Page 1332 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

business facility and environment back to a workable state.

The recovery team members have a very short time frame in which to
operate. They must put the DRP into action and restore IT capabilities
as swiftly as possible. If the recovery team fails to restore business

processes within the MTD/RTO, then the company fails.

Once the original site is deemed safe for people, the salvage team
members begin their work. Their job is to restore the company to its
full original capabilities and, if necessary, to the original location. If
the original location is no longer in existence, a new primary spot is
selected. The salvage team must rebuild or repair the IT infrastructure.
Since this activity is basically the same as building a new IT system,

the return activity from the alternate/recovery site to the
primary/original site is itself a risky activity. Fortunately, the salvage
team has more time to work than the recovery team.

The salvage team must ensure the reliability of the new IT
infrastructure. This is done by returning the least mission-critical
processes to the restored original site to stress-test the rebuilt
network. As the restored site shows resiliency, more important

processes are transferred. A serious vulnerability exists when mission-
critical processes are returned to the original site. The act of returning
to the original site could cause a disaster of its own. Therefore, the
state of emergency cannot be declared over until full normal
operations have returned to the restored original site.

At the conclusion of any disaster recovery effort, the time will come to
restore operations at the primary site and terminate any processing

sites operating under the disaster recovery agreement. Your DRP
should specify the criteria used to determine when it is appropriate to
return to the primary site and guide the DRP recovery and salvage
teams through an orderly transition.