An organization should have a formal, written plan that details the actions required to restart or continue operations after a disruptive event. A BCP details the restoration or continuity of the organization's processes, equipment, staffing, inventory, and so on. There's more to what goes into a fully formed DRP that just nailing down recovery hardware, loading data, and getting back online. A DRP focuses on the restoration of the computing infrastructure and its associated services and should include its scope statement, evaluation of the damage, a staging plan for each damage level, a restoration procedure, and a review of the plan's effectiveness. An important part of a DRP is the designation of a recovery site, which are classified as hot, warm, and cold sites.
A BIA projects the potential impact of an operational interruption from an extreme event...