---

Disaster Recovery
Business Continuity Audit Program

ISO 27001 - ISO 27002 - ISO 22301
HIPAA - SOX - PCI-DSS Compliant  

Janco has found that over 30% of all Disaster Recovery Business Continuity Plans are in-complete or in-accurate

This Disaster Recovery / Business Continuity Audit program identifies control objectives that are meet by the audit program.  There are 36 specific items that the audit covers in the 13 page audit program.  Included are references to specific Janco products that directly address the areas the audit covers. This program can be used as standalone audit program or in concert with the following Janco offerings:

• Disaster Recovery / Business Continuity Template
• Security Manual Template
• Security Audit Program Template
• Business and IT Impact Questionnaire
• IT Service Management for Service Oriented Architecture
• Metrics for the Internet and Information  Technology

The Disaster Recovery / Business Continuity Audit program covers the following control objectives are:

• Ensure that adequate and effective contingency plans have been established to support the prompt recovery of crucial enterprise functions and IT facilities in the event of major failure or disaster;
• Ensure that all mandated disaster recovery, business continuity, and security requirements have adequate compliance policies and procedures in place;
• Ensure the survival of the business and to minimize the implications of a major enterprise and/or I T failure;
• Ensure that all the potential risks to the enterprise and its IT facilities are identified and assessed in preparation of the contingency plans;
• Ensure the optimum contingency arrangements are selected and cost effectively provided;
• Ensure that an authorized and documented disaster recovery / business continuity plan is created, maintained up-to-date, and securely stored;
• Ensure that the recovery plan is periodically tested for its relevance and effectiveness;
• Ensure that all internal and external parties to the recovery process are fully aware of their responsibilities and commitments;
• Ensure that appropriate liaison is maintained with external parties (i.e. insurers, emergency services, suppliers, etc.);
• Ensure that both the damaged and recovery sites are secure and that systems are securely operated in support of the enterprise;
• Ensure that systems and procedures are adequately and accurately documented to aid the recovery process; and
• Ensure that public and media relations would be effectively addressed during an emergency in order to minimize adverse publicity and business implications.

Included with this program area Microsoft (.docx format) Word Document and an a PDF version of the Audit Program.

• DRP BCP & Security Audit Bundle
• Security Audit Program
• DRP BCP Audit Program
• Security Template
• DRP BCP Template

Disaster Recovery Business Continuity & Security Audit Bundle

• Disaster Recovery Business Continuity Standard Edition

  • Disaster Recovery Business Continuity Template (WORD)
  • Disaster Recovery Business Continuity Audit Program - Compliant with ISO 27031 and ISO 22301
  • Disaster Recovery Manager Job Description
  • Manager Disaster Recovery & Business Continuity Job Description
  • Application Inventory and Business Impact Analysis Questionnaire
  • Incident Communication Plan and Policy with BEST PRACTICES for
    • News Conferences
    • Media Relations
  • Social Network Checklist
  • Included with the template are Electronic Forms which have been designed to lower the cost of maintenance of the plan. Electonic Forms that can be emailed, completed via a computer or tablet, and stored electronically including:
    • LAN Inventory
    • Location Contact Numbers
    • Off-Site Inventory
    • Personnel Locations
    • Plan Distribution

    • Remote Location Contact Information
    • Team Call List
    • Vendor Contact Information

  • Standard Edition Security Manual Template

    • Security Manual Template in MS Word Format
    • Business and IT Impact Questionnaire MS Word Format
    • Threat and Vulnerability Assessment Form PDF and MS Excel Format
    • HIPAA Audit Program MS Word Format
    • Sarbanes Oxley Section 404 Checklist MS Word Format
    • Security Audit Program - fully editable
      • Comes in MS EXCEL and PDF formats
      • Meets ISO 27001, 27002, Sarbanes-Oxley, PCI-DSS and HIPAA requirements
      • Over 400 unique tasks divided into 11 areas of audit focus which are the divided into 38 separate task groupings
    • Electronic forms that can be Emailed, completed via a computer or tablet, and stored electronically including:
      • Blog Policy Compliance
      • Company Asset Employee Control Log
      • Email - Employee Acknowledgment
      • Employee Termination Checklist
      • Internet Access Request
      • Internet Use Approval
      • Internet & Electronic Communication - Employee Acknowledgment

