left-svg
Bonus expert support worth $500
with the ISO 27001 Documentation Toolkit
Limited-time offer – ends June 30, 2022.
right-svg

Expert Advice Community

Guest

Query on Business Continuity Plan

  Quote
Guest
Guest user Created:   22h ago Last commented:   22h ago

Query on Business Continuity Plan

A query regarding the Business Continuity Plan. in document A.17.4 literal 3.4 it indicates:

 

"The Disaster Recovery Plan and the recovery plans for particular activities are activated exclusively by decision of the Crisis Manager, when he assesses whether a certain activity will remain interrupted for a period greater than the recovery time objective for that activity. "

Does this mean that the DRP will be activated as long as the incident exceeds the established RTO time?

0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal 22h ago

Please note that the RTO is related to the time needed to recover minimal agreed service levels after disruption is detected, not to the duration of an incident.

So, a more proper statement would be that the DRP will be activated as long as the time to recover minimal agreed service levels exceeds the established RTO time.

For example, in a disruption caused by a lightning bolt, the incident can be over in seconds, while in a disruption caused by fire, it may take several hours for the fire to be extinguished.

In the fire situation, you do not need to wait for the fire to be controlled to assess the time for recovery, compare it with the RTO, and decide to activate the DRP.

This article will provide you with further explanation about RTO:

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jun 24, 2022

Jun 24, 2022