Auditing Information Systems, Second Edition

7.10. KEY ASPECTS OF AN INFORMATION SYSTEMS BUSINESS RESUMPTION PROGRAM

For full-blown information processing disasters, an organization's BRP should provide for alternate information processing sites. Hot sites, cold sites, vendor sites, and reciprocal sites are four commonly deployed alternative information processing sites. The type of site selected depends on the type of computing system platform (i.e., computer hardware and operating system), available financial resources, and desired time to full information processing capability at the alternative site. For each type of site, computer equipment must be compatible with the primary computer system, and backup tapes must be readily available so that the computers have the most current system software, application programs, and data. Most organizations have multiple IS platforms. Thus, they will likely have separate IS BRPs. Each BRP may utilize a hot site, cold site, third-party site, reciprocal site, or some variation of these sites in the event of a business interruption.

A hot site is an information processing facility that is fully equipped and configured with lights, electricity, air-conditioning equipment, computer equipment, and supplies such that it can be fully operational in less than 24 hours. The primary advantage of a hot site is its fast start-up time. This can be especially critical to large companies whose customers require immediate service. Each day that a data processing center is not functioning can cost ...