![]() ![]() The business can operate but in a diminished state.Īll data and systems that are critical to the business operations. Here is an example of an IT inventory, risk assessment and risk classification for the data center of a hypothetical enterprise:Īll data and systems that are needed to achieve the business' strategic objectives but does not need to be immediately restored for the business to continue to operate.Īll data and systems that are important to the achieving business objectives. Their risk is part of your risk assessment, so be sure to take it into account. Your SaaS providers should be able to tell you what they’ve put in place to mitigate risk in their infrastructure. For example, your data center in Florida has a different risk profile from your data center in Arizona, so take advantage of your distributed data by spreading the risk around. And within your data backup strategy, make room for disaster recovery plans suited to each data center. But from the perspective of physical plant, it’s better than being caught completely off guard by an incident. It may seem like a stretch to occasionally inspect the air conditioning in your data center, the pipes under the floor and what your neighboring businesses are up to. It’s more prudent to automate your inventory process to ensure you’re not leaving things out. You can make the mistake of assuming you know your entire IT inventory, but trends like virtual machine (VM) sprawl and shadow IT put much of that in doubt.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |