Information Security Handbook

Disaster recovery considerations

Disaster recovery architecture must be taken into account as you review the information location for sensitive business data. The same level of security must be applied for all parts of the information system to properly protect business information based on the business requirements.

• In the following example, the inclusion of a disaster recovery site has doubled the number of server and applications from the previous example to 64 servers and 24 application interconnections
• This example includes a backup internet connection and a representation of data replication at the application's backup site:
  • If not properly secured, the backup internet connection could be used as a pathway into the backup application ...