+GC-03 Information on recovery parameters in emergency operation

1. Übersicht

GC-03 Information on recovery parameters in emergency operation

Upon request by subject matter experts of the cloud service customers, the cloud service provider shares comprehensible and transparent information about the following recovery parameters of the cloud service:

1. Maximum tolerable period of downtime (MTPD) and Recovery Time Objective (RTO);
2. Maximum allowable data loss / Recovery Point Objective (RPO);
3. Recovery time to start emergency operation;
4. Minimum business continuity objective (MBCO) (capacity related to regular operation); and
5. Restore time until normal operation.

The information enables cloud service customers to evaluate the cloud service as part of their own business impact analysis.

The description of the cloud service provider's system of internal control relevant to the development and operation of the cloud service indicates where this information can be found. References relate precisely to the individual aspects specified above, allowing these subject matter experts to find the information in a timely manner.

If information on availability and remediation of disruptions represent average values that are not binding in individual cases, this is highlighted separately.

In addition to the reference in the description of the cloud service provider, the information itself may also be an optional part of the report, e.g. in a section 'Other information provided by the Cloud Service Provider'. Only in the latter case, this information is not subject to the auditor's procedures, and, accordingly, the auditor does not issue an opinion on it.

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.2 Related Regulation

2. Identifizierte Anforderungen

Anforderungen

3. Related Regulations

Regulations
Impressum