Availability is a security principle that ensures that information and systems are accessible and usable by authorized parties when needed. Availability is one of the three components of the CIA triad, along with confidentiality and integrity. A security architect is assessing the availability of an application by reviewing its Recovery Point Objective (RPO), which is the maximum amount of data loss that is acceptable in the event of a disaster or disruption. The RPO determines how frequently the data should be backed up or replicated. The current design of having all of the application infrastructure located within one co-location data center poses a risk to the availability of the application, as it creates a single point of failure. If the data center suffers a power outage, a fire, a flood, or any other disaster, the application may not be able to meet its RPO of 15 minutes.
The security architect may recommend adding another data center in a different location to provide redundancy and resilience for the application. The other options are not security principles, but rather related concepts or processes. Disaster recovery (DR) is the process of restoring the normal operations of an organization after a disaster or disruption. DR involves the implementation of a DR plan, which defines the roles, responsibilities, procedures, and resources for recovering the critical functions and systems of the organization. Redundancy is a technique that provides duplication or backup of information and systems to ensure availability and reliability. Redundancy can be implemented at different levels, such as data, hardware, software, network, or site. Business continuity (BC) is the process of ensuring the continuity of the essential functions and operations of an organization during and after a disaster or disruption. BC involves the implementation of a BC plan, which defines the scope, objectives, strategies, and actions for maintaining the business processes and services of the organization. References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 1: Security and Risk Management, pp. 17-18, 23-24; CISSP Practice Exam | Boson, Question
9