How often does Zscaler conduct Business Continuity/Disaster Recovery testing?


(Andy Logan) #1

I’d like to know how often does Zscaler conduct Business Continuity/Disaster Recovery testing?


#2

BCP/DR testing is done annually by Zscaler. The results of the testing are proprietary and confidential; we cannot share them with external entities. That said, external auditors verify our BCP/DR plan and test results on annual basis during the ISO 27001 audit.


(Arun Francis) #3

@Alexandra_Rashdan One of customer is looking for the following information

In order to be DR-compliant, we are looking for the following information:
• We need the date of the last failover (restored services from 1 data center to another) test
• Confirmation that the RTO (time taken to restore services) achieved is within 48 hours
• Confirmation that the RPO (maximum data loss) was no more than 24 hours
• Confirmation that the Cloud Service’s failover results were as expected and successful (critical services were restored within the RTO/RPO)

We just need confirmation that the RTO/RPO has been met (yes or no answer), the test was successful (yes or no), and the date (even just a month/year) of when it was tested.

Can Zscaler provide this information.?

Regards,
Arun Francis