Recovery from a Disaster

The DRP does three things:

  • It establishes an emergency operations center (EOC) as an alternate location from which the BCP/DRP will be coordinated and implemented.

  • It names an EOC manager.

  • It determines when that manager should declare an incident a disaster.

A DRP enables an organization to make critical decisions ahead of time. That way, personnel can manage and review decisions without the urgency of an actual disaster. If these plans are not ready in advance, security professionals and managers will have to make best-guess decisions under huge pressure.

DRPs are long-term, time-consuming, expensive projects, which, for a large company, can cost tens of millions of dollars. It is essential that senior management ...

Get Fundamentals of Information Systems Security, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.