17) Disaster Recovery

The Recovery Point Objective ( $RPO$ ) is defined as the maximum acceptable amount of data loss an organization can tolerate, measured in units of time, occurring before a disaster strikes.
It is used to determine the maximum age of files that must be successfully recovered from backup storage to ensure that normal operations can resume without the organization suffering significant losses.

The Recovery Time Objective ( $RTO$ ) represents the targeted duration of time and the specific service level within which a business process must be restored following a disaster or disruption.
Adherence to the $RTO$ is essential to avoid the unacceptable consequences associated with a break in business continuity.
Specifically, $RTO$ is the time duration established to recover the lost data.

Mean Time Between Failure ( $MTBF$ ) is the calculated average time that occurs between failures of a system or specific component during its active operational lifespan.
A higher $MTBF$ value indicates greater reliability and stability for the network component or system in question.

Mean Time to Repair ( $MTTR$ ) is the average amount of time required to repair a failed device or component and successfully return it to its normal operational state.
It serves as a metric for the efficiency of the repair process; a lower $MTTR$ demonstrates more efficient fault recovery.

Cold Sites
- These represent the most affordable recovery site option but require the longest duration of time to recover operations.
- The site contains no equipment, no active connections, and no data.
- Recovery typically takes between $\text{Days to weeks}$ .
Warm Sites
- These sites are more expensive than cold sites but offer a faster recovery path.
- A warm site contains some equipment and connections; however, the data sets and configurations present are typically out of date.
- Recovery typically takes between $\text{Hours to days}$ .
Hot Sites
- These are the most expensive recovery options but provide the fastest possible recovery times.
- A hot site contains all necessary equipment, active connections, and the most recent configurations and data sets.
- Recovery typically takes between $\text{Minutes to hours}$ .

Active-Active Configuration
- In an active-active setup, both systems in the pair run simultaneously.
- This configuration distributes the workload to maximize both performance and system availability.
Active-Passive Setup
- In an active-passive configuration, only one system is operational at a time while the other remains on standby.
- The standby system is ready to take over duties if the primary system fails.
- This method ensures continuity, though it carries a potential for downtime during the switchover process from the primary to the standby system.

Testing is considered a critical component of disaster recovery planning.
It is used to ensure that all recovery procedures are effective and remain up-to-date.
Conducting regular testing helps organizations prepare for and manage potential disruptions, which in turn minimizes downtime and data loss when actual disaster scenarios occur.

Tabletop exercises are discussion-based sessions where team members walk through various disaster scenarios.
The goal is to evaluate the effectiveness of the disaster recovery plan and identify any existing gaps.
These exercises enhance team preparedness by simulating decision-making processes without the need to activate actual physical or technical resources.

Validation tests involve the actual execution of disaster recovery processes to verify that data and systems can be restored according to the established recovery objectives.
These tests are vital for confirming the practical applicability of the disaster recovery plan.
They also serve as a method for training staff members on their specific roles and responsibilities during recovery operations.