Go RIM for Policy Section 5355
- Disaster Recovery Management
The following provides a central location for information security standards, authority, guidance, forms, tools, definitions, and reference to other policies related to incident management.
- Information Security Policy
(State Administrative Manual) - Authority
- Standards
- Guidance
- Forms
Authority
- Government Code Section 11549
- Statewide Security Policy, Section 5355
- Changes to Operational Recovery Planning, Budget Letter 07-03
Standards
- ISO/IEC 27002:2005 (formerly ISO 17799) , Section 14 Business Continuity Management
- Federal Information Processing Standards
- North America Electric Reliability Corporation (NERC) Standards, CIP 009, Recovery Plans for Critical Cyber Assets
- HIPAA Security Standards, Section 164.308 (a) (7)
Guidance
- Insider Threat - Information Sheet No. 5, The Hostile Takeover (.pdf, 83k)
- Disaster Recovery Plan Documentation for Agencies Instructions, SIMM 65A
- Continuity Planning (formerly COOP/COG)
- Business Continuity Guideline: A Practical Approach for Emergency Preparedness, Crisis Management, and Disaster Recovery by ASIS International
- Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities, NIST SP 800-84
- Maintaining Effective Information Technology (IT) Security Through Test, Training, And Exercise Programs - NIST ITL Bulletin - December 2006
- Improving First Responder Communications: A Sampling of NIST Projects
- Improving the Safety of Occupants and First Responders
- Technologies for Public Safety and Security: Activities at the National Institute of Standards and Technology
- ORP Comparison Chart (.doc, 77k)
Last Updated: Monday, April 08, 2013





Cyber Threat Level

