网络安全 — 信息和通信技术业务连续性准备

[中文适用范围]： 本文件描述了信息和通信技术 (ICT) 业务连续性准备 (IRBC) 的概念和原则。它提供了一个方法和流程框架，用于识别和明确改进组织 ICT 准备度以确保业务连续性的方面。本文件服务于以下 ICT 业务连续性目标：—— 最低业务连续性目标 (MBCO)；—— 恢复点目标 (RPO)；—— 恢复时间目标 (RTO)，作为 ICT 业务连续性规划的一部分。本文件适用于所有类型和规模的组织。本文件描述了 ICT 部门如何规划和准备，以促进组织的弹性目标。 [外文原描述]： This document describes the concepts and principles of information and communication technology (ICT) readiness for business continuity (IRBC). It provides a framework of methods and processes to identify and specify aspects for improving an organization's ICT readiness to ensure business continuity. This document serves the following business continuity objectives for ICT: — minimum business continuity objective (MBCO), — recovery point objective (RPO), — recovery time objective (RTO) as part of the ICT business continuity planning. This document is applicable to all types and sizes of organizations. This document describes how ICT departments plan and prepare to contribute to the resilience objectives of the organization.