HIPAA Business Continuity (BCP) and Disaster Recovery (DRP) Matrix

Download Free HIPAA BCP DRP Matrix

Critical Business Function Analysis & Prioritization
- Mapping critical business functions to applications
- Mapping applications to technologies (platforms, LANs/WANs, data storage, imaging, EDI, etc.)
- Impact of business cycle on prioritization (end of month, quarter-end, year-end, etc.)
- Strategy for regular update and review
- Clear statement of risk assumption
- Definition of minimum acceptable level of service and detailed actions to get to that level
- Management participation and signoff on prioritization recommendations

Business Unit Contingency Teams Organization
- Emergency Management/Crisis Management guidelines/procedures/decisions
- Public relations/Media Interaction guidelines
- Emergency notification process and responsibilities
- Hardcopy, local backup strategies
- Key vendor information
- Recovery Logistics
- Human Elements
- Teams Composition
- Skill set match
- Training
- Testing
- Specific procedures for activating and de-activating contingency operations
- Authorization to activate/de-activate
- Quantified service level thresholds for activation/de-activation
- Triggers to activate/de-activate
- Methods for quantifying degradation of service
- Responsibilities/Authorities/Accountabilities during contingency operations