BUSINESS RESUMPTION AND CONTINGENCY
1. PURPOSE: To establish mandatory operational requirements for business resumption and
contingency planning within the Office of the State Attorney. It is designed to provide
Office-wide guidance to Chiefs, Supervisors and Staff in responding to catastrophic events
involving SAO facilities and information resource service interruptions.
2. BACKGROUND: Traditionally, contingency planning has focused on restoring
information resource services for an automation center, wide area network or similar service.
While remote sites are still accessed for processing and storing information, most facilities
have their own local area networks which link the various personal computers and share
various resources. If a catastrophic event occurs that makes it impossible for SAO employees
to use that site, the re-establishment of information systems and network functions is only
one part of the resumption of services for a facility. The critical functions of that facility must
be restored and an interim process must be put into action. "Hot sites" (a reserved space
already equipped with processing capability and other services), reciprocal agreements, and
other arrangements to provide restored services to their end users should be considered.
Critical files that were processed previously on Local Area Network servers need to be
restored so they can be used in processing during the contingency period. In summary, both
the information technology and the general office environment have to be restored.
a. The SAO Chief Information Officer (CIO) is charged with ensuring that a business
resumption plan is developed at all SAO locations. This includes the necessary contingency
plans for critical automated information systems. The CIO is also responsible for monitoring,
reviewing, and evaluating compliance with this automated information system security.
b. Division Chiefs are responsible for ensuring that offices and facilities under their control