A cold site is a backup facility with physical infrastructure (building, power, cooling, network connections) but without pre-configured systems, equipment, or data, requiring days to fully configure and activate for disaster recovery.
Cold sites represent the most cost-effective disaster recovery approach for organizations that can tolerate extended recovery times. A cold site might take 3 to 7 days to provision equipment, install software, restore data from backups, and configure systems for operation. This is far longer than hot sites that can assume operations within minutes or warm sites that require hours, but for less critical systems, the extended recovery time is acceptable if it means dramatically lower costs.
Why Cold Sites Matter for Enterprise Operations
Cold sites allow organizations to maintain disaster recovery capability for non-critical systems at minimal cost. An organization cannot afford hot sites for all systems, but can afford cold sites for many systems where faster recovery would be nice but is not critical. A manufacturer might maintain hot sites for systems that prevent revenue (manufacturing control systems, order entry) but maintain cold sites for internal systems (human resources, facilities management) that do not directly impact customers.
Cold sites also provide geographic dispersion that protects against regional disasters. A cold site in a different geographic region provides protection against earthquakes, hurricanes, or regional utility failures that affect the primary data center. Even though the cold site cannot be activated immediately, having a facility available elsewhere ensures that recovery infrastructure exists if primary facilities are destroyed.
How Cold Sites Work
A cold site is typically a physical facility with redundant power, cooling, and network connectivity but without servers, storage systems, or application software. The facility might have shared network infrastructure and security systems, but computing infrastructure is minimal. When disaster occurs and recovery is needed, the organization provisions server equipment, installs operating systems and applications, and restores data from off-site backups. This process typically takes 3 to 7 days, depending on the volume of data and the number of systems that must be recovered.
Data recovery from backups is the most time-consuming phase of cold site activation. The organization must retrieve backup copies from secure off-site storage, verify backup integrity, and restore data from backups to newly provisioned systems. For organizations with terabytes or petabytes of data, backup retrieval and restoration can take days. Some organizations expedite this process by shipping backup copies via courier to the cold site rather than transferring over network connections.
Many organizations share cold site facilities among multiple organizations to reduce costs. A cold site facility operator might maintain space for 10 or 20 organizations, each of which can activate cold site recovery if needed. This shared approach dramatically reduces per-organization costs but requires careful coordination to ensure that multiple organizations do not activate cold site recovery simultaneously, exceeding facility capacity.
Key Considerations for Cold Site Strategy
Organizations should inventory equipment and software that would be needed to activate cold site recovery. Detailed documentation of server configurations, software versions, database schemas, and application dependencies enables rapid provisioning when cold site recovery is needed. Without this documentation, disaster recovery becomes chaotic and error-prone.
Organizations should also maintain current backups in off-site locations separate from the primary data center. Backups maintained at the primary data center provide no protection against data center destruction; backups must be physically transported or replicated to geographically distributed locations. Many organizations maintain multiple backup copies in different geographic regions, reducing risk that any single regional disaster makes backups inaccessible.
Cold site recovery requires careful planning of how to operate the organization while recovery is underway. Customer communication about extended outage is critical; customers need to understand the situation and have alternatives for their needs. Some organizations implement manual workarounds for critical business processes while systems are being recovered. A manufacturing company might shift orders to competitors while waiting for primary systems to be recovered; an insurance company might process claims manually using paper forms.
Related Concepts
Cold sites are one of three primary disaster recovery facility approaches, alongside hot sites and warm sites. Cold sites are often maintained as part of broader disaster recovery plans that specify when different facility types should be activated. Business continuity planning should account for the extended recovery times required for cold sites. Disaster recovery as a service (DRaaS) is a modern alternative to owning or leasing cold site facilities.