{"id":16358,"date":"2021-09-28T11:12:20","date_gmt":"2021-09-28T16:12:20","guid":{"rendered":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/?p=16358"},"modified":"2026-02-12T15:17:05","modified_gmt":"2026-02-12T21:17:05","slug":"information-disaster-plan","status":"publish","type":"post","link":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/2021\/09\/information-disaster-plan\/","title":{"rendered":"Information Disaster Plan"},"content":{"rendered":"\n<p>Creation and maintenance of an information management disaster plan is a never-ending task. While it can be cumbersome, hard to obtain buy-in, and require an upfront cost, it is one of the most important documents that your office can create. Protecting your information is protecting your assets. You will be able to continue operations and meet objectives with less risk of serious disruption if you ensure that you have continuous access to your information. <\/p>\n\n\n\n<p>This article will promote critical thinking and provide some guidance for developing your office&#8217;s information management disaster plan. <\/p>\n\n\n\n<p>When reviewing this article and establishing your plan, keep in mind the impact of losing information is not always immediately apparent. Think of it like the domino effect.<span style=\"font-size: revert; color: initial;\"> Lack of preparation may lead to permanent information loss, and permanent information loss leads to more time and expense when rebuilding<\/span>. So, prepare with a short-term and long-term impact in mind. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What types of information is your government creating? <\/strong><\/h2>\n\n\n\n<p><strong>Where are your government\u2019s offices geographically located?<\/strong>&nbsp;<\/p>\n\n\n\n<p>Research which natural disasters the geographical location is prone to experiencing. Natural disasters are things like flooding, hurricanes, winter storms, strong winds, etc. Identifying the natural disasters will help to determine what emergency prevention and resources are required. The Federal Emergency Management Agency (FEMA) maintains <a href=\"https:\/\/www.fema.gov\/flood-maps\/products-tools\/national-risk-index\">the National Risk Index<\/a> that helps identify the most applicable natural disasters to a geographical location. <\/p>\n\n\n\n<p>Also research the impact of the information&#8217;s proximity to potential man-made hazards, for example the airport, military bases, plants or factories that handle hazardous or flammable material. Also, assess infrastructure that if faulty would cause lose of information. For e.g. If crossing a bridge is the only entry to the site, analyze how your government will access the information if that bridge were to collapse. Perform an inspection of any building that houses your government information. Check for mold, mildew, fire hazards, etc. You will not be able to predict all of the non-natural disasters that surround the location, but this will help you perform a thorough evaluation you can use to better target your plan.<\/p>\n\n\n\n<p><strong>What formats are the records in?&nbsp;<\/strong><\/p>\n\n\n\n<p>Is the information stored on a printed physical record, electronically, on a CD, microfilm? Each type of format is associated with a preparedness benefit and disaster risk. For e.g. Information on paper is secure based on papers longevity. Paper records lasts hundreds of years, if not thousands. However, paper records must be protected from water damage, sunlight, and on-site storage security risk.<\/p>\n\n\n\n<p>On TSLAC&#8217;s website, we publish various <a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/pubs\" target=\"_blank\">security, storage, and preservation standards<\/a> based on record format. These standards are implemented to mitigate the common disasters to which each format is prone. Review the applicable format laws, rules, and best practices for your government&#8217;s information when constructing the disaster plan. <a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/contact\" target=\"_blank\">Contact your TSLAC analyst<\/a> if you need further guidance or clarification. <\/p>\n\n\n\n<p><strong>Do you have a plan for your confidential and vital\/essential records?<\/strong><\/p>\n\n\n\n<p>Both state agencies and local governments are required to identify vital\/essential records and implement strategies and procedures that will protect these types of records during a disaster. For state agencies, <a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/pubs\/bulletin4#s441183\" target=\"_blank\">State Records Management Law, Section 441.183<\/a> requires state agencies to &#8220;identify and take adequate steps to protect confidential and vital state records.&#8221; For local governments, <a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/pubs\/bulletind#Sec203_021\" target=\"_blank\">the Local Government Records Act, Section 203.021<\/a> requires local governments \u201cto facilitate the identification and protection of essential local government record.