ISC2 Certified in Cybersecurity (CC)Security PrinciplesHard
A critical server hosting the company's main e-commerce website experiences a complete hardware failure. The IT team immediately initiates recovery procedures to restore the service from backups to a redundant server. This action falls under which aspect of organizational resilience?
- AIncident Response
- BBusiness Continuity
- CDisaster Recovery
- DSecurity Awareness Training
Show answer & explanationAnswer & explanation
Correct answer: C. Disaster Recovery
Disaster Recovery (DR) specifically deals with restoring IT operations and data after a significant disruptive event like a hardware failure, often involving backups and redundant systems. Business Continuity (BC) is broader, encompassing non-IT functions as well.
Why the other options are wrong
- A. Incident Response (IR) focuses on managing and containing individual security incidents, but a complete hardware failure and restoration of service from backups is a DR activity.
- B. Business Continuity (BC) ensures the continued operation of critical business functions during and after a disruption, which is broader than just IT recovery.
- D. Security Awareness Training educates users, not a recovery action.
Disaster Recovery (DR)
The process of restoring IT systems, infrastructure, and data after a disaster or major disruptive event.
- Focuses specifically on the recovery of technology assets.
- Often a component of a broader Business Continuity Plan (BCP).
- Involves backups, replication, and alternate sites.
Memory trick: IR handles the crisis, DR recovers the tech, BC keeps the business running.