Page 32 - CISSO_Prep_ Guide
P. 32
Availability:
If we think of accessibility as a measuring stick (yardstick,
meter stick), then the benefit of using availability as a way to
define security becomes clear. A system may be available 100%
of the time-continuous availability - or it may be available only
a limited percentage of the time. It is up to the business to
determine what level or rate of availability they require (and are
willing to pay for). The level of dependence that the company
has on the system is a measure of how "critical" that system is.
The first challenge is to work with the business to "discover"
what their availability requirements are. The company may not
really know the answer to that challenge. They would like
systems and data to be available ALL the time - but in reality,
