Information Technology Reference
In-Depth Information
(Company A uses Linux and Company B uses Sun Solaris), the hosting company
production environment is exposed and vulnerable to new and unknown people,
equipment, network traffic, and applications. The logistics of understanding the
implications to hosting an unfamiliar visitor are daunting if not downright scary to
any aware security professional.
8.15.3.6 Reserve System
A reserve system provides key functionality at some reduced capacity. For example,
if ten Web servers typically provide the full breadth of E-commerce new business
generation solutions, three Web servers with carefully chosen key applications may
provide 50 percent capacity. Maintaining 50 percent capacity for 24 hours may be
enough to buy time for broader resumption efforts. Certainly, 50 percent for 24
hours is better than 0 percent for 24 hours. The appropriate balance is a factor of
ROI and a clear
reserve system
business case.
8.15.3.7
Commercial Service
A commercial service is a contractual service that provides cold or warm facili-
ties in the event of disaster. A major drawback to a commercial service is any
regional disaster will result in contention for oversubscribed space in the backup
facility. Even if physical space exists, the appropriate amount of external band-
width and phone lines required to support operations varies tremendously with
business type.
The compliance assessment process provides an effective approach to defining a
DRP modification or creation action plan. Like other assessments, the DRP assess-
ment identifies the as-is state of DRP and the to-be state (i.e., compliance require-
ments), and provides a gap analysis and a transition plan. An outline of the DRP
assessment includes:
n
−
−
−
Disaster recovery plan elements
Background information
DR plan structure, format, outline, and content
Disaster recovery organization
Roles and responsibilities
Accountability
Key players
Disaster declaration criteria
Escalation path
Action plans
Standard
Contingency
n
n
n
−
−
−
n
n
