Page 291 - CISSO_Prep_ Guide

Business Continuity Planning

Terms / Foundation
• PR should be involved in the BCP process.
• Critical business function (CBF): some
function without which a business will fail.
• Maximum tolerable downtime (MTD): the
amount of time a business can be without
some individual CBF.
• The maximum period of disruption:
alternative term for MTD.
• Recovery time objective (RTO) The amount
of time it will take for a CBF to be restored
at a recovery location.
• Recovery point objective (RPO): The amount
of data that must be recovered (amount of
tolerable data loss).
• Business impact analysis (BIA): an
examination of all business functions to find
out which of them are CBFs and for each
CBF, what their MTD/RPO/RTOs are.
• Keep hard copies of BCP insecure location
(like where you store backups).
• The payroll division is not the most critical
operation.
• Disaster: any event that causes a CBF to be
unavailable for longer than MTD.
• Mirror site = actively running identical
processes in parallel (high cost, instant).