Section 14.131 Resilience and Recovery Testing Flashcards
Objective 3.4 Explain the importance of resilience and recovery in security architecture
Resilience Testing
Assess system’s ability to withstand and adapt to disruptive events
■ Ensures the system can recover from unforeseen incidents
■ Conducted through tabletop exercises, failover tests, simulations, and parallel
processing
■ Helps prepare for events like power loss, natural disasters, ransomware attacks, and data breaches
Recovery Testing
Evaluates the system’s capacity to restore normal operation after a disruptive event
■ Involves executing planned recovery actions
■ Performed through failover tests, simulations, and parallel processing
■ Ensures that planned recovery procedures work effectively in a real-world scenario
1 Tabletop Exercises
Scenario-based discussion among key stakeholders to assess and improve an organisations preparedness and response
■ No deployment of actual resources
■ Identifies gaps and seams in response plans
■ Promotes team-building among stakeholders
■ Low-cost and engaging for participants
Hypothetical disaster
2 Failover Tests
Controlled experiment for transitioning from primary to backup components which ensures uninterrupted functionality during disasters
■ Requires more resources and time
■ Validates the effectiveness of disaster recovery plans
■ Can identify and rectify issues in the failover process
3 Simulations
Computer-generated representation of a real-world scenario that allows for hands-on response actions in a virtual environment
■ Assesses incident responders and system administrators in real-time
■ Helps evaluate reactions and staff performance
■ Provides feedback for learning and improvement
4 Parallel Processing
Replicates data and system processes onto a secondary system and runs primary and secondary systems concurrently
■ Tests reliability and stability of the secondary setup
■ Ensures no disruption to day-to-day operations
■ Assesses the system’s ability to handle multiple failure scenarios simultaneously
Uses of Parallel Processing
Resilience Testing:
Tests the ability of the system to handle multiple failure scenarios
Recovery Testing:
Tests the efficiency of the system to recover from multiple points of failure