\u201d<\/p>\n\n\n\n<p>Both <a href=\"https:\/\/www.tsl.texas.gov\/slrm\/pubs\/bulletin4#s441180\" target=\"_blank\" rel=\"noreferrer noopener\">vital<\/a> and <a href=\"https:\/\/www.tsl.texas.gov\/slrm\/pubs\/bulletind#Sec201_003\" target=\"_blank\" rel=\"noreferrer noopener\">essential<\/a> records are defined as any government \u201crecord necessary to the resumption or continuation of government operations in an emergency or disaster, to the re-creation of the legal and financial status of the government, or to the protection and fulfillment of obligations to the people of the state.\u201d<\/p>\n\n\n\n<p>To help assess what constitutes \u201cvital\u201d and \u201cessential\u201d records, consider what information is absolutely critical and sensitive to your office\u2019s financial, legal, and administrative responsibilities. Does your office create and\/or maintain any of the following information?<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><span style=\"font-size: revert; color: initial;\">Information to ensure operations function;<\/span><\/li><li><span style=\"font-size: revert; color: initial;\">Information affiliated with your relationships with stakeholders;<\/span><\/li><li><span style=\"font-size: revert; color: initial;\">Information with ties to a legal or regulatory requirement;<\/span><\/li><li><span style=\"font-size: revert; color: initial;\">Information about employees, customers, or the general public; or<\/span><\/li><li><span style=\"font-size: revert; color: initial;\">Passwords.<\/span><\/li><\/ul>\n\n\n\n<p>To further help determine what information constitutes essential and vital, we have included some slides from our Introduction to Records Management training session. <\/p>\n\n\n\n<div data-wp-interactive=\"core\/file\" class=\"wp-block-file\"><object data-wp-bind--hidden=\"!state.hasPdfPreview\" hidden class=\"wp-block-file__embed\" data=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-content\/uploads\/2021\/09\/Essential-and-Vital-Records-1.pdf\" type=\"application\/pdf\" style=\"width:100%;height:200px\" aria-label=\"Embed of Embed of Essential-and-Vital-Records-1..\"><\/object><a href=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-content\/uploads\/2021\/09\/Essential-and-Vital-Records-1.pdf\">Essential-and-Vital-Records-1<\/a><a href=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-content\/uploads\/2021\/09\/Essential-and-Vital-Records-1.pdf\" class=\"wp-block-file__button\" download>Download<\/a><\/div>\n\n\n\n<p><strong>What records require critical security measures? <\/strong><\/p>\n\n\n\n<p>Evaluate what type of information your government creates to determine what others might find valuable to use for their personal benefit or in bad faith and identify current access protections. It is never a good feeling to question others&#8217; motives, but unfortunately, evaluating this question could identify gaps in your government&#8217;s disaster preparedness and mitigate the chance of the records being subject to illegal disclosures, access, or alterations. For e.g. If you are an ISD that is responsible for maintaining records of student transcripts, recognize in your plan that this is of high value to someone hoping to sell doctored transcripts. Outline and implement security measures to protect this information. A case study for how a government&#8217;s disaster preparedness plan can prevent harmful alteration and how a bad actor attempted to use government information in bad faith is the <a rel=\"noreferrer noopener\" href=\"https:\/\/www.pewtrusts.org\/en\/research-and-analysis\/blogs\/stateline\/2021\/03\/10\/florida-hack-exposes-danger-to-water-systems\" target=\"_blank\">Oldsmar, Florida water treatment breach<\/a>. This case study reveals the importance of implementing cybersecurity training to all employees, implementing systems that alert a government of risky alterations, and restricting the ability to alter information to specific locations to avoid bad actors from altering the information that results in a change to operations. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Prevent the risk within your capability<\/strong>.<\/h2>\n\n\n\n<p><strong>Enlighten your employees on the associated risk and what they can do to mitigate the risk today.&nbsp;<\/strong><\/p>\n\n\n\n<p>Implement regular emergency training. A recurring training program ensures that employees are mindful of the prevention and response duties they are assigned and helps address any questions they have, such as, how to identify a risk or report their concerns related to a potential risk. <\/p>\n\n\n\n<p>Outline the prevention methods in your government\u2019s policies and procedures.&nbsp;Ensure employees are aware and understand their role and expectations in your government&#8217;s emergency prevention setup.&nbsp;Provide employees with a safe outlet for reporting potential risks. This ensures employees feel comfortable coming forward with any concerns. <\/p>\n\n\n\n<p><strong>Don&#8217;t do it alone.<\/strong>&nbsp;<\/p>\n\n\n\n<p>Establish disaster preparedness teams.&nbsp;Put subject matters experts in a room together to brainstorm how to effectively approach the information management disaster plan.