Now that you have developed clear requirements from your business stakeholders, it is time to begin developing the strategy that you will implement to technically reconstitute data and information systems if there were to be affected by an outage or a disaster.
This is the point of the process where you begin to look at what your available options are based on your business user requirements and what you technically have at your disposal to properly meet your business continuity and disaster recovery requirements:
- Based on your business user requirements, what do you need?
- Develop a technical design that satisfies your business users' requirements.
- Ensure that information security is maintained as part of this design and that the organization's risk posture is not reduced by the design.