After this lesson, you will be able to: Distinguish BCP from DRP, understand RTO/RPO, and draft a basic disaster recovery plan.
When the data center burns, ransomware encrypts everything, or AWS us-east-1 has a 6-hour outage, what does the business do? BCP/DRP defines the answer in advance.
BCP (Business Continuity Plan), keep the business running during disruption. Includes manual processes, alternate sites, communications. DRP (Disaster Recovery Plan), restore IT systems specifically. Backups, failover, restore procedures. BCP is broader; DRP is the IT subset.
1. Backup strategy: 3-2-1 (3 copies, 2 media, 1 offsite).
2. Test restores quarterly, backups you haven't restored aren't backups.
3. Document the runbook.
4. Tabletop exercise the scenario.
5. Review after every real incident.
Modern attackers target backups specifically. Solution: immutable storage (S3 Object Lock, write-once-read-many) and air-gapped offline copies. If the backup is on the same domain as production, the attacker encrypts it too.
Pick.
Sign in and purchase access to unlock this lesson.