Summary

At the beginning of this chapter, we learned about the importance of enterprise resiliency and its relationship with BC and DR. In the following sections, we learned about the concepts of BIA and how it relates to the recovery objectives of the RPO, RTO, and MTD. In the final section, we learned about the difference between data classification and labeling, data life cycle management, and how data governance differentiates from data management. With the prevalence of cloud technologies, a risk manager should be aware of these concepts and plan with the business owners accordingly to reduce the risk of any outages or security issues that may impact the availability of data or systems.

In the next chapter, we will learn about the system development life cycle and emerging technologies.