Which of the following is MOST important when deciding whether to build an alternate facility or subscribe to a
third-party hot site?
A.
Cost to build a redundant processing facility and invocation
B.
Daily cost of losing critical systems and recovery time objectives (RTOs)
C.
Infrastructure complexity and system sensitivity
D.
Criticality results from the business impact analysis (BIA)
Explanation:
The complexity and business sensitivity of the processing infrastructure and operations largely determines the viability of such an option; the concern is whether the recovery site meets the operational and security needs of the organization. The cost to build a redundant facility is not relevant since only a fraction of the total processing capacity is considered critical at the time of the disaster and recurring contract costs would accrue over time.
Invocation costs are not a factor because they will be the same regardless. The incremental daily cost of losing different systems and the recovery time objectives (RTOs) do not distinguish whether a commercial facility is chosen. Resulting criticality from the business impact analysis (BIA) will determine the scope and timeline of the recovery efforts, regardless of the recovery location.