Data availability is a measurement of the requirement for the data to be availability for authorized users. The amount of damage that can be done when the data is not available for some period of time will be used to determine the level of need for data availability. Try to determine lengths of time before categories of damage would be done such as how long before damage is low or medium.
5. Data Availability - Loss of Access
Evaluate maximum potential loss based on damage caused by a lack of ability to access the data. Consider complete loss of availability, loss of availability for one month, one week, and one day. The project manager must determine the data availability requirement unless the data owner is also using the same method to access the data.
- None - Loss of the ability to use this information will cause no damage.
- Low - Loss of the ability to use this information could cause minor embarrassment and/or damage and only require administrative action for correction.
- Medium - Loss of the ability to use this information could cause significant embarrassment and/or damage in money, property, or personnel to the organization or require legal action.
- High - Affecting the organization seriously - Loss of the ability to use this information could cause grave damage, loss of life, or major monetary damage.
Business Continuity and Disaster Recovery
Business continuity and disaster recovery planning should be considered when data availability requirements are planned for. The business continuity plan will also depend upon a combination of the data availability needs and disaster recovery plan. The disaster recovery plan will outline how long it will take for services to be restored because it is the plan for the restoration of services after a disaster. The business continuity plan must provide for the continuation of the business process until the service is restored. Therefore the business continuity plan must allow for integral members of the business process to have enough available to them in the event of a disaster to continue to operate. They may need paper copies or data from the main system available on mobile devices.