BCP vs DRP
Business continuity keeps critical activities operating through disruption. Disaster recovery focuses on restoring services and systems. Both must align to business processes.
RTO and RPO
RTO is the targeted time to restore; RPO is the maximum tolerable age of lost data. Define them per service based on business impact and measure during exercises.
ISO 22301:2019
A business continuity management-system standard covering governance, impact analysis, strategy, exercises and improvement. It is not a promise of zero incidents.
Recovery evidence
Test restoring databases, files, secrets, access, DNS, network dependencies and manual steps. Record actual duration, blockers, required workarounds and data consistency.
At a glance
| Term | Meaning |
|---|---|
| RTO | Recovery-time objective |
| RPO | Recovery-point objective |
| BCP | Keep business operating |
| DRP | Restore services |
How SFERE can support
SFERE: dependency inventories, restore tests, runbooks, exercises and gap tracking.
Official laws, standards & publisher resources
This is an editorial explanation. Verify consolidated laws, applicable standards and interpretations for your activity, country and date. Full standards may require a licence.