How often should I conduct a disaster recovery (DR) test?

How often should I conduct a disaster recovery (DR) test?

How often should I conduct a disaster recovery (DR) test?

    Requires Free Membership to View

    When you register for SearchDisasterRecovery.com, you’ll also receive targeted emails from my team of award-winning editorial writers. As you know, an interruption can threaten your organization at any time – and it’s our goal to ensure you’re armed with the right tips and information to help you ensure a swift recovery.

    Rich Castagna, Editorial Director

    By submitting your registration information to SearchDisasterRecovery.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchDisasterRecovery.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

How often companies should conduct a disaster recovery (DR) test varies. The most important thing to remember is to make sure that your DR plan and your staff members have what's needed to recover your information systems and business functions in the event of an emergency. This may be once a year, once every three years, or only after there have been major changes in the organization, its line of work, or its facilities. This is going to be different for every single business, and something that management will ultimately have to decide and support.

Instead of wondering how often do you need to conduct a disaster recovery test, ask yourself, "Have we tested at all?" In my work performing security assessments, at least eight out 10 businesses I've seen haven't tested their disaster recovery procedures. Many don't have a disaster recovery plan at all.

Plans sometimes go untested because of all the technical and operational complexities associated with them, but you can often work around some of these issues through simulation. Disaster recovery is also one of those topics that doesn't get the attention it deserves because management assumes that the odds are in their favor that nothing bad will ever happen to their company. In the end, testing is the only way you can validate and improve your plan. There's no doubt that problems and gaps in your plan will surface during testing. Not having the business sense and leadership to do this at all is certainly a disaster in the making.

This was first published in July 2009