SecaaS Implementation Guidance

Category 9 // Business Continuity / Disaster Recovery September 2012

CLOUD SECURITY ALLIANCE SecaaS Implementation Guidance, Category 9: Business Continuity/Disaster Recovery

© 2012 Cloud Security Alliance All rights reserved. You may download, store, display on your computer, view, print, and link to the Cloud Security Alliance Security as a Service Implementation Guidance at http://www.cloudsecurityalliance.org, subject to the following: (a) the Guidance may be used solely for your personal, informational, non-commercial use; (b) the Guidance may not be modified or altered in any way; (c) the Guidance may not be redistributed; and (d) the trademark, copyright or other notices may not be removed. You may quote portions of the Guidance as permitted by the Fair Use provisions of the United States Copyright Act, provided that you attribute the portions to the Cloud Security Alliance Security as a Service Implementation Guidance Version 1.0 (2012).

© Copyright 2012, Cloud Security Alliance. All rights reserved.

2

CLOUD SECURITY ALLIANCE SecaaS Implementation Guidance, Category 9: Business Continuity/Disaster Recovery

Contents Foreword ....................................................................................................................................................................5 Letter from the Co-Chairs...........................................................................................................................................6 Acknowledgments ......................................................................................................................................................7 1.0 Introduction..........................................................................................................................................................8 1.1 Intended Audience ...........................................................................................................................................8 1.2 Scope ................................................................................................................................................................9 2.0 Requirements Addressed .................................................................................................................................. 10 2.1 High-Level Benefits of Cloud-Based BC/DR vs. Traditional Approaches ....................................................... 10 3.0 Implementation Considerations and Concerns................................................................................................. 12 3.1 Considerations............................................................................................................................................... 12 3.1.1 BC/DR Service Level Agreements (SLAs)................................................................................................. 12 3.1.2 Services Already Hosted in the Cloud..................................................................................................... 12 3.1.3 In-house “Traditional” Non-Cloud Services............................................................................................ 13 3.2 Concerns........................................................................................................................................................ 13 4.0 Implementation................................................................................................................................................. 15 4.1 Architecture Overview................................................................................................................................... 15 4.1.1 Services Already Hosted in the Cloud..................................................................................................... 15 4.1.2 In-House/Traditional Non-Cloud Services ...........................................................................................