An overall goal, consistent with the policy that an organization sets for itself.

Any place physically located a significant distance away from the primary site, where duplicated and vital records (hard copy or electronic and/or equipment) may be stored for use during recovery.

A site at a safe distance from the primary site where critical data (computerised or paper) and/ or equipment is stored from where it can be recovered and used at the time of a disruptive incident if original data, material or equipment is lost or unavailable.

The demonstrated and repeated ability of key business units or processes to maintain or return to an acceptable operational status after exposure to disruptive or disastrous events.

The risk of loss resulting from inadequate or failed procedures and controls. This includes loss from events related to technology and infrastructure, failure, business interruptions, staff-related problems, and from external events such as regulatory changes.

Process, practice or other actions that assure management outcomes.

Scheme specifying the approach, management elements and resources to be applied to the management of the organization.

The actions required to rapidly and gracefully suspend a business function and/or system during a disruption.

A person or group of people that has its own functions with responsibilities, authorities and relationships to achieve its objectives.

The combined assumptions, beliefs, values and patterns of behaviour that are shared by members of an organization. The way in which an organization views itself, its place in its market and the environment in which it operates.