IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
Data availability requirements of the IT applications
The availability requirements for the data stated in the first step must now be
stipulated. A proven standard here is the maximum permissible downtime
(MPD). It specifies the time period during which the specialised task can be
performed without the availability of these data and without the need for
resorting to backup copies. Consideration must also be given as to whether
paper usage would allow short- term continuation of operations without IT
support.
Sample result 2: Availability requirements
- Software: MPD 1 day
- System data:
On the network server: MPD 1 day
On PC's: MPD 1 week (a PC can be dispensed with for up to one
week)
- Application data:
Files of written correspondence: MPD 1 week
Customer database: MPD 1 day
- Protocol data: MPD 3 days
Effort required for data reconstruction without data backup
To develop an economically efficient data backup policy, it is necessary to
know whether, and how easily, destroyed databases could be reconstructed if
backup data were not available. The sources from which the data could be
reconstructed should be examined. Examples include documented files,
printouts, microfiche, interviews and surveys.
The financial or operational effort required by a data registration crew should
be calculated in terms of working days (WD).
Sample result 3: Reconstruction requirement
Software:
Retrieval through purchase and subsequent installation within 24
hours (provided original software is no longer available)
System data:
On the network server: manual reconstruction: 1 WD
On PC's: 1 WD
Application data:
Files of written correspondence: Selective registration on paper: 10
WD; (complete registration of written correspondence is not
necessary)
Customer database: Complete registration on paper: 10 WD
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000