Which of the following is MOST important when deciding whether to build an alternate facility or
subscribe to a third-party hot site?

A.
Cost to build a redundant processing facility and invocation

B.
Daily cost of losing critical systems and recovery time objectives (RTOs)

C.
Infrastructure complexity and system sensitivity

D.
Criticality results from the business impact analysis (BIA)

Explanation:

The complexity and business sensitivity of the processing infrastructure and operations largely
determines the viability of such an option; the concern is whether the recovery site meets the
operational and security needs of the organization. The cost to build a redundant facility is not
relevant since only a fraction of the total processing capacity is considered critical at the time of
the disaster and recurring contract costs would accrue over time. Invocation costs are not a factor
because they will be the same regardless. The incremental daily cost of losing different systems
and the recovery time objectives (RTOs) do not distinguish whether a commercial facility is
chosen. Resulting criticality from the business impact analysis (BIA) will determine the scope and
timeline of the recovery efforts, regardless of the recovery location.