Business Impact Analysis

Question 1

What is a systematic activity that identifies organizational risks and determines their effect on ongoing, mission critical operations?

Answer 1

Business Impact Analysis

Question 2

How is business impact analysis governed for security?

Answer 2

It’s based on metrics regarding system availability (system uptime)

Question 3

What are the metrics that BIA is measuring?

Answer 3

Maximum Tolerable Downtime
Recovery Time Objective
Work Recovery Time
Recovery Point Objective

Question 4

What is the longest period of time a business can be inoperable without causing irrevocable business failure?

Answer 4

The Maximum Tolerable Downtime (MTD)

Note: This will be different for each organization. It will be measured in minutes to hours or days depending on how critical the measured function is.

Question 5

What is the length of time it takes after an event, to resume normal business operations?

Answer 5

Recovery Time Objective (RTO)

Question 6

What is the length of time in addition to the RTO, of individual systems to perform reintegration and testing of a restored or upgraded system, following an event?

Answer 6

Work Recovery Time (WRT)

Note: This is for anytime you are bringing something back fully operational after it went down or if you performed an upgrade etc.

Question 7

What is the longest period of time that an organization can tolerate lost data being unrecoverable?

Answer 7

Recovery Point Objective (RPO)

Note: Think of it this way, if a ransomware attack hits you, how far back do you want your last recovery backup to be? Any data from the time of the attack, back to the backup would be lost. The RPO is how much data loss is acceptable. How long can you be without your data?

Question 8

What is the average measurement of time for a system failure to resuming operations called?

Answer 8

Mean Time To Repair (MTTR)

Note: We have to think of this in terms of the Recovery Time Objective (RTO) and Recovery Point Objective (RPO). Those are the goal of what we are trying to achieve with the MTTR.

Question 9

What is the average measurement of time between failures of a device?

Answer 9

Mean Time Between Failures (MTBF)

Question 10

EXAM TIP

Answer 10

KNOW THIS SECTION

JENNY IS A NOOB