Please enable JavaScript.

Coggle requires JavaScript to display documents.

16:4 (RECOVERY ALTERNATIVES (Alternatives that provide the fastest…

- - - - business costs associated with the interruption of critical processes (developed in the BIA)
        vs.
        the cost of the various alternative
        processing options
  - - - but lacking any IT or communications equipment, programs, data or office support :red_cross: :phone: :computer: :cd: :capital_abcd: :male-office-worker:
        
        To use a sports analogy, a cold site is like having a substitute on the bench, ready to be called into the game.
  - - - plan must also provide for any required ancillary infrastructure necessary to support the site such as access roads, water, waste disposal, power and communications. :city_sunset:
  - - - employees would be transferred to the warm site, and current versions of programs and data would need to be loaded before operations could resume at the warm site. :new: :cd:
        
        Using the sports analogy, a warm site is a substitute warming up, getting ready to enter the game
  - - - usually maintain installed versions of the programs required to support critical applications.
        Data may also be duplicated to the hot site in real or near real time
        
        hot sites may have a small staff assigned, employees are usually transferred to the hot site from the primary site to support operations upon activation.
        
        Using the sports analogy, a hot site is a substitute on the sideline waiting to enter the game.
  - - - fully equipped and staffed, and can assume critical processing with no interruption perceived by the users.
  - - - not considered a viable option due to
        
        complications of maintaining security and privacy compliance during shared operations
        
        difficulty of enforcing the agreements should a disagreement arise at the time the plan is activated.
        
        the constraining burden of maintaining hardware and software compatibility between the companies
  - - - participants promise to provide assistance to each other when an emergency arises.
  - - - Configurations
        
        hardware and software configurations for the
        facility adequate to meet company needs
        
        provision to update the
        configurations
      - Disaster
        
        definition of disaster broad enough to meet anticipated
        needs?
      - Access
        
        facility exclusive or does the customer have to share the available space if multiple customers simultaneously declare a disaster
        
        guaranteed assurance that they will have adequate
        access
        
        IF NOT satisfactorily specify how access conflicts will be resolved
      - Priority
        
        agreement provide the company with satisfactory
        priority following a disaster?
      - Availability
        
        facility be available to the company without delay
        when needed?
      - Speed of availability
        
        How soon after a disaster will facilities be
        available?
      - Subscribers per site
        
        agreement limit the number of subscribers
        per site?
      - Subscribers per area
        
        the agreement limit the number of
        subscribers in a building or area
      - Preference
        
        gets preference if there are common or regional
        disasters
        
        backup for the backup facilities
        
        facility exclusive or does the customer have to share the available space if multiple customers simultaneously declare a disaster
      - Insurance
        
        adequate insurance coverage for company employees
        at the backup site
        
        existing insurance reimburse those fees
      - Usage period
        
        How long is the facility available for use? Is this period
        adequate?
        
        What technical support will the site operator provide?
      - Communications
        
        communication connections to the backup site sufficient to permit unlimited communication with the alternate site if needed?
      - Warranties
        
        warranties will the vendor make regarding availability
        of the site and the adequacy of the facilities
        
        liability limitations (there usually are) and is the company willing to live with them
      - Testing
        
        testing rights are included in the contract? Check with the insurance company to determine any reduction of premiums that may be forthcoming due to the backup site availability.
      - Reliability
        
        vendor attest to the reliability of the site(s) being offered?
        
        vendor should have an UPS, limited subscribers, sound technical management, and guarantees of computer hardware and software compatibility
      - Security
        
        site be adequately secured by the company to comply with the company’s security policy?
- - - - Outcomes of DRP
        
        A continuous process DRP is part of it , this process direct the response to incidents ranging from simple emergencies to full-blown disasters. :arrow_upper_left: :arrow_upper_right: :arrow_lower_right: :arrow_lower_left:
- - - - earliest point :sunny: in time in which it is
        acceptable to recover the data. :spiral_note_pad:
        
        . If the RPO is in minutes (lowest possible acceptable data loss),then data mirroring or real-time replication should be implemented as the recovery strategy. :two_men_holding_hands:
  - - - indicates the earliest point :sunny:in time at which the
        business operations (and supporting IT systems) must resume after disaster :arrow_forward:
        
        RTO is in minutes (lowest acceptable time down), then a hot site, dedicated spare servers (and other equipment) and clustering must be used.
- - - - each IT platform that runs an application supporting a critical business function will need a recovery strategy.
  - - - appropriate strategy is the one with a cost for an acceptable recovery time that is
        
        also reasonable compared to the impact and likelihood of occurrence as determined in the BIA.
  - - - • Hot sites :fire:
      - • Warm sites :tumbler_glass:
      - • Cold sites :ice_cream:
      - • Duplicate information processing facilities :printer: :printer:
      - • Mobile sites :desert:
      - • Reciprocal arrangements with other organizations :handshake: