1.8 Identify, Analyze, and Prioritze Business Continuity (BC) Requirements. Flashcards
TRUE or FALSE:
A Disaster is classified as something that interrupts normal business operations?
True, a disaster can include natural disasters, active external threats, and active internal threats.
What goal does Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) share?
Their goal is to mitigate the effects of a disaster and preserve as much value as possible. More specifically, They aim of continuity of business and its critical essential functions, processes, services, and so on.
What creates the structure necessary for Business Continuity Planning (BCP) and Disaster Response Planning (DRP)?
Business Continuity Management (BCM)
What is the primary concern addressed with Business Continuity Planning’s (BCP)?
Primarily, BCP is concerned with business components that are truly critical and essential. This is primarily an organizations processes in the event of an unforeseen event.
What is the primary concern addressed with Disaster Recovery Planning (DRP)?
The primary concern is with technological components that support critical and essential business functions. This includes systems used to support critical business functions.
Are all business functions critical and/or essential when creating a Business Continuity Planning (BCP) process?
No. BCP responses are strategic and focuses on the survival of the business and a capability for an effective response.
What is the purpose of Business Continuity Management?
To define business functions and processes that provide the structure, policies, procedures, and systems to enable the creation and maintenance of Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP).
Are all technologies critical when enacting a Disaster Recovery Plan?
No. DRP is tactical and focuses on the recovery of vital technology infrastructure and systems.
Name the 7 steps in the Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) process.
- Develop Contingency Planning Policy | 2. Conduct Business Impact Analysis (BIA) | 3. Identify Controls | 4. Create Contingency Strategies | 5. Develop Contingency Plan | 6. Ensure Testing, Training, and Exercises | 7. Plan Maintenance
What is the purpose of developing a contingency planning policy?
To provide authority and guidance necessary to develop an effective contingency plan.
What should a Business Impact Assessment (BIA) be performed during BCP/DRP plan creation?
To identify which information systems and components are critical to supporting the organization’s mission/business processes during a disaster.
What is the ultimate goal of identifying controls during the BCP and DRP planning process?
It highlights measures that should be taken to reduce the effects of system disruptions and can increase system availability and reduce contingency life cycle costs.
Why should a thurough contingency strategy be implemented in BCP/DRP plans?
A thurough contingency strategy ensures that systems may be recovered quickly and effectively following a disruption.
What steps should be conducted before creating a Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP)?
- Develope a Contingency Planning Policy | 2. Conduct a Business Impact Assessment | 3. Identify Controls | 4. Create Contingency Strategies
How does each stage of “Testing, Training, and Exercising” a BCP and DRP plan support the goal of the respective plan?
- Testing Validates Recovery Capabilities | 2. Training Prepares Recovery Personnel for Plan Activation | 3. Exercising Identifies Gaps in the Plan
