정답: B
The elements of a disaster recovery plan (DRP) are document the actual location of the ORP, developing an incident notification procedure, and establishing recovery locations. A DRP is a plan that defines the procedures and resources for restoring the critical business functions and systems after a disaster or an outage. A DRP should include the following elements:
Document the actual location of the ORP: The ORP is the operational recovery plan, which is a plan that defines the procedures and resources for restoring the operational functions and systems after a disaster or an outage. The ORP should be documented and stored in a secure and accessible location, such as a cloud storage service, a remote data center, or a fireproof safe, and it should be updated and reviewed regularly. The actual location of the ORP should be documented in the DRP, so that the relevant stakeholders, such as the management, the staff, or the vendors, can access and execute the ORP in the event of a disaster or an outage.
Developing an incident notification procedure: The incident notification procedure is a procedure that defines the roles, responsibilities, and actions of the stakeholders involved in the disaster recovery process, and the methods and channels of communication and information exchange among them. The incident notification procedure should be developed and documented in the DRP, and it should include the following information:
The incident response team, which is the group of people who are responsible for initiating, coordinating, and managing the disaster recovery process, and who have the authority and the skills to make decisions and take actions.
The incident escalation process, which is the process of notifying and involving the higher-level or external stakeholders, such as the management, the customers, or the authorities, about the occurrence and the details of the disaster or the outage, and seeking their approval, support, or guidance.
The incident communication plan, which is the plan that defines the methods and channels of communication and information exchange among the stakeholders, such as the phone, the email, or the social media, and the frequency and the content of the communication and information, such as the status, the impact, or the resolution of the disaster or the outage.
Establishing recovery locations: The recovery locations are the alternative sites or facilities where the organization can resume its critical business functions and systems after a disaster or an outage. The recovery locations should be established and documented in the DRP, and they should include the following information:
The type and the level of the recovery locations, such as the hot site, which is a fully equipped and operational site that can provide immediate recovery, the warm site, which is a partially equipped and operational site that can provide rapid recovery, or the cold site, which is a basic and non-operational site that can provide delayed recovery.
The location and the distance of the recovery locations, such as the local, which is within the same city or region as the primary site, the regional, which is within the same country or continent as the primary site, or the global, which is in a different country or continent than the primary site.
