The FREE Cybersecurity Glossary by Thor Pedersen!

Disaster Recovery Plan: A documented, structured approach with instructions for responding to unplanned incidents such as natural disasters, power outages, cyberattacks, and other disruptive events. This plan outlines measures to minimize the effects of a disaster so an organization can continue to operate or quickly resume mission-critical functions. The disaster recovery plan typically covers data backup and recovery, maintenance of critical systems, chain of command, and testing and drills to ensure readiness. It is an essential part of an organization's business continuity planning.

Disaster Recovery Plan (DRP) desk checking: A validation process where the disaster recovery plan is reviewed in a non-disruptive environment to identify any issues, omissions, or areas of improvement. It includes going through the plan in detail to understand the procedures, responsibilities, and resources necessary for successful disaster recovery. The aim is to ensure that the plan is accurate, comprehensive, and effective before an actual disaster situation occurs.

Disaster tolerance: The ability of an organization to maintain its operations and continue to provide services in the face of a disaster or disruptive event. It often involves measures such as redundant systems, fail-over mechanisms, and geographically dispersed resources that can ensure continued operation even when some parts of the infrastructure are affected.

Disclosure: The action of making new or secret information known. In a legal context, disclosure can involve the release of evidence or information during the discovery phase of a trial. In the business and financial world, it refers to the act of providing important information to the public, such as a company revealing financial statements or a data breach being reported to customers. Disclosure is a critical concept in regulatory compliance, where laws often require the release of information to protect the public interest and maintain transparency.

Disclosure Controls and Procedures: Policies and procedures implemented by an organization to ensure that important information, particularly financial information, is accurately and timely reported to those who need to know this information. These controls are established to ensure that data is appropriately processed and disclosed to maintain its integrity and confidentiality and to meet compliance and governance requirements. One example could be ensuring compliance with regulations like Sarbanes-Oxley (SOX) for financial reporting.