The Disaster Recovery Plan (DRP) is a document that outlines, in detail, the actions that should be taken to restore systems & files in the event of a catastrophe. The fact that these plans hold sensitive information about your network infrastructure and passwords means these documents must be handled with extreme caution.
What is the most secure way to handle the keeping of a disaster recovery plan? Thoughts to be considered :
- Keepers must be trustworthy and ensure that the data remain safe
- The plan must include people outside the realm of IT to be holders of the data (in case IT department goes rogue, small IT team are in a car accident together, etc)
- Assume that they plans are digital and appropriately encrypted
- Plans need to be updated every year or so (or more depending on how often there may be a major infrastructure change).
- The plan must assume that no IT people with an intimate knowledge of the systems are accessible and, as such, the files can be handed to any competent IT consulting firm to execute the plan.
Possible ideas :
- Give high level executives access to the files and let them pick their own password for the encryption while ensuring that they maintain the key and password in a safe place. (Multiple staff would need to be in for this to work)
- Get two executives or other trusted high level staff. One would select the password for encryption and the other would hold the key. Each would have to consent to opening the files for usage which would prevent a rogue executive. You might use two sets of executives to ensure that if one is on vacation or inaccessible that the plan can still be executed.
- Lock the plan in a safety deposit box and provide two trusted staff with the key
I would love to hear your thoughts on how to keep these docs secure. I can't recall seeing any real discussion on this and I would be interested to hear peoples take on how to keep these documents physically secure.