An overall goal, consistent with the policy that an organization sets for itself.

Any place physically located a significant distance away from the primary site, where duplicated and vital records (hard copy or electronic and/or equipment) may be stored for use during recovery.

A site at a safe distance from the primary site where critical data (computerised or paper) and/ or equipment is stored from where it can be recovered and used at the time of a disruptive incident if original data, material or equipment is lost or unavailable.

Arrangements for IT and non-IT departments to provide a specific product and/or service to another internal department.

The ability to detect, prevent, respond to, learn, and/or recover from disruptions in operations that could impact the delivery of critical business services or products.

The risk of loss resulting from inadequate or failed procedures and controls. This includes loss from events related to technology and infrastructure, failure, business interruptions, staff-related problems, and from external events such as regulatory changes.

Process, practice or other actions that assure management outcomes.

Scheme specifying the approach, management elements and resources to be applied to the management of the organization.

The actions required to rapidly and gracefully suspend a business function and/or system during a disruption.

A person or group of people that has its own functions with responsibilities, authorities and relationships to achieve its objectives.