VCE Data Analytics U4O2 Definitions Worksheet: Disaster recovery plans to Victorian privacy and health records legislation (Modules 80–113)
Name:
Date:
Class:
✎
Key terms
Write what each term means, in your own words.
1
evacuation procedure
2
3-2-1 rule
3
restoration
4
communication plan
5
Testing a recovery plan
6
Evaluating a disaster recovery plan
7
APP 4 unsolicited personal information
8
APP 7 direct marketing
9
HPP 1
10
HPP 4
Answer Key
VCE Data Analytics U4O2 · Modules 80–113 · Student wording will vary for definitions
1evacuation procedure — A set of steps that gets people safely out of a site to an assembly point during an emergency like a fire. People come first, before any equipment or data recovery begins.
23-2-1 rule — Keep 3 copies of data on 2 different types of media, with 1 copy stored offsite (such as cloud storage), so one disaster cannot destroy both the data and its backups.
3restoration — The ordered process of bringing systems and data back into use from backups after a disruption, restoring critical systems first and then checking the restored data is correct and complete.
4communication plan — Part of a disaster recovery plan stating who tells staff, customers, regulators and media what happened, and how, using contact lists, a spokesperson and timely updates.
5Testing a recovery plan — Running drills and test restores to check a disaster recovery plan really works, then fixing any gaps found and updating the plan.
6Evaluating a disaster recovery plan — Checking a plan covers evacuation, backup, restoration, communication and testing, then judging each against the organisation's needs to find gaps, risks and improvements.
7APP 4 unsolicited personal information — APP 4: if an organisation gets personal information it did not ask for, it must decide if it could have collected it. If not, it must destroy or de-identify it.
8APP 7 direct marketing — APP 7 stops an organisation using or disclosing personal information for direct marketing unless conditions are met, such as the person's consent or an easy way to opt out.
9HPP 1 — Health Privacy Principle 1: collect health information only if necessary for the service, by lawful and fair means, and tell the person why it is collected.
10HPP 4 — Health Privacy Principle 4: protect health information from misuse, loss and unauthorised access, and securely destroy or de-identify it when it is no longer needed.