Page 1337 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

coordinated testing plan. Minor changes may often be made through a
series of telephone conversations or emails, whereas major changes

may require one or more meetings of the full disaster recovery team.

A disaster recovery planner should refer to the organization’s business
continuity plan as a template for its recovery efforts. This and all the
supportive material must comply with federal regulations and reflect
current business needs. Business processes such as payroll and order
generation should contain specified metrics mapped to related IT

systems and infrastructure.
Most organizations apply formal change management processes so

that whenever the IT infrastructure changes, all relevant
documentation is updated and checked to reflect such changes.
Regularly scheduled fire drills and dry runs to ensure that all elements
of the DRP are used properly to keep staff trained present a perfect
opportunity to integrate changes into regular maintenance and change

management procedures. Design, implement, and document changes
each time you go through these processes and exercises. Know where
everything is, and keep each element of the DRP working properly. In
case of emergency, use your recovery plan. Finally, make sure the staff
stays trained to keep their skills sharp—for existing support personnel
—and use simulated exercises to bring new people up to speed quickly.