Any difference in roles between IS-3 and IS-12?
These roles are the same in both policies. In IS-3 the UISL-Unit Information Security Lead is focused on securing systems and applications with the help of team members, and IS-12 UITRL-Unit IT Recovery Lead is focused on ensuring the IT systems and applications are recoverable in the event of a disaster.
What’s the relationship between the RL level for IS-12 and Availability Level for IS-3?
There is no direct correlation between them, but an application with a High Availability Level will likely have a High Recovery Level.
Where are ITDR - IT Disaster Recovery Plans are hosted?
We will use UC Ready to house ITDR plans.
Which campuses use UC Ready?
UC Ready tool is available for all California University systems.
Where is UC Ready hosted?
It's a cloud-hosted SAAS tool.
Is there a cost to use UC Ready tool?
UC Ready tool is funded by UCOP and currently, there is no cost associated. However, it is suggested to only add only relevant users to keep the cost low for UCOP.
Who will move our current plans from Castellan to UC Ready?
bIT Business Continuity office will move current plans from Castellan to UC Ready.
How to access UC Ready tool?
Here is the link to access UC Ready tool. Require Calnet authentication. The tool will register you once you are in, but you won't see any plans. Submit a request to itdrhelp@berkeley.edu for access to plans relevant to your area of service. The ITDR admin will then assign the plan to your profile.
Could we still have an off-site backup for R1 & R2?
In short, yes. The decision to have off-site storage for R1 and R2 is upon the Unit after carefully assessing the risk and budget. The Unit head can work with UITRL to assess risk, and the Unit head will make the decision.
Are Unit Heads aware of this initiative?
We are piloting in Berkeley IT, and will rollout to campus in late Spring. Non-IT Unit Heads will be made aware when we complete the pilot.
Who is responsible for funding this initiative?
Unit Heads will need to secure funding through the budget planning process.
In a situation where bIT hosts, but doesn’t own the application, how will DR plans be made?
Collaboration and coordination should happen so that for such a system, a comprehensive DR plan is developed. bIT service team will assign a designated member for UITRL, and Unit head will assign UITRL coordinator within its unit.
Does UC Ready replace BC Catalyst/Castellan?
Yes
If I have any existing plan in BC Catalyst/Castellan, who is going to transfer the data?
bIT will do the transfer of data. There is a strategy in place for doing that work and you don't need to do that work.
Should we be working on BC plans - Business Continuity plans now? (these are non ITDR plans and focus on business operation)
No, for this effort, the focus is the ITDR plan, but there is some acknowledged dependency between the two.
Who determines recovery level, and who pays for it?
The Recovery Level (RL) information is based on BIA - Business Impact Assessment, which is the responsibility of a cross functional team working with functionals.
Your Unit head might know this information already if your Unit has gone through the BIA process.
Service Owners will work with leadership to fund improvements to come into compliance. Starting with RL5, down to RL1 as a part of Iterative improvements
Can we continue with IS-12 for the Units if they don't have BIA-Business Impact Assessment done?
While the BIA is still pending, you can still work on documenting your IT Recovery plans in the UC Ready for your area of services and applications.
For policy FAQs, please go to this page.