Information Technology Reference
In-Depth Information
with simple considerations such as redundant arrays of independent disks
(R AID) for continuity in the face of a storage device failure, as well as any
other “single points of failure” (also called “choke points”) required for
minimal operation function. Identification of the true minimum func-
tions may require effort, due to the “everything is priority 1” mentality
that pervades many organizations.
Note:
Continuity planning should be a strict bare-bones listing of mini-
mal requirements, addressing immediate-to-mid-term continuance of
business function during and following an event.
Disaster Recovery (DR)
Disaster recovery planning is more comprehensive than that required for
continuity of operations. Disaster recovery extends the recovery objective
to include a return of all services to operational function, prioritized in
terms of recovery point objectives and recovery time objective criteria as
part of the business impact analysis process. Disaster recovery planning
is conducted in conjunction with risk assessment practices, because each
entry in the risk register should be coordinated with its appropriate recov-
ery objectives and plans should be developed to facilitate the steps neces-
sary for full recovery. Disaster recovery applies to full loss of function (no
continuity was possible) as well as to operations shifted to continuity-of-
operations status in the short term, and includes all functions of the orga-
nizational enterprise and network. The time frame for disaster recovery is
flexible and may include a lag (delay) period for safety and procurement
prior to initiation. Disaster recovery practices may not begin until a disas-
ter or emergency has been declared to be at an end, and depends heavily
on communication and notification strategies that have been thoroughly
tested and regularly updated.
Planning for Recovery
Developing COO/DR plans should involve key stakeholders from each
organizational area, to ensure that recovery time and recovery point objec-
tives are reasonable and clearly communicated.
