Guest user Created: Apr 01, 2016 Last commented: Apr 01, 2016

Initiating failover to the secondary site

Once a major incident has occurred, at which point does the calculation to initiate and failover to the secondary site, start considering at the time of incident it may not be major but due to the service being critical and the prolonged time for it to brought up again - as an example RTO 30 minutes so after what time of incident occurring can this 30 minutes start since failover will also take 30 min once the decision is made?

0 0

Assign topic to the user

Select user

Expert

Dejan Kosutic Apr 01, 2016

Answer:

I'm not sure if I understood your question correctly, but your RTO has to be calculated in such a way to provide maximum time of disruption that you can sustain for particular system, process, or part of the company. Therefore, the moment that you get disrupted (i.e. the moment when the incident strikes), the clock for your RTO starts ticking.

The point is - you have to be very careful if you calculate very short RTO like 30 minutes - what will be the cost to prepare to be able to achieve such short recovery time? Maybe it would be better to accept higher risk and decrease the costs.

See also this art icle about calculating the RTO: How to implement business impact analysis (BIA) according to ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-implement-business-impact-analysis-bia-according-to-iso-22301/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Apr 01, 2016

Expert Advice Community