Which term describes a document that sets out the procedures an organisation will follow to restore its IT systems and data after an event such as a fire, flood or cyber attack?
Disaster recovery policy
What is meant by 'critical data'?
Data the organisation cannot continue to operate without
Which term describes the set days and times when copies of data are made, and how often these copies are taken?
Backup schedule
What is meant by a 'recovery timeline'?
A plan showing how long the organisation can manage without each of its systems
Which term describes a pre-arranged place where an organisation can continue to work if its main site is damaged or cannot be used?
Alternative location
What is meant by 'backup media'?
The device or platform used to store copies of data, such as tapes or the cloud
What is meant by a recovery task in a disaster recovery policy?
A job given to a member of staff to carry out after a disaster
Which term describes copies of an organisation's data that are kept so the data can be restored if the originals are lost or damaged?
Backups
Recovery tasks in a disaster recovery policy are linked to a job role rather than a named person. Why is this better?
So the task is still carried out if that person leaves
A disaster recovery policy states that all staff must know the recovery procedures, even those with no recovery tasks. What is the benefit of this?
They know what to do and who to contact
According to good practice, which type of data should be backed up most frequently?
The critical data the organisation cannot work without
A disaster recovery policy says that systems will be backed up regularly. What is the main problem with this?
It does not say how often backups will be taken
Why should an organisation store its backup copies away from its main site?
So the backups survive a fire or flood at the main site
A disaster recovery policy includes a timeline for restoring systems. Why should critical systems be restored before less important systems?
The organisation can only manage without them for a short time
A flood forces a company to move to a second site. What must the disaster recovery policy confirm is available there?
The hardware, software and personnel needed to run the systems
A disaster recovery policy says how often data is backed up and which media are used, but it does not say who is responsible for the backup process. Why is this a problem?
Staff will not know whose job it is to make sure the backups are taken
A disaster recovery policy states when backups are taken, but it does not say where the backups are stored. Why should the policy state this?
So that staff know where to find the backups when data has to be restored
A disaster recovery policy does not give its recovery tasks to particular members of staff. What is the main risk of this?
Some tasks may be duplicated while others are missed
A disaster recovery policy says that all systems will be running again as quickly as possible after a disaster. Why is this not good enough?
It does not say how long the organisation can manage without each system
A disaster recovery policy says that staff may move to another office if the main site cannot be used, but the office is not named. Why is this a problem?
Staff will not know where to go or what will be provided there
We use cookies to enhance your experience. You can manage your preferences or learn more in our Cookie Policy.