Culture and Organization -> Process: Definition of simple BCDR practices for critical components
Risk and Opportunity
Risk: In case of an emergency, like a power outage, DR actions to perform are not clear. This leads to reaction and remediation delays.
Opportunity: By understanding and documenting a business continuity and disaster recovery (BCDR) plan, the overall availability of systems and applications is increased. Success factors like responsibilities, Service Level Agreements, Recovery Point Objectives, Recovery Time Objectives or Failover must be fully documented and understood.
Usefulness and Requirements of this Activity
Required knowledge: High (two disciplines)
Required time: Medium
Required resources (systems): Low
OWASP SAMM VERSION 2