~/moritzsamrock_

Disaster Recovery

Also known as:DR

Disaster RecoveryRecoveryThe controlled restoration of systems, data, and business services after a disruption.: Restores IT systems and data following major disruptions, adhering to defined targets. The focus is on resilience and recovery after disruptions. Key elements include prioritized business processes, tested plans, robust backups, drills, and clearly defined recovery objectivesRecovery ObjectiveA measurable target for the timing or data state of recovery after a disruption..

How it works and where it fits

Disaster Recovery views security through the continuity and restoration of critical services. The question is not only whether disruption can be prevented, but which processes take priority, which dependencies they require, and which data states must be restored within defined periods. Technical systems and organizational procedures form a shared recovery chain.

Practical security relevance

Resilience can be demonstrated only through realistic testing. Backups need separate protection, recovery procedures must be documented, and responsibilities must be unambiguous. Exercises should include unavailable identity services, compromised administration paths, missing keys, and constrained communication. Measurable recovery objectives connect technical measures to actual business impact.

  • BackupBackupA copy of data or system states intended for recovery following loss or an attack.: A copy of data or system states intended for recovery following loss or an attack.
  • Operational ResilienceOperational ResilienceAbility to maintain critical services or rapidly restore them following disruptions.: Ability to maintain critical services or rapidly restore them following disruptions.
  • Business Continuity ManagementBusiness Continuity ManagementPlanning of measures to maintain critical business processes during disruptions.: Planning of measures to maintain critical business processes during disruptions.
  • Incident ResponseIncident ResponseA structured process for the preparation, detection, containment, eradication, and post-incident review regarding security incidents.: A structured process for the preparation, detection, containment, eradication, and post-incident review regarding security incidents.

Related terms