SecurityArena

Documentation

Procedures need to be well documented because when they are actually needed, it will most likely be a chaotic and frantic atmosphere with a demanding time schedule. The documentation to include:

BCP Plan Documentation

There should be two or three copies of these plans. One copy may be at the primary location, but the other copies should be at other locations in case the primary facility is destroyed. Typically, a copy is stored at the BCP coordinator’s home and a copy is stored at the offsite facility. These plans should not be stored in a file cabinet, but rather in a fire-resistant safe.

Documentation is an essential piece of business, and therefore an essential piece in disaster recovery and business continuity.

Software escrow

It means that a third party holds the source code, backups of the compiled code, manuals, and other supporting materials. A contract between the software vendor, customer, and third party outlines who can do what and when with the source code. This contract usually states that the customer can have access to the source code only if and when the vendor goes out of business, is unable to carry out stated responsibilities, or is in breach of the original contract. If any of these activities takes place, then the customer is protected because it can still gain access to the source code and other materials through the third-party escrow agent.