Business Continuity Disaster Recovery Controls. 14.3.5.1 Contractor shall establish a documented plan to enable continuation of critical business processes and protection of the security of electronic County PHI and/or County PII/PI in the event of an emergency. Emergency means any circumstance or situation that causes normal computer operations to become unavailable for use in performing the work required under this Agreement for more than twenty-four (24) hours.
14.3.5.2 Contractor shall ensure Data Centers with servers, data storage devices, and critical network infrastructure involved in the use or storage of County PHI or PII/PI, must include sufficient environmental protection such as cooling, power, fire prevention, detection, and suppression.
14.3.5.3 Contractor shall have established documented procedures to backup County PHI and/or County PII/PI to maintain retrievable exact copies of County PHI and/or County PII/PI. The plan shall include a regular schedule for making backups, storing backups offsite, an inventory of backup media, and an estimate of the amount of time needed to restore County PHI and/or County PII/PI should it be lost. At a minimum, the schedule shall be a weekly full backup and monthly offsite storage of County data.
Business Continuity Disaster Recovery Controls. A. Emergency Mode Operation Plan. Contractor must establish a documented plan to enable continuation of critical business processes and protection of the security of electronic DHCS PHI or PI in the event of an emergency. Emergency means any circumstance or situation that causes normal computer operations to become unavailable for use in performing the work required under this Agreement for more than 24 hours.
B. Data Backup Plan. Contractor must have established documented procedures to backup DHCS PHI to maintain retrievable exact copies of DHCS PHI or PI. The plan must include a regular schedule for making backups, storing backups offsite, an inventory of backup media, and an estimate of the amount of time needed to restore DHCS PHI or PI should it be lost. At a minimum, the schedule must be a weekly full backup and monthly offsite storage of DHCS data.
Business Continuity Disaster Recovery Controls
