5.4 Risk Analysis

Question 1

RTO

Answer 1

recovery time objective
time to get up and running after a disaster

Question 2

RPO

Answer 2

recovery point objective

the maximum amount of data that can be lost after a disaster

Question 3

MTTR

Answer 3

mean time to repair
time required to fix the issue

Question 4

MTBF

Answer 4

mean time between failures

the average time between repairable failures of a technology product

Question 5

DRP

Answer 5

disaster recovery plan

Question 6

Quantitative Risk Assessment

Answer 6

Uses objective, measurable data to provide insights into risk management.

Question 7

Qualitative Risk Assessment

Answer 7

Uses knowledge and experience to determine risk probability. This includes subjectivity, perception, and judgment.

Question 8

SLE

Answer 8

Single Loss Expectancy

the expected monetary loss that occurs when one asset is at risk.

Question 9

ALE

Answer 9

Annualized Loss Expectancy

a risk management formula that estimates the expected financial loss per year due to a threat or risk

Question 10

ARO

Answer 10

Annualized Rate of Occurrence

the expected frequency of a threat or risk occurring within a year.