I have been provided the cost impact analysis of our company receiving some disasterous event scenario. I am to compare this to the cost if instituting a DR plan, thus comparing the cost of being "out of business" to the cost of the plan with respect to how quickly we cna be back up and computing again. Of course, the cost goes up as the response time goes down. There are non-recurring costs entailed with establishing this, as well as recurring costs (i.e. co-location, connectivity, DR hardware maintenance, patching, monitoring, etc.).
I do IT for a CPA firm, and I am wondering if there are any guidelines for this industry (or maybe all industries) as to what percentage of the cost impact should be spent on DR.
I don't even know if there is such a thing. In the end, I know it will be a case of . . "To be back up within 48 hours will cost $x, up in 24 will cost $y, . . " and so on. The company Share-Holders will then respond with what they're willing to spend (and thus tolerate in down time).
But, I am hoping to indicate to them some sort of guideline/standard of how much companies typically spend each year on DR as a percentage of the cost of being down.
Is there such a thing?