SSCP Systems Security Certified PractitionerIncident Response and RecoveryMedium

A small medical clinic is developing its disaster recovery plan. Due to budget constraints, they cannot afford a hot site. They decide to use a facility that includes basic office space, power, and network connectivity, but requires them to bring their own computers, servers, and data backups. What type of alternate site have they chosen?

  1. AWarm site
  2. BCold site
  3. CHot site
  4. DReciprocal agreement
Show answer & explanation

Correct answer: B. Cold site

A cold site provides basic infrastructure like space, power, and connectivity, but requires the organization to supply all necessary hardware and data, making it the most cost-effective but slowest recovery option.

Why the other options are wrong

  • A. A warm site would have some pre-installed hardware.
  • C. A hot site would be fully equipped and operational.
  • D. A reciprocal agreement involves using another organization's facilities, which isn't described here.

Cold Site

A disaster recovery site that provides basic infrastructure (e.g., office space, power, cooling, network) but lacks IT equipment and data, requiring significant time to become operational.

  • Lowest cost among alternate sites.
  • Requires the longest Recovery Time Objective (RTO).
  • Needs all hardware and data to be transported and installed.

Memory trick: Cold Site: Just a cold, empty room.

More Incident Response and Recovery questions