ABSTRACT
The Disaster Recovery Journal formally identifies critical
functions as “business activities or information that could
not be interrupted or unavailable for several business days
without significantly jeopardizing operation of the
organization.”[1] Before an organization can begin to iden-
tify business functions that are essential to its survival, it
must understand the difference between criticality and sen-
sitivity. Criticality relates to the importance of the asset or
function in enabling the organization to operate and protect
itself, and sensitivity relates to the classification of the data
and systems existing within the organization.
