recovery Plan

An article by NJBiz used Hurricane Debby’s August landfall to remind New Jersey companies that they need a cybersecurity component in their disaster recovery plan (DRP). Loss of customer information, financial records, and other proprietary information can prove devastating, and data recovery is essential to continue operations.

An effective plan focuses on applications, networks, servers, and data storage. Regular safety system audits ensure that they are current and working well.

Periodic automated data backups are central to a DRP. A data archive strategy that employs local and cloud-based backup solutions can expedite recovery efforts.

The DRP must also be tested periodically. Tabletop exercises with cybersecurity experts are a cost-effective way to practice disaster scenarios and test response plans. They also address regulatory compliance in many industries.

DRPs should include ways to communicate with customers. Promptly informing them about a breach, what actions are being taken, and how they can protect their information helps maintain trust and demonstrates a commitment to security.

Critical components of a comprehensive Disaster Recovery Plan include:

• An information technology statement of intent that outlines the plan’s objectives and direction
• Accessible contact information for key personnel responsible for implementing the plan
• A detailed, immediate response plan that describes who to call and why and lists important phone numbers and account numbers
• Documentation of insurance coverage and other relevant policies

IT infrastructure, personnel, or insurance coverage changes should prompt updates to your DRP. Additionally, it is critical to keep track of all IT assets and securely store passwords.