A disaster recovery team may be assigned to implement and maintain operations at the recovery site, and a salvage team is assigned to restore the primary site to operational capacity. Make these allocations according to the needs of your organization and the types of disasters you face.
Note: Recovery and restoration are separate concepts. In this context, recovery involves bringing business operations and processes back to a working state. Restoration involves bringing a business facility and environment back to a workable state.
Source: ISC2 CISSP Official Study Guide
The restoration team should be responsible for getting the alternate site into a working and functioning environment, and the salvage team should be responsible for starting the recovery of the original site.
Source: CISSP All-in-One Exam Guide
Recovery Team is a group of individuals with defined roles and responsibilities and is responsible for maintaining the recovery procedures and coordinating the recovery and resumption of business functions, processes or systems.
The Restoration Team has the responsibility to return the damaged primary site to its normal condition.
Note: The team members are usually separate from the recovery team as they are not involved with the same issues the typical recovery team. The team has the mandate to safely clean, repair, salvage, and determine the viability of the primary site once the disaster has ended.
The Salvage Team is to perform an assessment to determine the appropriate actions to be taken on the impacted assets.
Note: The team members are usually separate from the recovery team as they are not involved with the same issues the typical recovery team.
In some cases, an organization may have a separate team whose sole responsibility is to return the primary site back to operational status. This team usually is referred to as the Reconstitution Team. While operations is ongoing at the alternate site, the Reconstitution Team works at the primary site cleaning up, repairing equipment, and preparing everything to return to normal operations so that a clean cutover back to the original site can be made.
Recovery is executing information system contingency plan activities to restore organizational missions/business functions. Reconstitution takes place following recovery and includes activities for returning organizational information systems to fully operational states.
Recovery and reconstitution operations reflect mission and business priorities, recovery point/time and reconstitution objectives, and established organizational metrics consistent with contingency plan requirements.
Source: NIST SP 800-53 R4