Information Technology: Opportunities Exist to Improve the Company’s Ability to Restore IT Services After a Disruption

Our objective was to assess the company’s ability to restore IT services after a disruption. To do so, we analyzed the company’s business continuity planning and testing efforts and compared them to private- and public-sector IT management controls standards issued by the National Institute of Standards and Technology and ISACA (formerly the Information Systems Audit and Control Association). We also visited the company’s two data centers, analyzed IT service disruptions, and reviewed the company’s IT business continuity contracts.