📖 What is Cold Site?
A cold site is a disaster recovery facility providing basic infrastructure—space, power, and cooling—but lacking pre-installed hardware or data. It requires significant time and effort to become operational, as all equipment and data must be transported and configured after a disaster declaration.
"Cold sites represent the lowest cost DR option but have the longest Recovery Time Objective (RTO). Exam questions may contrast cold sites with warm or hot sites. Understand the trade-offs between cost, RTO, and RPO when selecting a DR strategy. Be prepared to calculate potential downtime."
📚 Certification: Certified Information Systems Auditor (CISA)
🔑 What are the Key Concepts of Cold Site?
- ▸ Cold sites offer the lowest cost for disaster recovery, making them suitable for organizations with limited budgets and higher tolerance for downtime.
- ▸ Recovery Time Objective (RTO) is significantly longer with a cold site due to the need to install, configure, and restore data from backups.
- ▸ Unlike warm or hot sites, cold sites do not contain pre-installed hardware, requiring full system builds post-disaster, impacting business continuity.
- ▸ A cold site typically includes essential utilities like power, cooling, and physical space, but lacks the IT infrastructure for immediate operation.
- ▸ Data backups are crucial for cold site recovery; the RPO is determined by the frequency of these backups and the acceptable data loss.
🎯 How does Cold Site appear on the CISA Exam?
You may be asked to identify the disaster recovery option with the longest RTO when presented with scenarios describing cold, warm, and hot sites.
A scenario might describe a company prioritizing cost savings over rapid recovery; determine which DR site type best aligns with their business needs.
Expect questions about calculating potential downtime based on the time required to procure, install, and configure hardware at a cold site after a disaster.
❓ Frequently Asked Questions
When would a cold site be the *most* appropriate DR solution?
A cold site is best suited for non-critical systems where extended downtime is acceptable, or for organizations with strict budgetary constraints and robust backup procedures.
How does the Recovery Point Objective (RPO) impact cold site selection?
A higher RPO (more data loss tolerance) is often acceptable with a cold site, as data restoration is a significant part of the recovery process. Frequent backups are still vital.
What are the key differences between a cold site and a warm site from a cost perspective?
Cold sites are significantly cheaper upfront due to the lack of pre-installed hardware. Warm sites have ongoing costs for maintaining a partially operational environment, increasing overall expense.