GRCLibrary.ai

Plan

IT Disaster Recovery Plan

This plan defines the system-specific recovery procedures, RTO and RPO targets, and runbook references for IT Disaster Recovery (DR). It is a companion document to the BC/DR Standard and the Business Continuity and Crisis Management Plan, which govern the broader BC/DR framework. This plan focuses on IT system recovery execution rather than business continuity governance. The plan reflects industry experience with phased recovery from major security incidents; adopting organizations calibrate RTO/RPO targets, tier assignments, and phasing to their own incident history, risk appetite, and operational context. The specific infrastructure, environments, and topology named throughout this plan (for example on-premises and cloud tiers, a hypervisor estate, directory and identity services, and a cloud-based recovery platform) are an illustrative reference deployment, not a description of any particular organization's environment; an adopter substitutes its own.

Type
Plan
Version
1.6.1
Date
2026-10-27
Owner
Chief Information Officer
Approving authority
Chief Information Officer
Classification
Public
Confidentiality
Public
Category
Resilience
Review frequency
Annual or following any major infrastructure change or DR exercise
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Scope
  • Governance and accountability
  • RTO and RPO targets
  • Recovery infrastructure
  • Phased recovery sequence
  • Pre-conditions for service restoration
  • Backup and restore requirements
  • Runbook references
  • DR testing
  • Lessons learned: illustrative incident scenario
  • Framework alignment

Frameworks it maps to

Related documents