ITES-11287 - UK - IT Disaster Recovery plan Service - Deadline December 4,2026

(1) Vendor needs to provide IT disaster recovery plan service. – Create a simple and proportionate approach to system criticality and recovery expectations. This should include developing a high–level inventory of key systems, supported by a basic prioritisation model, for example categorising systems as critical, important, or non–critical.– Review and consolidate backup arrangements across all key systems, with a view to establishing a clear and documented overview of coverage, responsibility, and recovery capability.– This should include clarification of which systems are backed up internally versus those managed by third parties, along with the associated recovery commitments and testing arrangements.– Develop a methodology, proportionate to the size and scale of the organisation, for the testing of IT Disaster Recovery arrangements.– This should include simple scenario–based exercises, tabletop discussions, and targeted recovery tests for key systems.– Develop a formal Cyber Incident Response Plan, setting out how cyber incidents would be identified, escalated, managed, and contained.(2) All the questions must be submitted no later than November 27, 2026.