Specifications include, but are not limited to: Metro’s Information Services Department (IS) uses a system of regular system back-ups and off-site storage of back-up tapes to protect data from loss due to equipment failure or human error. This strategy assumes a stable, intact environment in which to restore data. However, in the event of a significant emergency causing destruction of facilities, prolonged interruption of infrastructure or diminished capacity of staff, these efforts would likely be inadequate. IS is, in fact, regularly criticized for lacking a disaster recovery plan, annually in the single audit management letter and in occasional management reviews of department practices. Efforts to create such a plan flounder for several reasons: • Lack of guidance on the criticality of information systems – For any of the application systems IS maintains, it is relatively easy to list alternative technical measures that would restore service in an emergency. However, IS has no objective criteria for judging whether: o An alternative is appropriate, i.e. is responsive to likely disruptions and their impact, o The supported business function is critical, or o The alternative is cost effective
