Disaster Recovery
Plan, test, and execute disaster management scenarios, so that the organization can recover as quickly as possible. Respond to attacks in such a way that forensic data is secured, and that any identified vulnerabilities are made secure.
Improvement Planning
Practices-Outcomes-Metrics (POM)
Representative POMs are described for Disaster Recovery at each level of maturity.
- 2Basic
- Practice
- Document, test, and implement a high-level recovery plan based on likely disaster scenarios.
- Outcome
- The major components of the IT infrastructure can be restored using a defined and documented process.
- Metrics
- # of IT infrastructure components in the disaster plan.
- # of disaster scenarios tested.
- 3Intermediate
- Practice
- Document, test, and implement a recovery plan that covers most IT infrastructure components and is based on service level agreements.
- Outcome
- IT infrastructure service restoration is prioritized according to business relevance and service level agreements.
- Metrics
- % of the IT infrastructure covered by the recovery plan.
- # of SLAs linked to the recovery plan.
- 4Advanced
- Practice
- Deploy the appropriate tools and systems to support and automate the recovery of IT infrastructure components and services from a disaster.
- Outcomes
- IT infrastructure service restoration is tool-supported/semi-automated and is done as per service level agreements (SLAs).
- To improve the overall efficiency of the recovery and where significant time can be saved, divergences from the SLAs are permitted.
- Metrics
- % improvement (disaster recovery) due to supported tools.
- % of disaster recovery that is automated.
- 5Optimized
- Practice
- Deploy the appropriate tools and systems to fully automate the recovery of all IT infrastructure components and services in the fastest possible time.
- Outcome
- There is automated restoration based on priorities defined by SLAs, across the whole organization.
- Metric
- % time to recover from each disaster scenario.