Application
This unit describes the skills and knowledge required to develop a cloud disaster recovery plan. It involves identifying current and potential risk factors, including impact, likelihood, duration and cost of disruption in the cloud computing environment.
The unit applies to Chief Information Officers (CIOs), cloud architects, cloud network engineers, cloud consultants and those involved in cloud disaster recovery plans for a business.
No licensing, legislative or certification requirements apply to this unit at the time of publication.
Elements and Performance Criteria
1. Prepare to develop plan | 1.1 Identify disaster recovery plan requirements according to business needs and requirements 1.2 Determine existing organisational recovery plans 1.3 Identify vendor disaster recovery plan and service level agreements |
2. Conduct impact analysis | 2.1 Determine time and recovery point objectives according to business needs 2.2 Assess potential risks plan exclusions according to business requirements 2.3 Estimate amount of data and security level of data managed 2.4 Evaluate severity of impact and disruption of risk events 2.5 Document outcomes of impact analysis according to organisational policies and procedures |
3. Develop disaster recovery solutions | 3.1 Develop range of disaster recovery solutions according to business requirements 3.2 Determine vendor protections and prioritise risks 3.3 Assess external insurance protection levels and their suitability requirements 3.4 Identify other disaster recovery solution components |
4. Finalise disaster recovery plan | 4.1 Align disaster recovery risk potential according to business requirements 4.2 Outline steps of disaster recovery plan including timelines, key features, service providers and any other aspect 4.3 Document disaster recovery plan according to business needs and requirements |
5. Test cloud disaster recovery plan | 5.1 Conduct verbal walkthrough of cloud disaster recovery plan with required personnel 5.2 Seek and respond to feedback as required 5.3 Lodge cloud disaster recovery plan according to organisation and legislative protocol 5.4 Obtain final sign off from required personnel |
Evidence of Performance
The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, and to:
develop and evaluate a cloud disaster recovery plan that includes at least three major risk events.
In the course of the above, the candidate must:
determine likelihood and impact of risk event to assist in the development of one cloud disaster recovery plan
document disaster recovery plan and ways the plan reaches Recovery Time Objective (RTO) and Recovery Point Objective (RPO) targets.
Evidence of Knowledge
The candidate must demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit. This includes knowledge of:
risk environments in cloud/ICT environment
data analysis methodologies to determine risk environment
disaster recovery techniques applicable to cloud environments
ISO270001, ISO27002 and ISO 27031 standards
Recovery Time Objective (RTO) and Recovery Point Objective (RPO) standards and techniques
techniques and methods to monitor and create alerts in cloud environments.
Assessment Conditions
Skills in this unit must be demonstrated in a workplace or simulated environment where the conditions are typical of those in a working environment in this industry.
This includes access to:
data required to assess current and future risk events in specified environment
legislation applicable to risk type
reporting standards for documenting and communicating disaster recovery plan.
Assessors of this unit must satisfy the requirements for assessors in applicable vocational education and training legislation, frameworks and/or standards.
Foundation Skills
Reading | Interprets complex technical and operational documentation to determine and confirm job requirements |
Oral communication | Uses listening and questioning techniques to articulate complex concepts and requirements using industry language in cloud computing and risk environment |
Self-management | Demonstrates a sophisticated knowledge of principles, concepts, language and practices associated with the cloud and digital world and uses them to troubleshoot and understand the uses and potential of new technology |
Planning and organising | Uses a broad range of strategies to evaluate and resolve risk events in cloud and technical environment and demonstrates the knowledge that design choices will influence the security of virtually stored information |
Problem solving | Uses a mix of intuitive and formal processes to identify key information and issues, evaluate alternative strategies, anticipate consequences and consider implementation issues and contingencies Uses knowledge of context to address common threats in the cloud and technical environment |
Sectors
Cloud computing