{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"business_continuity","domain":["Business Continuity & Disaster Recovery","Logging, Monitoring & Detection"],"inherent_rating":"high","taxonomy":["coso-erm-risk","basel-operational-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Abcdr-it-resilience-outage","description":"Critical technology infrastructure or applications experience unplanned outages, data loss, or prolonged recovery times — including failure of DR systems to activate — disrupting operations and harming stakeholders.","details":{"category":"business_continuity","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"bcdr-it-resilience-outage","taxonomies":["coso-erm-risk","basel-operational-risk"],"treatment":"mitigate"},"id":"risk:bcdr-it-resilience-outage","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Abcdr-it-resilience-outage","sourceIds":["cobit-2019","dora","iso-27001","nist-800-53","nist-csf-2","soc1","soc2","sox"],"sourceUrl":null,"title":"IT resilience failure — unplanned outage, data loss, slow recovery","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2a4cb1cf4b3bc12321bc556ef2ef799ae4d99a2cacb64894f72cffffad144d4b","properties":{"rationale":"testing failover/restore and remediating gaps reduces the likelihood that DR fails to activate in a real outage","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-10-602160e4.json","sourceId":"uc:UC-BCDR-10","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3318b16b89eec6789f79f9ee470164993ba563e5a4f4d49954821339b71d95e0","properties":{"rationale":"safe-mode and alternate mechanisms keep critical systems operating when primary capabilities fail","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-11-c3dddae2.json","sourceId":"uc:UC-BCDR-11","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:408648c8a198e6da66dc7bf2ab6d1876d15ee33eff5c257998064f1f5506fb31","properties":{"rationale":"formal recovery-complete criteria prevent premature return to service that would re-trigger disruption","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-08-6e625399.json","sourceId":"uc:UC-BCDR-08","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:522207fd6d9b165c0039e3025b319ff4c0759411ea7c5ea4bfad8a4296747421","properties":{"rationale":"scheduled protected backups with tested restoration confirm recoverability within objectives, reducing outage/data-loss/slow-recovery","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-17-c9ecd00d.json","sourceId":"uc:UC-ACCESS-17","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5cf49ff3f7e015288403566f84e98c82474a60673fae3931772be04b75b4d8ec","properties":{"rationale":"incident response restores service within SLAs and root-cause problem resolution reduces outage duration and recurrence","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-06-c505e5bd.json","sourceId":"uc:UC-BCDR-06","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7c3a185818b8aa491bee8c358ee5433277ecf04932f4c54f7a61ebd250cc7cf1","properties":{"rationale":"Monitors performance/capacity against thresholds and projects/tunes resource use, directly reducing capacity-driven outages; incident tracking shortens recovery.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-18-8ffbd456.json","sourceId":"uc:UC-ACCESS-18","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:897f92ddfe4af773ce88113a116b2ae70486a867472808c6a8d3c03f5ca9e0d2","properties":{"rationale":"redundant/alternate capability that assumes operations within RTO directly reduces outage impact","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-04-5d004f42.json","sourceId":"uc:UC-BCDR-04","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:971e4534c3033febf99472ef870f6943be2deeeb4f4e8cfa3196ec930ee1f523","properties":{"rationale":"verified backups plus periodic recovery tests and availability monitoring directly reduce data loss and slow recovery","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-12-32fbbd73.json","sourceId":"uc:UC-ASSET-12","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e2a83ef8f6a0cd8b142d242869b325921d9f1e7e31f5b8d8f3e941aee7798a12","properties":{"rationale":"communicating recovery status through pre-defined channels reduces stakeholder harm during disruption","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-09-c9025680.json","sourceId":"uc:UC-BCDR-09","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e542ddd329f1a27255569b68e252145dd658426965e13c293f60bc0edd1d7847","properties":{"rationale":"executing recovery procedures to restore systems and data within RTO is the direct recovery mechanism","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-07-e5d74596.json","sourceId":"uc:UC-BCDR-07","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e93c6cea20e4d7ceca0f977c1c55dfc897a02082c4d7cbdd68a7d22ec5ece924","properties":{"rationale":"adding capacity before thresholds are breached prevents resource-exhaustion outages","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-05-f73361f2.json","sourceId":"uc:UC-BCDR-05","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f0f0edc34281f1815c3603685d9c3e3ca15af218b0abca73539e3efb245f344a","properties":{"rationale":"RPO-aligned backups with verified test restores directly limit data loss and recovery time","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-03-d30f4ccf.json","sourceId":"uc:UC-BCDR-03","targetDetailPath":"/data/v1/records/risk-bcdr-it-resilience-outage-18dfc108.json","targetId":"risk:bcdr-it-resilience-outage","type":"mitigates"}],"schemaVersion":1}