Audit flags problems with data contingency plans
Robin Bravender, E&E reporter
Published: Thursday, April 9, 2015
U.S. EPA should improve its plans for recovering data management operations in the event of a disaster, according to the agency's watchdog.
The EPA Office of Inspector General issued a new report today finding that functions at EPA's National Computer Center -- which provides computing and data management support for the agency -- might be hampered in the event of a disaster due to a lack of proper planning.
"Information systems play a critical part in the EPA mission and business processes. As such, it is important that these systems operate effectively without excessive interruption," the audit says. "When a service interruption occurs, it is essential that the NCC efficiently restores critical applications important to helping the EPA achieve its mission to protect human health and the environment."
Auditors found that critical contingency planning documents for NCC and security systems were either not up to date or didn't exist.
The IG's office recommended that agency officials develop and implement a process to keep the center's information security contingency planning documents current and ensure that all contact information for disaster recovery teams is up to date. According to the audit, all of the watchdogs' recommendations had been resolved.
"EPA has outlined corrective actions or proposed alternative solutions to address the recommendations in the report," said EPA spokeswoman Laura Allen. "The agency is committed to maintaining the most accurate contact information."