PAM 25-1-2 — Information Technology Contingency Planning
PAM 25-1-2 governs IT contingency planning for continuity of operations and the development of information system contingency plans.
- Publication number: PAM 25-1-2
- Title: INFORMATION TECHNOLOGY CONTINGENCY PLANNING
- Date: 08/10/2020
- Proponent: G-6
- Status: ACTIVE
View PAM 25-1-2 on armypubs.army.mil
Related publications
It covers mission essential functions, maximum tolerable downtime, business impact analysis, preventive controls, recovery strategies, and risk management framework security controls. It also sets out ISCP components, testing, training, exercises, and maintenance requirements.
Applies to: This pamphlet only addresses IT contingency planning supporting continuity of operations (COOP). The Armys COOP program is addressed in AR 500 3.
Topics covered
- Information technology contingency planning
- Continuity of operations support
- Mission essential functions
- Maximum tolerable downtime
- Business impact analysis
- Preventive controls
- Recovery strategies
- Information system contingency plans
Questions and answers
Who is responsible for IT contingency planning?
IT contingency planning is a command responsibility. (paragraph 1)
How often must an information system contingency plan be tested?
Planned testing is a critical element of a viable ISCP and will be conducted at least annually. (paragraph 3-2)
What does the recovery time objective measure?
RTO defines the maximum amount of time that a system resource can remain unavailable before there is an unacceptable impact on other system resources, supported mission/business processes, and the MTD. (paragraph 3)
Is backup required for information systems?
Backup is required by both DoD and Federal statute. (paragraph 3-2)
What are the main components of an information system contingency plan?
NIST SP 80034 identifies five main components of the contingency plan: supporting information, activation and notification phase, recovery phase, reconstitution phase, and appendixes. (paragraph 3-2)