Implement Disaster Recovery Processes - Response

Implement Disaster Recovery Processes

A BCDR action can be triggered by a number of possible circumstances (natural disaster/severe weather, fire, physical damage to resources, external attack, etc.); to best manage the activation of the response, the organization must determine the following:

• Criteriaforinitiating

response action

• Personnel authorized

to initiate BCDR action

Not all possible contingency events can be predicted and described before they occur, but a set of guidelines can be created to aid those personnel who will ultimately make the decision when a disaster occurs. Criteria might include dollar value of affected assets, number of affected users, expected duration of system downtime, threat to human health and safety, and so on.

Information

stream/chain

Enacting the BCDR plan usually entails considerable cost and results in a significant impact to the organization (both financial and operational; often, these costs are not included in the organization's budget and therefore, will have a lasting impact.

The person(s) allowed to make this decision for the organization must be trusted and have a significant degree of authority and insight - usually, a member of senior management, if not the head of the organization.

Information stream/chain to provide the decision-making authority with sufficient data to make the correct decision at the right time. This might include a formal process, such as escalating incidentrelated information, external professional sources (such as government agencies and paid threat intelligence providers), and informal means (such as news services and social media).