2007/10/17 Council Agenda Packet

�I Iv comprehensive System Backup and Disaster Recovery/Business Resumption Plan. The Plan shall include, but is not limited to, the following elements: a. A detailed explanation of protections in place at the central clearinghouse facility to protect against and mitigate the adverse impacts of power and/or communications failures, catastrophic events, or other disasters, including all on-site and remote data storage and backup procedures; b. A detailed explanation of the Contractor's compliance with the technical specifications for data backup and recovery provided in this Contract including, but not limited to, Sections 6.11-5.2.8 Database Management, 6.11-8.2.3 Network Management, 6.111-1.4 Data Backup and Recovery, and 6.111-3.8 FTP —Additional Security; c. A detailed description of the Disaster Recovery Center (DRC) which the Contractor will set up and maintain as a back-up site for the central clearinghouse facility. The DRC shall be in a location as approved by the Agencies (such approval shall not be unreasonably withheld or delayed) and is geographically separate from, and not subject to the same risks as, the location where the clearinghouse's production equipment is regularly operated. The description shall include (i) the location of the facility; (ii) the number of anticipated personnel to be located at the facility should its full operation become necessary; (iii) how the facility will be mobilized and operated; and (iv) a schedule and description of periodic, complete tests of readiness for such facility; d. A detailed description of the tools, processes and procedures required to activate the Business Recovery Center. All tools, processes and procedures shall be provided to the entity responsible for facility activation; e. Whether the Contractor plans to contract with a third party to activate and operate the Business Recovery Center. Such provision of services by a third party shall be subject to the approval of the Agencies, and shall require the third party to take reasonable steps to maintain the confidentiality of all software and data; and f. A detailed description of procedures to be followed by the Contractor in the event that a power and/or communications failure, catastrophic event, or other disaster occurs either locally in the Puget Sound region or at the contractor's production server location. Such procedures shall include a description of the conditions for Disaster Recovery Center activation, and shall describe specific activation processes. 13.2 Not later than the date of commencement of the BETA Test, the Contractor shall have set up and rendered operational a facility in the Agency- CCA#3-Attachment A 4