Services

Audits

The primary objective for auditing existing recovery plans and processes is to identify business and technology recovery strengths and weaknesses with existing disaster recovery (IT) and/or business continuity programs. Recovery plans and processes may also include offsite storage and alternate operation centers.

Contingency Now accomplishes these audits by using our in-house audit program that is scalable to the size and sophistication of your enterprise operations and deliverables. Contingency Now also provides an objective and non-biased audit assessment document then reports the results to your executive stakeholders or designated committee. Leveraging the Disaster Recovery International Institutes (DRII's) top ten (10) best practices, Contingency Now's audit tools will ensure your team receives measurable risk feedback accompanied with risk mitigation, elimination or transfer recommendations.

Contingency Now implements and supports three (3) mutually exclusive audits:
  • Business Continuity Audit
  • Disaster Recovery (IT) Audit
  • Alternate Operations Center & Offsite Storage Audit
For each audit listed above, Contingency Now will provide a detailed audit assessment document that contains the following key areas:
  • Table of Contents
  • Executive Summary
  • Findings and Recommendations
  • Audit & Assessment Methodology
  • Gap Assessment Rating System
  • Risk Rating System
Business Continuity Audit
This audit has a baseline of 14 major sections with 226 actionable items.

Disaster Recovery (IT) Audit
This audit has a baseline of 8 major sections with 142 actionable items.

Alternate Operations Center & Offsite Storage Audit
This audit has a baseline of 7 major sections with 137 actionable items.

Contingency Now's audit program was developed for client flexibility for private companies, corporations, and governmental mandate compliance. Supported governmental mandates include:

Financial Institutions
The Financial Institution audit program will determine the level of compliance with the following financial sector mandates:
  • FFIEC's IT Examination Handbook - March, 2008
  • NASD Rule 3500 Series; 3510, 3520 and NYSE 446
Healthcare Institutions (covered entities)
The Healthcare Institution audit program will determine the level of compliance with the following healthcare sector mandates:
  • HIPAA Security Rule 164.308(a)(7)(i): Contingency Plan
Government Jurisdictions - Continuity of Operations Planning (COOP)
The Government Jurisdiction audit program will determine the level of compliance with the following governmental sector mandates:
  • Federal Preparedness Circular (FPC 65)
  • NIST 800-34
  • NFPA 1600 - 2007
  • Standardized Emergency Management System (SEMS)