Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cyber Security > BCP > Flashcards

BCP Flashcards

1
Q

to start business continuity processes

A

activation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Notification that a potential disaster situation exists or has occurred

A

alert

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

location to perform the business function

A

alternate site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

A copy of files and programs made to facilitate recovery if necessary.

A

Backup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

documentation of a predetermined set of instructions or procedures that describe how an organization’s mission/business processes will be sustained during and after a significant disruption.

A

Business Continuity Plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

ongoing process supported and funded by executive staff to ensure business continuity requirements are assessed, resources are allocated and, recovery and continuity strategies and procedures are completed and tested

A

business continuity program

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

group of decision makers, business owners, technology experts and continuity professionals, tasked with making strategic recovery and continuity planning decisions for the organization.

A

business continuity steering committee

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

detailed review of information system’s requirements, functions, and interdependencies used to characterize system contingency requirements and priorities in the event of a significant disruption.

A

Business Impact Analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Any event, whether anticipated or unanticipated which stops the normal course of business operations at an organization location.

A

business interruption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

contract to pay for disaster related expenses that may be incurred until operations are fully recovered.

A

business interruption insurance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

group of individuals responsible for maintaining the procedures and coordinating return of business functions and processes.

A

business recovery team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

chronological sequence of recovery activities, or critical path, that must be followed to resume an acceptable level of operations following a business interruption. may range from minutes to weeks, depending upon requirements and methodology.

A

business recovery timeline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

component which deals specifically with the relocation of a key function or department in the event of a disaster.

A

business unit recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

internal list of contact information used for the communication of incident information, designed in a distributed manor so that no one person is responsible for contacting everyone.

A

call tree

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

(desk check) a test that answers the questions: Does the organization have the documentation it needs? Can it be located?

A

checklist test

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

recovery alternative, a building only with sufficient power, and HVAC

A

cold site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

A predetermined set of instructions or procedures that describe how an organization’s mission essential functions will be sustained within 12 hours and for up to 30 days as a result of a disaster event before returning to normal operations.

A

Continuity of Operations Plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

person responsible for overall recovery of an organization or unit(s).

A

coordinator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A critical event, which may dramatically impact an organization’s profitability, reputation, or ability to operate.

A

crisis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Business activities or information that could not be interrupted or unavailable for several business days without significantly jeopardizing operation of the organization.

A

critical functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Systems whose incapacity or destruction would have a debilitating impact on the economic security of an organization

A

critical infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

documents that, if lost, would cause considerable inconvenience and/or require replacement or recreation at considerable expense.

A

critical records

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

processes determined by an organization to be necessary to meet its recovery and restoration objectives. these will determine the timeframes, technologies, media and offsite storage of the backups, and will ensure that recovery point and time objectives can be met.

A

data backup strategies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

confidential system, application, program and/or production files on media that can be stored both on and/or offsite.

A

data backups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

restoration of computer files from backup media to restore programs and production data to the state that existed at the time of the last safe backup.

A

data recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

partial or full duplication of data from source to one or more destinations.

A

database replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

formal announcement by pre-authorized personnel that a disaster or severe outage is predicted or has occurred and that triggers pre-arranged mitigating actions.

A

declaration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

test that answers the questions: Does the organization have the documentation and people it needs. Do they understand the documentation?

A

desk check test

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

an event which stops business from continuing.

A

disaster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

A written plan for recovering one or more information systems at an alternate facility in response to a major hardware or software failure or destruction of facilities.

A

Disaster Recovery Plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

A structured group of teams ready to take control of the recovery operations if a disaster should occur.

A

disaster recovery teams

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

? is the duplication of data on separate disks in real time to ensure its continuous availability, currency and accuracy.

A

disk mirroring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

An unplanned event that causes an information system to be inoperable for a length of time (e.g., minor or extended power outage, extended unavailable network, or equipment or facility damage or destruction).

A

Disruption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

a back up type, where the organization has excess capacity in another location.

A

distributed processing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

practice of activity typically targeted to a specific response. The purpose is to have the participants follow the designated response activities specified in their plans to become more proficient in executing the response activity.

A

Drills - Test

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

transmission of backup data to an offsite facility; it eliminates the need for tape shipment and therefore significantly shortens the time required to move the data offsite.

A

electronic vaulting

37
Q

sudden, unexpected event requiring immediate action due to potential threat to health and safety, the environment, or property.

A

emergency

38
Q

location where coordination and execution of BCP or DRP is directed

A

Emergency Operations Center

39
Q

plan of action to commence immediately to prevent the loss of life and minimize injury and property damage.

A

emergency procedures

40
Q

planning for the delegation of authority required when decisions must be made without the normal chain of command

A

executive succession

41
Q

activity that is performed for the purpose of training and conditioning team members, and improving their performance.

A

exercise

42
Q

asynchronous duplication of the production database on separate media to ensure data availability, currency and accuracy.

A

file shadowing

43
Q

process of recovering a database to the point of failure by applying active journal or log data to the current backup files of the database.

A

forward recovery

44
Q

live, very high risk test.

A

Full Interruption Test

45
Q

recovery alternative, everything needed for the business function, except people and last backup

A

hot site

46
Q

magnitude of harm that can be expected to result from consequences of unauthorized disclosure of information, unauthorized modification of information, unauthorized destruction of information, or loss of information or information system availability.

A

Impact

47
Q

classify the intensity of a potential impact that may occur if the information system is jeopardized.

A

Impact Level

48
Q

highest level of authority at EOC with knowledge of the business process and the resources available

A

incident manager

49
Q

reaction of an organization to a significant event that may impact the organization, its people, or its ability to function productively.

A

incident response

50
Q

documentation of a predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyber attacks against an organization’s information system(s).

A

Incident Response Plan

51
Q

management policy and procedures designed to maintain or restore business operations, including computer operations, possibly at an alternate location, in the event of emergencies, system failures, or disasters.

A

Information System Contingency Plan

52
Q

test conducted on multiple components of a plan, in conjunction with each other, typically under simulated operating conditions

A

integrated test

53
Q

process of logging single changes or updates to a database since the last full backup.

A

journaling

54
Q

an exercise where the plan is executed as if a real disaster has taken place at a specific point in the facility and is typically conducted with multiple BC/DR teams. (simulation test)

A

Live Walk-Through Test

55
Q

amount of time mission/business process can be disrupted without causing significant harm to the organization’s mission.

A

Maximum Tolerable Downtime

56
Q

recovery alternative, complete duplication of services including personnel

A

mirrored site

57
Q

essential to the organization’s ability to perform necessary business functions.

A

mission-critical application

58
Q

recovery alternative, short-term, high cost movable processing location

A

mobile site

59
Q

backup of data located where staff can gain access readily and a localized disaster will not cause harm

A

near site

60
Q

backup of data located where staff can not gain access readily and a regional disaster will not cause harm

A

off site

61
Q

Alternate location where duplicated vital records and documentation may be stored for use during disaster recovery.

A

off-site storage

62
Q

backup of data located where staff can gain access immediately

A

on-site

63
Q

determines the significance of the loss of an operational or technological resource. The loss of a system, network or other critical resource may affect a number of business processes.

A

operational impact analysis

64
Q

test conducted on one or more components of a plan under actual operating conditions.

A

operational test

65
Q

operational test is held at the same time with the actual processing of critical systems to ensure that the systems will run correctly at the alternative site.

A

Parallel Test

66
Q

between two organizations (or two internal business groups) with basically the same equipment/same environment that allows each one to recover at each other’s site.

A

reciprocal agreement

67
Q

time period between a disaster and a return to normal functions, during which the disaster recovery plan is employed.

A

recovery period

68
Q

determinant of the amount of data that may need to be recreated after the systems or functions have been recovered.
stipulates the amount of data an organization can lose when a disaster occurs

A

Recovery Point Objective

69
Q

target time which respects tolerance for loss of certain business function, basis of strategy
stipulates the amount of time an organization needs to recover from a disaster

A

Recovery Time Objective

70
Q

database backup type which records at the transaction level

A

remote journaling

71
Q

backup type which creates a complete copy

A

replication

72
Q

ability to quickly adapt and recover from any known or unknown changes to the environment through holistic implementation of risk management, contingency, and continuity planning.

A

Resilience

73
Q

planning with a goal of returning to the normal business function

A

restoration

74
Q

process of planning for and/or implementing the restarting of defined business operations following a disaster, usually beginning with the most critical or time-sensitive functions first.

A

resumption

75
Q

assessing the critical functions necessary for an organization to continue business operations, defining the controls in place to reduce organization exposure and evaluating the cost for such controls; involves an evaluation of the probabilities of a particular negative event.

A

risk assessment / analysis

76
Q

Implementation of measures to limit specific threats to the continuity of business operations, and/or respond to any occurrence of such threats in a timely and appropriate manner.

A

risk mitigation

77
Q

recovery alternative which outsources a business function at a cost

A

service bureau

78
Q

backup type, for databases at a point in time

A

shadowing

79
Q

scenario based test that answers the question: Can the organization replicate the business process?

A

simulation

80
Q

test conducted on a specific component of a plan, in isolation from other components, typically under simulated operating conditions.

A

standalone test

81
Q

One method of testing a specific component of a plan. Typically, a team member makes a detailed presentation of the component to other team members (and possibly non-members) for their critique and evaluation.

A

structured walkthrough

82
Q

The scope of activities associated with initiation, development and acquisition, implementation, operation and maintenance, and ultimately its disposal

A

System Development Life Cycle

83
Q

planned or unplanned interruption in system availability

A

system downtime

84
Q

A is a test that exercises all or part of the BC/DR plan as specified in the scope of the test plan.

A

Tabletop Walk-Through Test

85
Q

document designed to periodically exercise specific action tasks and procedures to ensure viability in a real disaster.

A

test plan

86
Q

to evaluate the current situation and make basic decisions as to what to do

A

triage

87
Q

first test conducted to familiarize the team leader and members with the plan. It addresses all components of the BC/ DR plan.

A

Walk-Through Test

88
Q

recovery alternative which includes cold site and some equipment and infrastructure is available

A

warm site

Cyber Security (19 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions