Home » Functions » Metrics (RC.RM) » RC.RM-1 Recovery SLAs/OLAs

Description

Set recovery SLAs, OLAs and recovery time objective (RTO). These are important metrics that an organisation must set from the outset. It will guide the organisation in decision making, and determining and deciding, for instance, when recovery activities can commence, and when restoration can be deemed successful or not, and when contingency approaches can be invoked.

Set recovery objectives that are achievable, realistic and feasible. For example, some incidents can lead to a total loss of data, e.g. ransomware attack that encrypts the entire storage area network, therefore, setting a recovery objective to an ‘acceptable level of service’ may not be feasible since all the online data has been destroyed, hence achieving ‘acceptable level’ may not be realised. Equally, set realistic recovery time objective (see RC.RM-3).

Outcomes / Outputs

(Conduct / Fix / Ingest / List / Plan / Procure / Produce / Report / Review / Set / Test  / Train )

1. Set recovery SLAs, OLAs and recovery time objective (RTO)

Reference