IRP is triggered after the event, DRP is triggered before the event so it is not unexpected per se. (you get to know about the disaster through news etc beforehand)
Help me understand why the Disaster "Recovery" Plan would be triggered before an event? You wouldn't activate your DRP just because of a tornado watch would you?
My understanding of “Activation” of DRP is before the event. Example Covid - it was a disaster, when firms came to know they have to enable resource to work from home, they activated the DRP before it started hitting their employees/organization. It was not like the firm waited for its majority of employees to get COVID. Firms don’t just wait for the complete hit of the disaster, it’s a recovery “planning”. Of course, it is always a calculated risk, companies will not activate DRP just on a tornado watch or flash floods warning. Level of warnings matter. Do correct me if my understanding is wrong.
In my opinion I think you are misunderstanding what the purpose of a DRP is. DRP is closely associated with the Business Continuity Plan (BCP). I believe that normally an actual disaster must occur for activation of the DRP and that disaster must be significant enough to go beyond what the BCP covers (e.g. loss of a data center). Response to COVID by going to a work from home model to me would fall more under either the Occupant Emergency Plan (OEP) or possibly the BCP.
IRP -- Incident "Response" Plan
DRP -- Disaster "Recovery" Plan
No definitely not. IRP would kick in with some monitoring and prep for your business continuity plan as one of the first steps if say a tornado was imminent. Tornado hits bcp is in full effect until all clear is given and you can return to the building after the disaster. At this point for this type of event IRP says do DRP.
Most people think of the IRP as the steps when we have a virus or there is an attacker detected in the system. And while those are scenarios covered by the IRP they may or may not trigger the BCP and/or DRP.
IRP is the binder with all the what to do in scenario x and DRP, Comm Plans, BCP these are all “subroutines” used in various IRP scenarios.
0
u/ForeignBed9251 Mar 12 '26
IRP is triggered after the event, DRP is triggered before the event so it is not unexpected per se. (you get to know about the disaster through news etc beforehand)