Common use of Disaster Recovery Level Application Requirements Clause in Contracts

Disaster Recovery Level Application Requirements. 1. To meet the RTOs, each Application will need to have appropriate supporting infrastructure, tools and management; as described in the following table. Eligibility for DR testing for each DR Class also is noted. DR Level RTO Minimum Requirements DR Exercise Eligibility Class P 1 hour  Application resides on servers within the Consolidated Data Centers  Application has automatic failover  Application has appropriate data replication  Annual exercise of DR capability with Service Provider and appropriate Third Parties Class 1 72 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR locationApplication has appropriate data replication  Annual exercise of DR capability with Service Provider and appropriate Third Parties Class 2A 7 days  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Annual exercise or table-top exercise of DR capability with Service Provider and appropriate Third Parties Class 2B 14 days  Application has identified target systems installed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Application has compatible tape technologies at appropriate DR location.  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties DR Level RTO Minimum Requirements DR Exercise Eligibility Class 3 21 days  Application recovery is supported by “acquired at time of disaster” contracts from the Service Provider available to deploy in an appropriate DR location  Application has appropriate data backup and restore methods and processes  Application has compatible tape technologies at appropriate DR location.  Annual enterprise table-top exercise of DR capability with Service Provider and appropriate Third Parties  Application recovery is out of scope.  Upon request during annual planning cycle, annual DCS Customer table-top exercise of DR capability with Service Provider and appropriate Third Parties Class 4 Low Priority, as part of Service Restore  Application has appropriate data backup and restore methods and processes  No Exercise Class 5 7 days  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location  Application has appropriate data replication  Application has non- transactional data only.  Annual exercise or table-top exercise of DR capability with Service Provider and appropriate Third Parties Class 6 14 days  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has non- Transactional Data only. Agency Assumes the risk that the application will provide acceptable performance on slower disk.  Application has appropriate data backup and restore methods and processes  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties DR Level RTO Minimum Requirements DR Exercise Eligibility Class 7 14 days  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Application has non- transactional data only.  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties Class 8 As per the DR Recovery contract  Application has appropriate data backup and restore methods and processes  Annual exercise of DR capability, as per DR contract, with Service Provider and appropriate Third Parties

Disaster Recovery Level Application Requirements. 1. To meet the RTOs, each Application will need to have appropriate supporting infrastructure, tools and management; , as described in the following table. Eligibility for DR testing for each DR Class also is noted. documented in Attachment 4-E. DR Level RTO RPO Minimum Requirements DR Exercise Eligibility Class P 1 hour 1 hour  Application resides on servers within the Consolidated Data Centers  Application has automatic failover  Application has appropriate data replication Class M 24 hours 1 hour  Annual exercise of Application resides on Mainframes within the Consolidated Data Centers  Application has identified target Mainframes installed and managed in appropriate DR capability with Service Provider and location  Application has appropriate Third Parties data replication Class 1 72 hours 6 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR locationApplication location  Application has appropriate data replication  Annual exercise of DR capability with Service Provider and appropriate Third Parties Level RTO RPO Minimum Requirements Class 2A 7 days 48 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Annual exercise or table-top exercise of DR capability with Service Provider and appropriate Third Parties Class 2B 14 days 48 hours  Application has identified target systems installed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Application has compatible tape technologies at appropriate DR location.  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties DR Level RTO Minimum Requirements DR Exercise Eligibility Class 3 21 days 48 hours  Application recovery is supported by “acquired at time of disaster” contracts from the Service Provider available to deploy in an appropriate DR location  Application has appropriate data backup and restore methods and processes  Application has compatible tape technologies at appropriate DR location.  Annual enterprise table-top exercise of DR capability with Service Provider and appropriate Third Parties  Application recovery is out of scope.  Upon request during annual planning cycle, annual DCS Customer table-top exercise of DR capability with Service Provider and appropriate Third Parties Level RTO RPO Minimum Requirements Class 4 Low Priority, as part of Service Restore Low Priority, as part of Service Restore  Application has appropriate data backup and restore methods and processes  No Exercise Class 5 7 days 48 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location  Application has appropriate data replication  Application has non- transactional data only.  Annual exercise or table-top exercise of DR capability with Service Provider and appropriate Third Parties Class 6 14 days 48 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has non- Transactional Data only. Agency Assumes the risk that the application will provide acceptable performance on slower disk.  Application has appropriate data backup and restore methods and processes  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties DR Level RTO RPO Minimum Requirements DR Exercise Eligibility Class 7 14 days 48 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Application has non- transactional data only.  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties Class 8 As per the DR Recovery contract As per the DR Recovery contract  Application has appropriate data backup and restore methods and processes  Annual exercise of DR capability, as per DR contract, with Service Provider and appropriate Third Parties

Disaster Recovery Level Application Requirements. 1. To meet the RTOs, each Application will need to have appropriate supporting infrastructure, tools and management; , as described in the following table. Eligibility for DR testing for each DR Class also is noted. documented in Attachment 4-E. DR Level RTO RPO Minimum Requirements DR Exercise Eligibility Class P 1 hour 1 hour  Application resides on servers within the Consolidated Data Centers  Application has automatic failover  Application has appropriate data replication Class M 24 hours 1 hour  Annual exercise of Application resides on Mainframes within the Consolidated Data Centers  Application has identified target Mainframes installed and managed in appropriate DR capability with Service Provider and location  Application has appropriate Third Parties data replication Class 1 72 hours 6 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR locationApplication location  Application has appropriate data replication  Annual exercise of DR capability with Service Provider and appropriate Third Parties Level RTO RPO Minimum Requirements Class 2A 7 days 48 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Annual exercise or table-top exercise of DR capability with Service Provider and appropriate Third Parties Class 2B 14 days 48 hours  Application has identified target systems installed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Application has compatible tape technologies at appropriate DR location.  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties DR Level RTO Minimum Requirements DR Exercise Eligibility Class 3 21 days 48 hours  Application recovery is supported by “acquired at time of disaster” contracts from the Service Provider available to deploy in an appropriate DR location  Application has appropriate data backup and restore methods and processes  Application has compatible tape technologies at appropriate DR location.  Annual enterprise table-top exercise of DR capability with Service Provider and appropriate Third Parties  Application recovery is out of scope.  Upon request during annual planning cycle, annual DCS Customer table-top exercise of DR capability with Service Provider and appropriate Third Parties Level RTO RPO Minimum Requirements Class 4 Low Priority, as part of Service Restore Low Priority, as part of Service Restore  Application has appropriate data backup and restore methods and processes  No Exercise Class 5 7 days  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location  Application has appropriate data replication  Application has non- transactional data only.  Annual exercise or table-top exercise of DR capability with Service Provider and appropriate Third Parties Class 6 14 days 48 hours  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has non- Transactional Data only. Agency Assumes the risk that the application will provide acceptable performance on slower disk.  Application has appropriate data backup and restore methods and processes  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties DR Level RTO Minimum Requirements DR Exercise Eligibility Class 7 14 days  Application resides on servers within the Consolidated Data Centers  Application has identified target systems installed and managed in appropriate DR location with sufficient allocated storage.  Application has appropriate data backup and restore methods and processes  Application has non- transactional data only.  Annual table top exercise of DR capability with Service Provider and appropriate Third Parties Class 8 As per the DR Recovery contract As per the DR Recovery contract  Application has appropriate data backup and restore methods and processes  Annual exercise of DR capability, as per DR contract, with Service Provider and appropriate Third Partiesprocesses