1 Scope
This standard specifies the management specification for important information system of civil aviation disaster backup and recovery.
This standard is applicable to the implementation of important information system of civil aviation disaster backup and recovery.
2 Terms and definitions
For the purpose of this standard, the following terms and definitions apply.
2.1
important information system
information system that will cause great damage to national or industrial security, social order and public interests or bring serious economic losses if it is damaged
2.2
disaster
events that cause damage to some or all of the computer software, hardware equipment, auxiliary equipment, data, documents or computer room environment of important information systems to the extent that it seriously affects the normal operation of the business
2.3
disaster recovery
process that the organizational functions supported by important information systems recovers from the standstill state caused by disasters to an acceptable running state
2.4
disaster backup
process to ensure the smooth implementation of disaster recovery by means of technology, management and related resources to effectively back up existing key information technology services
2.5
disaster backup class
multiple backup classes which divided according to the scope of disaster backup and system backup methods in order to ensure the smooth implementation of disaster backup
2.6
disaster backup center
backup center that replaces the backup processing center operated by the original data processing center in case of disaster
2.7
disaster recovery plan
plan that describes the plan for the business recovery process of important information systems after the disaster, including the required resources, actions to be taken, tasks to be completed and required data so as to ensure the continuous implementation of key information technology services
2.8
recovery time objective
time requirement from disaster to recovery of critical business functions
2.9
recovery point objective
requirement for the time point to which the system and data must be recovered upon the occurrence of disaster
3 Organizations and responsibilities
3.1 Organizations
3.1.1 All civil aviation units shall set up a leading group for disaster backup and recovery of important information system (hereinafter referred to as leading group), an expert group for disaster backup and recovery of important information system (hereinafter referred to as expert group), a construction group for disaster backup and recovery of important information system (hereinafter referred to as construction group), an operation and maintenance group for disaster backup and recovery of important information system (hereinafter referred to as operation and maintenance group) and a group for disaster recovery of important information system (hereinafter referred to as recovery group) to in charge of their responsibilities for disaster backup and recovery of important information systems.
3.1.2 The members of the leading group shall be composed of senior management personnel, and the legal person of the unit shall be the first responsible person.
3.2 Responsibilities
3.2.1 The leading group is responsible for preparing and establishing disaster backup and recovery projects, setting up expert groups, construction groups, operation and maintenance groups and recovery groups, and approving disaster backup schemes and disaster recovery plans.
3.2.2 The expert group is responsible for reviewing the disaster backup schemes and disaster recovery plans, and providing guidance for the relevant personnel who implement disaster backup and recovery.
3.2.3 The construction group is responsible for the construction work in the process of disaster backup and recovery, including risk assessment and business impact analysis of important information systems, compiling and maintaining disaster backup schemes and disaster recovery plans as well as supervising and guiding the tests and drills of disaster recovery plans. It is also responsible for the implementation of disaster backup and the construction of disaster backup centers and the training of relevant personnel.
3.2.4 The operation and maintenance group is responsible for the routine operation and maintenance during the implementation of disaster backup and recovery.
3.2.5 The recovery group is responsible for regularly testing and practicing the disaster recovery plans and implementing disaster recovery in case of disaster.
Foreword i
1 Scope
2 Terms and definitions
3 Organizations and responsibilities
4 Risk assessment and business impact analysis
5 Disaster backup
6 Disaster recovery
7 Training
