Recovery What assurances are in place Please consider RADIO BUTTONS: 5 Full: Business continuity – to recover the application in redundancy in hardware is fully implemented including the event of a disruption or and software platforms, physically separate, Label: Value: 5 “5 – Full”, disaster? physical locations of data redundant environments, centers, frequency and replication, and clustering/grid Label: Value: 4 “4 – Most”, comprehensiveness of failover as necessary; disaster replication, global and recovery exercises local failover, specificity consistently meet or exceed Label: “3 – of recovery time and point recovery time and point Value: 3 Sufficient”, objectives, and the objectives frequency and success of Label: “2 – disaster recovery 3 Sufficient: Impacts of Value: 2 – Insufficient”, exercises. data loss are generally understood; some Label: Value: 1 6 “1 – None”, redundancy exists for critical processes and data, but most loss is acceptable or recoverable given time; disaster recovery exercises are conducted periodically with known and acceptable deficiencies 1 None: Impacts of loss are – not understood; no redundancy or recoverability; in the event of a disaster, all assets are lost.
6 Recovery What assurances are in place to recover the application in the event of a disruption or disaster? Please consider redundancy in hardware and software platforms, physical locations of data centers, frequency and comprehensiveness of replication, global and local failover, specificity of recovery time and point objectives, and the frequency and success of disaster recovery exercises. RADIO BUTTONS: Label: “5 – Full”, Value: 5 Label: “4 – Most”, Value: 4 Label: “3 – Sufficient”, Value: 3 Label: “2 – Insufficient”, Value: 2 Label: “1 – None”, Value: 1 5 – Full: Business continuity is fully implemented including physically separate, redundant environments, replication, and clustering/grid failover as necessary; disaster recovery exercises consistently meet or exceed recovery time and point objectives 3 – Sufficient: Impacts of data loss are generally understood; some redundancy exists for critical processes and data, but most loss is acceptable or recoverable given time; disaster recovery exercises are conducted periodically with known and acceptable deficiencies 1 – None: Impacts of loss are not understood; no redundancy or recoverability; in the event of a disaster, all assets are lost.
FY%2018%20Application%20Portfolio%20Management%20Assessment%20and%20Validation%20Instructions.docx