What's changed: Initial version
4.4Disaster recovery and business continuity
Covers the difference between a DRP (disaster recovery plan), focused on procedures to restore IT systems, and a BCP (business continuity plan), the broader plan to keep the whole business running; RTO (how fast to recover) and RPO (how much data loss is tolerable); the role of backups; and the three kinds of DR controls—detective, preventive, and corrective—as the foundation for designing "how to recover after a stoppage."
No matter how firmly you defend, a disaster, failure, or attack can bring things to a "stop." What matters is deciding in advance how fast and how far you can restore afterward. This section covers the difference between a DRP (disaster recovery plan), focused on procedures to restore IT systems, and a BCP (business continuity plan), the broader plan to keep the whole business running; RTO (the target recovery time) and RPO (the tolerable amount of data loss); the underlying backups; and the three kinds of DR controls—detective, preventive, and corrective—learned through the lens of designing "how to recover after a stoppage."
4.4.1DRP vs. BCP, RTO vs. RPO
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.