Definitions
Recovery Time Objective
The Recovery Time Objective (RTO) is the maximum tolerable duration that a system can be down, following a disruption.
Recovery Point Objective
The Recovery Point Objective (RPO) is the maximum tolerable amount of data loss, measured in time, following a disruption.
Incident
A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices.
Disaster Recovery
The process of restoring an organization's mission-critical information systems and data to an acceptable operational state following a major disruption or disaster.
Directive (CP-1 Contingency Planning)
GNB shall establish, implement, and maintain a formal Contingency Planning Directive to ensure the continued availability of essential services and the protection of organizational information and technology assets during disruptive events.
Purpose
The objective of the Contingency Planning Directive is to ensure that critical Information Technology (IT) and Operational Technology (OT) resources are recovered efficiently and effectively, meeting business requirements, and minimizing downtime and data loss.
