Accreditation Definition(s): Formal declaration by a Designated Accrediting Authority (DAA) or Principal Accrediting Authority (PAA) that an information system is approved to operate at an acceptable level of risk, based
Disaster Recovery
Acceptable Risk Definition(s): The level of residual risk that has been determined to be a reasonable level of potential loss/disruption for a specific IT System. Source: NIST 800-16 A level
Maximum Tolerable Downtime (MTD) Definition(s): The amount of time mission/business process can be disrupted without causing significant harm to the organization’s mission. Source: NIST SP 800-34 Similar and Related to
Disaster Recovery Plan (DRP) Definition(s): The management approved document that defines the resources, actions, tasks and data required to manage the technology recovery effort. Source: BCI/DRJ A written plan for
Recovery Time Objective (RTO) Definition(s): Time goal for the restoration and recovery of functions or resources based on the acceptable downtime and acceptable level of performance in case of a