Hot Site Question
dustervoice
Member Posts: 877 ■■■■□□□□□□
in SSCP
Hi Gang,
I'm now studying for CISM but ive posted this question here as the CISSP forum is more active and this question also relates to CISSP BCP/DR domain.
Which of the following terms and conditions represent a significant deficiency if included in a commercial hot site contract?
A. A hot site facility will be shared in multiple disaster declarations
B. All equipment is provided “at time of disaster, not on floor”
C. The facility is subject to a “first-come, first-served” policy
D. Equipment may be substituted with equivalent models
I chose (A) as my thinking was capacity can be an issue if the site is shared in multiple disaster. Initially, i was tempted to (C). Only to be shocked that the correct answer is (B). while studying for CISSP i read many times that if a site doesn't have the equipment ready then its not really a HOT site. Can an expert correct my thinking if i'm wrong?
ISACA's Explanation of the "correct" answer: Equipment provided “at time of disaster (ATOD), not on floor” means that the equipment is not available but will be acquired by the commercial hot site provider on a best effort basis. This leaves the customer at the mercy of the marketplace. If equipment is not immediately available, the recovery will be delayed. Many commercial providers do require sharing facilities in cases where there are multiple simultaneous declarations, and that priority may be established on a first-come, first-served basis. It is also common for the provider to substitute equivalent or better equipment, as they are frequently upgrading and changing equipment.
I'm now studying for CISM but ive posted this question here as the CISSP forum is more active and this question also relates to CISSP BCP/DR domain.
Which of the following terms and conditions represent a significant deficiency if included in a commercial hot site contract?
A. A hot site facility will be shared in multiple disaster declarations
B. All equipment is provided “at time of disaster, not on floor”
C. The facility is subject to a “first-come, first-served” policy
D. Equipment may be substituted with equivalent models
I chose (A) as my thinking was capacity can be an issue if the site is shared in multiple disaster. Initially, i was tempted to (C). Only to be shocked that the correct answer is (B). while studying for CISSP i read many times that if a site doesn't have the equipment ready then its not really a HOT site. Can an expert correct my thinking if i'm wrong?
ISACA's Explanation of the "correct" answer: Equipment provided “at time of disaster (ATOD), not on floor” means that the equipment is not available but will be acquired by the commercial hot site provider on a best effort basis. This leaves the customer at the mercy of the marketplace. If equipment is not immediately available, the recovery will be delayed. Many commercial providers do require sharing facilities in cases where there are multiple simultaneous declarations, and that priority may be established on a first-come, first-served basis. It is also common for the provider to substitute equivalent or better equipment, as they are frequently upgrading and changing equipment.
Comments
By definition, a hot site is supposed to have the equipment on the floor and ready to go with the exception of the latest data.
B hurts the idea the most because it is simply not ready to go in a time of need, the biggest factor for a hot site.
You hit it right there. The hot site not being ready to go is a deficiency.