📖 What is Disaster Recovery (DR)?
Disaster Recovery (DR) focuses on restoring IT infrastructure and data following a disruptive event, aiming to resume critical business functions within defined timeframes. DR plans detail procedures for backup, replication, failover, and recovery, minimizing downtime and data loss during and after a disaster.
"DR is distinct from Business Continuity (BC). DR is *technical* recovery; BC encompasses the broader organizational response. Know common DR strategies (cold site, warm site, hot site, cloud-based DR) and their associated costs and recovery times. Expect questions on testing and maintaining DR plans."
📚 Certification: Certified Information Security Manager (CISM)
🔑 What are the Key Concepts of Disaster Recovery (DR)?
- ▸ DR focuses on IT systems recovery, while Business Continuity (BC) addresses the overall organizational response to disruptions.
- ▸ Recovery Time Objective (RTO) defines the maximum acceptable downtime, influencing the choice of DR strategy.
- ▸ Recovery Point Objective (RPO) determines the maximum acceptable data loss, impacting backup and replication frequency.
- ▸ DR strategies range from cold sites (lowest cost, longest recovery) to hot sites (highest cost, fastest recovery).
- ▸ Regular DR testing (tabletop exercises, simulations) is crucial to validate plan effectiveness and identify weaknesses.
🎯 How does Disaster Recovery (DR) appear on the CISM Exam?
You may be asked to select the most appropriate DR site type based on a company’s RTO and budget constraints, considering factors like cost and recovery speed.
A scenario might describe a ransomware attack; expect questions about restoring from backups and validating data integrity as part of the DR process.
Expect questions about the roles and responsibilities within a DR team, including who authorizes failover and manages communication during a disaster.
❓ Frequently Asked Questions
How does RTO impact the cost of a DR solution?
Lower RTOs (faster recovery) generally require more expensive DR solutions like hot sites or cloud-based replication, as they demand more resources and redundancy.
What's the difference between backup and replication in a DR context?
Backup creates point-in-time copies, while replication continuously copies data. Replication offers lower RPO but is more complex and resource-intensive.
Why is DR testing often overlooked, and what are the consequences?
Testing is often skipped due to cost or disruption concerns. However, untested plans frequently fail during actual disasters, leading to prolonged downtime and greater losses.