Disaster Recovery — CISSP Study Guide

Bundled into the existing Certified Information Systems Security Professional premium course — no separate purchase.

Included in this chapter:

Dimension	Disaster Recovery Plan (DRP)	Business Continuity Plan (BCP)	System recovery procedures (ISCP)
Primary focus	Restore IT systems/facility infrastructure	Sustain mission/business processes	Recover one specific information system
Scope	Site-specific; relocation to alternate site	Whole business or chosen priority functions	One system, at current or alternate site
Trigger	Major disruption requiring relocation	Any disruption to business processes	A disruption affecting that system
Relationship	Supports the BCP by restoring its systems	May use the DRP and per-system plans	Activated after the DRP moves the site
Owner altitude	IT/technology recovery teams	Business continuity planners + leadership	System owner / recovery teams

Cheat sheet

DR restores the technology; the BCP keeps the business mission running
Disaster recovery is invoked only when the disruption forces relocation
DRP moves the site; each system's own contingency plan then rebuilds it
DR plan execution runs in three ordered phases
Plan activation is gated by predefined activation criteria
A single designated authority declares the disaster, with a named successor
Personnel safety always outranks system recovery
Damage/outage assessment determines how the plan is implemented
A call tree is the canonical manual notification method
Recover in BIA-priority order, most-critical systems first
Within a system, restore the operating system before the application and data
Recovery includes escalation triggers for more staff and resources
Reconstitution validates the recovered system, then deactivates the plan
The disaster is over at formal deactivation, not when systems power back on
Close the loop with an after-action report and lessons learned
Only designated, authorized spokespeople talk to the public
DR is run by pre-staffed teams under one decision authority
DR plans are checklists built in advance, not improvised in the crisis
Pre-establish alternate, out-of-band communication channels for use when primary comms fail or are compromised

Unlock with Premium — includes all practice exams and the complete study guide.