CISSP考试指南笔记：7.12 实施灾难恢复

Recovering from a disaster begins way before the event occurs. It starts by anticipating threats and developing goals that support the business’s continuity of operations.

A goal must contain certain key information, such as the following:

• Responsibility Each individual involved with recovery and continuity should have their responsibilities spelled out in writing to ensure a clear understanding in a chaotic situation.

• Authority In times of crisis, it is important to know who is in charge.

• Priorities It is extremely important to know what is critical versus what is merely nice to have.

• Implementation and testing

The biggest effect of an incident, especially one that is poorly managed or that was preventable, is on an organization’s reputation or brand.

The DR plan should address in detail all of the topics we have covered so far.

Personnel

---

The DR coordinator needs to define several different teams that should be properly trained and available if a disaster hits.

The DR coordinator should have an understanding of the needs of the company and the types of teams that need to be developed and trained.

The restoration team should be responsible for getting the alternate site into a working and functioning environment, and the salvage team should be responsible for starting the recovery of the original site.

The BCP must outline the specific teams, their responsibilities, and notification procedures.

剩余内容请关注本人公众号debugeeker, 链接为CISSP考试指南笔记：7.12 实施灾难恢复