Page 1323 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

Personnel and Communications

A disaster recovery plan should also contain a list of personnel to
contact in the event of a disaster. Usually, this includes key members
of the DRP team as well as personnel who execute critical disaster
recovery tasks throughout the organization. This response checklist
should include alternate means of contact (that is, pager numbers,

mobile phone numbers, and so on) as well as backup contacts for each
role should the primary contact be incommunicado or unable to reach
the recovery site for one reason or another.

The Power of Checklists

Checklists are invaluable tools in the face of disaster. They provide

a sense of order amid the chaotic events surrounding a disaster. Do
what you must to ensure that response checklists provide first
responders with a clear plan to protect life and property and
ensure the continuity of operations.

A checklist for response to a building fire might include the
following steps:

1. Activate the building alarm system.

2. Ensure that an orderly evacuation is in progress.

3. After leaving the building, use a mobile telephone to call 911 to

ensure that emergency authorities received the alarm
notification. Provide additional information on any required
emergency response.

4. Ensure that any injured personnel receive appropriate medical
treatment.

5. Activate the organization’s disaster recovery plan to ensure
continuity of operations.

Be sure to consult with the individuals in your organization

responsible for privacy before assembling and disseminating a
telephone notification checklist. You may need to comply with
special policies regarding the use of home telephone numbers and