IT Shared Services Catalog | 72 7.2 DISASTER RECOVERY AS A SERVICE (DRaaS) SERVICE DESCRIPTION Admin’s Disaster Recovery Program provides agencies assistance with the development of disaster recovery (DR) plans and private, cloud-based, multi-tenant disaster recovery services to protect agency application data and infrastructure. Colocation services are also included in the service and provide for physical server/device off-site colocation facilities at the disaster recovery facility. Backup services are available not only for the recovery of data after a natural or man-made disaster, but also for an agency’s daily incremental backups and weekly full backups. These facilities meet state agency data security and privacy compliance regiments, including Internal Revenue Service Publication 1075, HIPAA, CJIS, South Carolina ITEC 7230 and 7320(a) PCI-DSS, NIST Special Publication 800 series security framework and the state’s own SCDIS-200 framework. As the state is audited against many of these security standards, the disaster recovery site service provider shall participate in and support these audits. Admin has contracted with qualified vendors to provide efficient, cost-effective disaster recovery services. Admin manages the state’s Disaster Recovery Program and the associated vendor contracts for services. All services acquired via this contract must be approved by Admin’s Division of Technology Operations. The Disaster Recovery as a Service (DRaaS) Program provides disaster recovery planning, data protection and recovery services. Planning services include the creation of detailed recovery plans for applications and infrastructure, which are documented in a cloud-based repository accessible in the event of a disaster. These plans are initially vetted via a rigorous testing process that includes the following: Tabletop testing for each application, for the infrastructure and for the entire agency. Functional testing via the DRaaS cloud-based facilities for each application, for the infrastructure and for the entire agency. The agency shall adopt strict adherence to a change management process that ensures modifications to the application and infrastructure are updated within their disaster recovery plans. The agency shall test the disaster recovery environment on an annual basis. The service provides private cloud-based, multitenant disaster recovery services and facilities to protect agency application data and infrastructure. Colocation services are included and provide for physical server/device off-site colocation facilities at the contractor’s site. Additionally, Backup as a Service capabilities provide for agency incremental backups (e.g., daily, weekly), with data and/or file restores to an agency server when requested. State agencies will be considered a single tenant in both the private cloud/IaaS facility and in the colocation facility. Each individual agency and department will be logically and/or physically separated DISASTER RECOVERY AS A SERVICE – SERVICE DETAIL
RkJQdWJsaXNoZXIy NzM4MTg4