Setting Priorities

I l @ ve RuBoard

In most environments, it is more important to have accurate information than availability; however, in some environments, availability is more important than accuracy. The order and importance of these must be driven by business factors. In either case, the primary concern of incident recovery is the minimization of losses. The primary method of limiting losses is to limit the length of the incident. This is achieved through focusing on rapid detection and recovery.

To adequately determine priorities, one needs to understand the costs of having the systems unavailable, the risks of enabling the service when it is not secured, and the time frame requirements for restoring the systems. The costs and requirements are based on business priorities and contractual and legal requirements.

Business Continuity Plan

Your business continuity plan should define the priorities for the system. It will define the relative importance of availability and integrity and at what point contingency plans, such as remote disaster sites, should be used. The choices made in recovering from an incident are business choices and should be based on good business decisions. The information needed to make these good decisions comes from financial impact and the relative success of mitigation options.

I l @ ve RuBoard