&nbsp;Once ideas are gathered, determine if the expectations are realistic. For e.g. If you have brainstormed that employees should work from home during winter storms, this makes sense on paper, but question if it will really work. Create and email a survey to all employees asking them if they are able to effectively work remotely. This will help determine potential broadband issues or tasks that cannot be performed remotely, etc. <\/p>\n\n\n\n<p>Have teams establish an emergency response contact list. Include any external contacts your government has established a relationship with that should be notified by your government and will respond in an emergency event. Ensure all employees with a role in the emergency response are aware of their responsibilities and how to access the contact list during each type of disaster.<\/p>\n\n\n\n<p>Routinely practice the emergency responses to help ensure employees are familiar with their role during disasters. Remember, when emotions are high it is easy to become overwhelmed and forgetful. Understand that generally an employee&#8217;s mind will be on their home life during a disaster, so you want to make this process as familiar and easy as possible.&nbsp;Routinely testing the emergency responses will help assess kinks in the plan.&nbsp;Talk to others within your industry about their emergency responses. This will help identify prevention methods that your government can utilize to untangle the kinks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Other resources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-content\/uploads\/2021\/09\/Disaster-Prep-Plan-General-Checkist.pdf\" target=\"_blank\">Disaster Preparedness Brief Checklist<\/a> based off this TSLAC article. Note, this checklist does not constitute an extensive overview of what should be accounted for in a disaster preparedness plan. <\/li><li><a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-content\/uploads\/2021\/07\/Essential_Records_-_Disaster_Recovery_Ranking-1-3.xlsx\" target=\"_blank\">Essential record priority ranking spreadsheet<\/a> based off TSLAC article, <a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/2010\/06\/hurricane-season-records-preparation\/\" target=\"_blank\">Hurricane Season Records Preparation<\/a>.<\/li><li>TSLAC article &#8211; <a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/2010\/06\/disaster-recovery-resources\/\" target=\"_blank\">Disaster Recovery Resources<\/a><\/li><li>TSLAC article &#8211; <a rel=\"noreferrer noopener\" href=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/2020\/09\/guest-blog-preparedness-awareness\/\" target=\"_blank\">Guest Blog: Preparedness Awareness<\/a> &#8211; Hear thoughts from another Texas government office<\/li><li>Research ARMA&#8217;s Maturity Model. Which is an assessment of five different levels of information vulnerability and brief action plans.<\/li><\/ul>\n<div class=\"pld-like-dislike-wrap pld-custom\">\r\n    <div class=\"pld-like-wrap  pld-common-wrap\">\r\n    <a href=\"javascript:void(0)\" class=\"pld-like-trigger pld-like-dislike-trigger  \" title=\"Like it?\" data-post-id=\"16358\" data-trigger-type=\"like\" data-restriction=\"cookie\" data-already-liked=\"0\">\r\n                            <img src=\"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-content\/uploads\/2020\/08\/512x512.png\" alt=\"Like it?\" \/>\r\n            <\/a>\r\n    <span class=\"pld-like-count-wrap pld-count-wrap\">1    <\/span>\r\n<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Creation and maintenance of an information management disaster plan is a never-ending task. While it can be cumbersome, hard to obtain buy-in, and require an upfront cost, it is one of the most important documents that your office can create. Protecting your information is protecting your assets. You will be able to continue operations and&hellip;<\/p>\n","protected":false},"author":54,"featured_media":16146,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_s2mail":"yes","footnotes":""},"categories":[439,10],"tags":[44,45,128,175,295,231,79,444,39],"class_list":["post-16358","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-disaster-recovery","category-tips","tag-disaster-preparedness","tag-disaster-recovery","tag-electronic-records","tag-essential-records","tag-information-security","tag-security","tag-storage","tag-tool","tag-vital-records"],"_links":{"self":[{"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/posts\/16358","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/users\/54"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/comments?post=16358"}],"version-history":[{"count":22,"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/posts\/16358\/revisions"}],"predecessor-version":[{"id":16570,"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/posts\/16358\/revisions\/16570"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/media\/16146"}],"wp:attachment":[{"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/media?parent=16358"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/categories?post=16358"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tsl.texas.gov\/slrm\/blog\/wp-json\/wp\/v2\/tags?post=16358"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}