Query on Business Continuity Plan
A query regarding the Business Continuity Plan. in document A.17.4 literal 3.4 it indicates:
"The Disaster Recovery Plan and the recovery plans for particular activities are activated exclusively by decision of the Crisis Manager, when he assesses whether a certain activity will remain interrupted for a period greater than the recovery time objective for that activity. "
Does this mean that the DRP will be activated as long as the incident exceeds the established RTO time?
Assign topic to the user
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Please note that the RTO is related to the time needed to recover minimal agreed service levels after disruption is detected, not to the duration of an incident.
So, a more proper statement would be that the DRP will be activated as long as the time to recover minimal agreed service levels exceeds the established RTO time.
For example, in a disruption caused by a lightning bolt, the incident can be over in seconds, while in a disruption caused by fire, it may take several hours for the fire to be extinguished.
In the fire situation, you do not need to wait for the fire to be controlled to assess the time for recovery, compare it with the RTO, and decide to activate the DRP.
This article will provide you with further explanation about RTO:
- What is the difference between Recovery Time Objective (RTO) and Recovery Point Objective (RPO)? https://advisera.com/27001academy/knowledgebase/what-is-the-difference-between-recovery-time-objective-rto-and-recovery-point-objective-rpo/
Comment as guest or Sign in
Jun 24, 2022