Open cardosec

Case C5628D · GRC · L1 Foundations

BCP vs DR: RTO and RPO

Practise as: Explain it
  1. 01 What is it?
  2. 02 How is it abused?
  3. 03 How do you stop it?
Practise this card
What a strong answer covers

Try it out loud first. Then check yourself:

  1. BCP keeps critical business processes running; DR restores IT systems and data. DR is a subset of continuity.
  2. Business Impact Analysis ranks processes and sets MTD (maximum tolerable downtime) per process.
  3. RTO: max time to restore a system. RPO: max data loss window, which dictates backup/replication frequency.
  4. Strategies: hot, warm, cold sites; cloud multi-region; 3-2-1 backups with at least one immutable/offline copy.
  5. Test it: tabletop, walkthrough, simulation, parallel and full interruption tests, then update the plan.

If the interviewer pushes back

  • Why can a system meet its RTO in a DR test and still fail during real ransomware recovery?

cardosec draws a security topic and gives you a clock: explain it out loud with no notes, then see what you covered and what you missed. Free during early access.