COMPLIANCE HOT TOPIC Internal Audit - Disaster Recovery/Business Continuity Plan QUESTION Should businesses have a documented “Disaster Recovery/Business Continuity Plan” in place? ANSWER Yes, a formal Business Continuity plan would instruct employees where to go and what to do in the event of a significant incident or natural disaster that disrupts daily business. The plan would include the location employees should report to and where critical equipment (IT Equipment) is maintained, as well as a phone call tree, and a listing of vendors critical to keeping the business running. The physical back up facility must be at least 25 miles from the main office in case a natural or man-made disaster affects an entire region. |