      • Mobile Device Access and Use Agreement
      • Employee Security Acknowledgement Release
      • Preliminary Security Audit Checklist
      • Security Access Application
      • Security Audit Report
      • Security Violation Reporting
      • Sensitive Information Policy Compliance Agreement

  • Security Audit Program

    • Comes in MS EXCEL and PDF formats
    • Meets ISO 27001, 27002, Sarbanes-Oxley, PCI-DSS and HIPAA requirements
    • Over 400 unique tasks divided into 11 areas of audit focus which are the divided into 38 separate task groupings
  
  

  • Disaster Recovery Business Continuity Audit Program

    • Comes in MS WORD format and PDF
    • Meets ISO 27001, 27002, 27031 Sarbanes-Oxley, PCI-DSS and HIPAA requirements
    • 36 specific items that the audit covers in the 13 page audit program

Security Audit Program

• Comes in MS EXCEL and PDF formats
• Meets ISO 27001, 27002, Sarbanes-Oxley, PCI-DSS and HIPAA requirements
• Over 400 unique tasks divided into 11 areas of audit focus which are the divided into 38 separate task groupings

Disaster Recovery Business Continuity Audit Program

• Comes in MS WORD format and PDF
• Meets ISO 27001, 27002, 27031 Sarbanes-Oxley, PCI-DSS and HIPAA requirements
• 36 specific items that the audit covers in the 13 page audit program

Disaster Recovery Business Continuity Standard Edition

• Disaster Recovery Business Continuity Template (WORD)
• Disaster Recovery Business Continuity Audit Program - Compliant with ISO 27031 and ISO 22301
• Disaster Recovery Manager Job Description
• Manager Disaster Recovery & Business Continuity Job Description
• Application Inventory and Business Impact Analysis Questionnaire
• Incident Communication Plan and Policy with BEST PRACTICES for
  • News Conferences
  • Media Relations
• Social Network Checklist
• Included with the template are Electronic Forms which have been designed to lower the cost of maintenance of the plan. Electonic Forms that can be emailed, completed via a computer or tablet, and stored electronically including:
  • LAN Inventory
  • Location Contact Numbers
  • Off-Site Inventory
  • Personnel Locations
  • Plan Distribution

  • Remote Location Contact Information
  • Team Call List
  • Vendor Contact Information

Standard Edition Security Manual Template

• Security Manual Template in MS Word Format
• Business and IT Impact Questionnaire MS Word Format
• Threat and Vulnerability Assessment Form PDF and MS Excel Format
• HIPAA Audit Program MS Word Format
• Sarbanes Oxley Section 404 Checklist MS Word Format
• Security Audit Program - fully editable
  • Comes in MS EXCEL and PDF formats
  • Meets ISO 27001, 27002, Sarbanes-Oxley, PCI-DSS and HIPAA requirements
  • Over 400 unique tasks divided into 11 areas of audit focus which are the divided into 38 separate task groupings
• Electronic forms that can be Emailed, completed via a computer or tablet, and stored electronically including:
  • Blog Policy Compliance
  • Company Asset Employee Control Log
  • Email - Employee Acknowledgment
  • Employee Termination Checklist
  • Internet Access Request
  • Internet Use Approval
  • Internet & Electronic Communication - Employee Acknowledgment

  • Mobile Device Access and Use Agreement
  • Employee Security Acknowledgement Release
  • Preliminary Security Audit Checklist
  • Security Access Application
  • Security Audit Report
  • Security Violation Reporting
  • Sensitive Information Policy Compliance Agreement