164.308(a)(7)(ii)(B) Disaster Recovery Plan (Required)
Administrative safeguard · Required
The requirement as we hold it
Disaster Recovery Plan (Required). Establish procedures to restore lost data and resume operations. NIST recommends documented recovery procedures, alternate site arrangements, and aligned dependencies.
The examiner asks
- Show me the procedures to restore lost data and resume operations.
- Where is the alternate site or recovery arrangement documented?
Evidence to bring
- the disaster recovery plan
- the alternate-site arrangement
Source: 164.308(a)(7)(ii)(B) at eCFR. Our statement of the clause, not the instrument verbatim.