ISO 27001 8.14 Redundancy of Information Processing Facilities

Requirement

"Information processing facilities shall be implemented with redundancy sufficient to meet availability requirements."[1]

Explanation

Establish Maximum Tolerable Downtime (MTD) Recovery Time Objective (RTO) and Recovery Point Objective (RPO) for information system components. Where feasible ensure that there is redundancy for critical information system components.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo