Availability, Resiliency, & Disaster Recovery Flashcards
S2 M3
the projected frequency of occurrences that occur in a given year (1 event / 15 years = 0.0667
ARO annualized rate of occurrence
the cost of a specific loss within a given year (single loss expectancy x annualized rate of occurrence)
ALE annualized loss expectancy
the damage in dollars expressed at a percentage of an asset’s value (50% of asset is at risk of damage = 50%
exposure factor
the cost of an individual loss
SLE single loss expectancy
location that is equipped with the necessary hardware & possibly software
hot site
the practice of establishing procedures & resources designed to help an organization resume IT operations/other business functions that rely on IT, after a disaster or system disruption
disaster recovery
a second location where hardware is already installed & available for use
hot site
a facility where hardware would have to be delivered & installed (remote possibility of diaster)
cold site
being able to perform business functions or meet business objectives
availability
integration of a system of availability controls, disaster recovery plans, business continuity plans, & crisis management plans into a central set of procedures to consider whether the business can continue operations or quickly return
business resiliency
an entity’s plans for restoring & continuing its IT function in the event of the destruction of program & data files & computer processing capability
disaster recovery
plans that contain contingency & mitigation procedures around all business processes (relocating facilities, human resource tasks, & managing relationships with customers & suppliers)
business continuity plans
helps identify & assess risks by identifying business units, departments, & processes that are essential to the survival of an entity & the organizational impact in the event of failure/disruption
business impact analysis
policies that address the potential crisis an organization could face & how to properly respond
crisis management plans
a facility already equipped with the necessary hardware that creates a replication of the primary data center
warm site
a user-authentication control that verifies a person’s identity & then grants the appropriate access for that user based on reestablished access criteria
logical access control
restrict access through the use of tangible or material mechanisms
physical access control
the secure transmission of info through channels or applications that convert readable text into unreadable text during transit
data encryption
Activities to prevent system disruption & loss of info
system availability
backup that copies all changes made since the last full backup (incremental files)
incremental
copies all changes made since the last full backup (cumulative files)
differential
an exact copy of the entire database
full backup
the maximum amount of time that it should take to restore operations after a system failure
RTO recovery time objective
the amount of time that a company agrees to have a client’s systems & environment operational
AST agreed service time
