Recovery Strategy

The plan must require continuous improvement processes in which lessons learned are reviewed for changes they may call for in the recovery strategy.

Define and implement a backup and recovery strategy with documented guidance, policy and standards including recovery time and recovery point objectives.

Disaster scenarios must not endanger patients, the quality of the product or the integrity of data. Business continuity guides the organization to react, recover, restart and return to an agreed operating level while disruption lasts and once it ends, while di...

Sets the supervisory approach to business continuity planning and the sound practices expected: board and senior management oversight (policy, process and responsibility, monitoring and reporting), business impact analysis and recovery strategy, the developmen...

HKMA TM-G-1 adjacent modules covered in this framework's scope. TM-G-2 BUSINESS CONTINUITY PLANNING: (a) Business Continuity Governance (TM-G-2.2.1) - Board oversight + BCP committee + crisis management + RACI + ownership;

IT disaster types that threaten continuity of core services (natural disaster, telecom or power failure, hacking) are identified and their damage and business impact analysed to identify core IT services and systems;