This chapter covered important elements of risk mitigation with a disaster recovery plan. It defined a DRP, including its purpose. Several factors are critical to the success of a DRP. Management must provide both resources and leadership. DRP developers need to understand disaster recovery concepts and how an organization operates. The DRP must address several primary concerns. The RTOs identify the time by which a CBF must be returned to operation. When necessary, CBFs can be moved to alternate locations. A hot site can be used within minutes or hours but is the most expensive to implement. A cold site is simply a building with electricity, water, and other facility support. It’s the least expensive but the most difficult to test. A warm site is a compromise between the two. A mobile site is a site that can be set up close to an impacted facility. Another critical success factor is a budget. DRPs must have funding to succeed.
DRPs can include different elements. Starting with purpose and scope statements is common to ensure they are clear to all parties. Identifying the scope helps prevent scope creep. DRPs will include specific steps and procedures. When the disaster strikes, use the steps and procedures in the DRP to recover the systems. DRPs should be tested to verify they work as planned, and they need to be updated periodically and in response to changes.
A(n) ________ is a plan used to restore critical business functions to operation after a disruption or disaster.
A DRP has multiple purposes, which include saving lives, ensuring business continuity, and recovering after a disaster.
True
False
Disaster recovery and fault tolerance are the same thing.
True
False
A(n) ________ is an element necessary for success. For example, the success of a DRP depends on elements such as management support and a disaster recovery budget.
A business impact analysis (BIA) includes a maximum acceptable outage (MAO). The MAO is used to determine the amount of time in which a system must be recovered. What term is used in the DRP instead of the MAO?
Critical business function (CBF)
DRP action item (DRPAI)
Recovery action item (RAI)
Recovery time objective (RTO)
A certain DRP covers a system that hosts a large database. To ensure that the data is copied to an off-site location, what could be used?
Data replication
Electronic vaulting
Remote journaling
All of the above
A copy of backups should be stored ________ to ensure the organization can survive a catastrophic disaster to the primary location.
An alternate location is being considered for a DRP, and the costs need to be minimized. What type of site would be chosen?
Cold site
Warm site
Hot site
Mobile site
An alternate location is being considered for a DRP, and it must be brought online as quickly as possible. What type of site would be chosen?
Cold site
Warm site
Hot site
DRP site
An alternate location is being considered for a DRP, and it needs to be a business location that is already running noncritical business functions. This location has most of the equipment needed. What type of site is this?
Cold site
Warm site
Hot site
DRP site
Which of the following elements are commonly included in a DRP?
BCP, BIA, communications, and recovery procedures
BCP, backup plans, and recovery procedures
Purpose, scope, communications, and recovery procedures
Purpose, scope, CIRT activation, and recovery procedures
A hot site is being considered as an alternate location. Various technologies are also being considered to keep the data updated and decrease the time that will be necessary for the hot site to become operational. What are some technologies that may help?
Data replication
Cloud computing
Virtualization
All of the above
A and B only
Of the following, what is critical for any DRP?
Third-party backup software
Budget
Alternate locations
Fuel for generators
An organization has created a DRP, but it hasn’t been tested. Which of the following methods can be used to test it?
Desktop testing
Simulation testing
Full-blown DRP testing
All of the above
Once a DRP has been created, it doesn’t need to be updated.