A county CIO must justify spending on a warm alternate site for tax and permitting systems. Which governance artifact most clearly sets the recovery expectations that the technical disaster-recovery design must meet?
Select an answer to reveal the explanation.
Short Explanation
Picture the policy as the city council's marching orders for continuity—before anyone buys racks or cloud capacity. The DR policy says how fast and how complete recovery must be; the architecture then has to live up to those rules, not invent them.
Full Explanation
Disaster recovery policy is a governance control that states leadership expectations for resilience, including recovery time and recovery point objectives, approved site strategies, and testing cadence. Technical DR architecture—alternate sites, replication, and failover tooling—implements those requirements. Informal runbooks or marketing claims do not authorize investment or bind design choices the way an approved DR policy does.