Business continuity is the capability of an organization to continue the delivery of products or services at pre-defined acceptable levels following a disruptive incident. Disruptions can come from natural events such as fire and inclement weather, from mechanical or coding failures such as server failures and programming bugs or from malware/hacking events such as cryptoviruses. Business continuity takes into consideration the level of acceptable down time (RTO) and data loss against the costs associated with preventing data/production losses.
At its most basic level, organizations should implement basic disaster recovery (recovery capabilities into their systems). This includes redundant storage to mitigate disk failures as well as a good data backup strategy to secure data.
Recovery time objectives (RTO’s) can vary by organization and organizations that require lower RTO’s should implement server mirroring and/or clustering, move their hardware to data centers or migrate to a cloud computing platform that meets the organization’s redundancy/continuity needs.