During internal audit's risk assessment process performed in
connection with development of the Fiscal Year 2005 audit plan,
the College assessed disaster recovery and business continuity
planning risk as “High.†The consequences contemplated in the
context of disaster recovery and business continuity included the
following:
• Loss of physical or electronic access to computers,
information resources, offices, or multi-use facilities
maintained by the College and resources therein.
• Loss of key information needed for the organization to
function.
• Loss of key personnel involved in any business function, use
of information resources, or the decision-making function,
which could have intolerable impacts if not recovered in a
determined amount of time.
• Lengthy recovery time of mission-critical and support
systems due to any above risk exposures.
