IT Service Recovery Risk Assessment

IT service recovery decisions attempt to balance a relatively complex cost model:

1. Predisaster Costs: Insurance

   1. Recovery planning

   2. Prepurchased recovery resources

   3. Ongoing maintenance of recovery documentation and resources

2. Postdisaster Costs: Damage Recovery

   1. Recovery activity outlined in the recovery plan

   2. Postpurchase of recovery resources

   3. Intangible costs of the disaster

The executive discussion on the correct balance between predisaster and postdisaster costs can be resolved through a risk assessment focused on the impact of a disaster. This may be better termed a business impact analysis, as the focus of this risk assessment is to

1. Identify assets

2. Identify associated risks

3. Prioritize the assets' importance to the business

4. Outline safeguards needed to mitigate these risks