ISC2 Certified in Cybersecurity (CC)Security PrinciplesHard

A critical server hosting the company's main e-commerce website experiences a complete hardware failure. The IT team immediately initiates recovery procedures to restore the service from backups to a redundant server. This action falls under which aspect of organizational resilience?

  1. AIncident Response
  2. BBusiness Continuity
  3. CDisaster Recovery
  4. DSecurity Awareness Training
Show answer & explanation

Correct answer: C. Disaster Recovery

Disaster Recovery (DR) specifically deals with restoring IT operations and data after a significant disruptive event like a hardware failure, often involving backups and redundant systems. Business Continuity (BC) is broader, encompassing non-IT functions as well.

Why the other options are wrong

  • A. Incident Response (IR) focuses on managing and containing individual security incidents, but a complete hardware failure and restoration of service from backups is a DR activity.
  • B. Business Continuity (BC) ensures the continued operation of critical business functions during and after a disruption, which is broader than just IT recovery.
  • D. Security Awareness Training educates users, not a recovery action.

Disaster Recovery (DR)

The process of restoring IT systems, infrastructure, and data after a disaster or major disruptive event.

  • Focuses specifically on the recovery of technology assets.
  • Often a component of a broader Business Continuity Plan (BCP).
  • Involves backups, replication, and alternate sites.

Memory trick: IR handles the crisis, DR recovers the tech, BC keeps the business running.

More Security Principles questions