Take the ISO 27001 course exam and get the
EU GDPR course exam for free
LIMITED-TIME OFFER – ENDS SEPTEMBER 29, 2022

Expert Advice Community

Guest

Query on Business Continuity Plan

  Quote
Guest
Guest user Created:   Jun 24, 2022 Last commented:   Jun 24, 2022

Query on Business Continuity Plan

A query regarding the Business Continuity Plan. in document A.17.4 literal 3.4 it indicates:   "The Disaster Recovery Plan and the recovery plans for particular activities are activated exclusively by decision of the Crisis Manager, when he assesses whether a certain activity will remain interrupted for a period greater than the recovery time objective for that activity. " Does this mean that the DRP will be activated as long as the incident exceeds the established RTO time?
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Jun 24, 2022

Please note that the RTO is related to the time needed to recover minimal agreed service levels after disruption is detected, not to the duration of an incident.

So, a more proper statement would be that the DRP will be activated as long as the time to recover minimal agreed service levels exceeds the established RTO time.

For example, in a disruption caused by a lightning bolt, the incident can be over in seconds, while in a disruption caused by fire, it may take several hours for the fire to be extinguished.

In the fire situation, you do not need to wait for the fire to be controlled to assess the time for recovery, compare it with the RTO, and decide to activate the DRP.

This article will provide you with further explanation about RTO:

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jun 24, 2022

Jun 24, 2022

Suggested Topics