BCD-04.1 Recovery Time / Point Objectives (RTO / RPO)

Assessment Objectives

In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:

BCD-04.1_A01 time period consistent with Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) for the recovery of the system is determined.
Assessment rigor: 1
Origin: 53A_R5_CP-10_ODP[01]
BCD-04.1_A02 the alternate storage site is configured to facilitate recovery operations in accordance with Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
Assessment rigor: 1
Origin: 53A_R5_CP-06(02)[01] 53A_R5_CP-06(02)[02]
BCD-04.1_A03 time period consistent with Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) for the reconstitution of the system is determined.
Assessment rigor: 3
Origin: 53A_R5_CP-10_ODP[02]
BCD-04.1_A04 the recovery of the system to a known state is provided within a specified time period after a disruption, compromise or failure.
Assessment rigor: 3
Origin: 53A_R5_CP-10[01]
BCD-04.1_A05 a reconstitution of the system to a known state is provided within an organization-defined time period after a disruption, compromise or failure.
Assessment rigor: 3
Origin: 53A_R5_CP-10[02]

Verknüpfte Vorgänge

Verknüpfungen
Verknüpfungstyp	Vorgang
blocks	Recovery Time / Point Objectives (RTO / RPO)

Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.

DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.