BCP & DRP

cissp

需要注意到国内没有类是美国HIPAA的相关法律法规约束服务提供商。因此在企业领导在代价权衡方面很容易趋向于不做安全投入，并非他们不清楚BCP的重要性。

omni

What is the most difficult task(s) in considering Time and Expertise:
- centrialized backup
- decentrialized backup
- networked storage
...
- restore: server data (centralized / decentralized)
- resotre: user data
- restore: user system/applications
- restore: server system/application (what if the application has multi-system /multi platform involved)
- restore: licensing/dongle/key in application restoration
...

小龙

Backup/Offsite/Restoring is only the MINIMUM requirement to a quilified Data Center. Reviewing of backup/resotre procedure is a basic component of data center audit.

BCP/DRP is far beyond back/restore. Subscribtion of hotsite/warmsite is very common to banking. They are able to rebuild infrastructure and restore data to resume business service within limited period even after whole building down. Normally, they also schedule DR drill annully to test the facility and review the DR plan. It needs the people with solid IT, project planning and business knowledge.