Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CISSP > Domain 7: BCP/DRP pt 2 > Flashcards

Domain 7: BCP/DRP pt 2 Flashcards

1
Q
  • Business Continuity Planning process
  • Formal method for determining how a disruption to IT systems will impact the organization’s requirements, process, and interdependencies with respect to the business mission
A

Business Impact Analysis (BIA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Describes the total time a system can be inoperable before an organization is severely impacted

A

Maximum Tolerable Downtime (MTD)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are some alternate terms for the Maximum Tolerable Downtime (MTD)?

A

Maximum Allowable Downtime
Maximum Tolerable Outage
Maximum Acceptable Outage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
  • Failure and recovery metric

- The amount of data loss or system inaccessibility that an organization can withstand

A

Recovery Point Objective (RPO)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
  • Failure and recovery metric

- Describes the maximum time allowed to recover an IT system

A

Recovery Time Objective (RTO)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

The time required to configure a recovered system

MTD = RTO + ____

A

Work recovery time (WRT)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
  • Failure and recovery metric

- Describes the length of time a new or repaired system will run before failing

A

Mean Time between Failures (MTBF)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
  • Failure and recovery metric

- Describes the length of time it will take specific failed system to recover

A

Mean Time to Repair (MTTR)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
  • Failure and recovery metric

- Describes the minimum environmental and connectivity requirements in order to operate computer equipment

A

Minimum operating requirements (MOR)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
  • A location that is an exact production duplicate of main IT operation systems
  • No loss of availability during a disruption
A

Redundant Site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q
  • Location that contains all equipment and services required by the company
  • Organization may relocate to following a major disruption or disaster
  • Can be brought up within minutes or hours
A

Hot Site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Location with readily accessible hardware and connectivity, but relies on backup data in order to rebuild a system after a disruption

A

Warm Site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q
  • Location that does not contain backup copies of data or any immediately available hardware
  • Could take weeks to get up and running
A

Cold site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
  • Bidirectional agreement between two organizations

- One company promises another that it can move in and share space if it experiences a disaster

A

Reciprocal agreements aka Mutual Assistance Agreements (MAAs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Transportable data centers that can be towed, supplied with power and network to be brought online

A

Mobile site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q
  • Procedures for sustaining essential business operations while recovering from significant disruptions
  • Addresses business processes; IT addressed bases only on its support for business process
A

Business Continuity Plan (BCP)

17
Q
  • Procedures for recovering business operations immediately following a disaster
  • Addresses business processes; not IT focus; IT addressed based only on its support for business process
A

Business Recovery Plan (BRP)

18
Q
  • Procedures and capabilities to sustain an organization’s essential, strategic functions at an alternate site for up to 30 days
  • Addresses the subset of organization’s missions that are deemed most critical; usually written at headquarters level; not IT-focused
A

Continuity of Operations Plan (COOP)

19
Q
  • Procedures and capabilities for recovering a major application or general support system
  • Addresses IT system disruptions; not business process-related
A

Continuity of Support Plan/IT Contingency Plan

20
Q
  • Procedures for publishing status reports to personnel and public
  • Not IT-focused
A

Crisis Communications Plan

21
Q

Plan to detect, respond to and limit consequences of malicious cyber incidents

A

Cyber Incident Response Plan

22
Q
  • Detailed procedure to facilitate recovery of capabilities at an alternate site
  • Often IT-focused; limited to major disruptions with long-term effects
A

Disaster Recovery Plan

23
Q
  • Coordinated procedure for minimizing loss of life or injury and protecting property damage in response to physical threat
  • Focuses on personnel and property particularly of a specific facility
A

Occupant Emergency Plan (OEP)

24
Q

What are the five steps of the Business Impact Analysis (BIA) process?

A
  1. Identification of priorities
  2. Risk identification
  3. Likelihood assessment
  4. Impact assessment
  5. Resource prioritization
25
Q
  • BCP Business Impact Analysis (BIA) process
  • Involves creating a comprehensive list of business processes and ranking them in order or importance
  • Metrics: asset value (AV), maximum tolerable downtime (MTD), recovery time objective (RTO)
A

Identification of priorities

26
Q
  • BCP Business Impact Analysis (BIA) process

- Natural and man-made threats posed to your organization

A

Risk identification

27
Q
  • BCP Business Impact Analysis (BIA) process

- Determines probability of a risk occurring

A

Likelihood assessment

28
Q
  • BCP Business Impact Analysis (BIA) process
  • Determine the effect each of the identified risks would have on the business if it were to occur
  • Metrics: exposure factor (EF), single loss expectancy (SLE), annualized loss expectancy (ALE)
A

Impact assessment

29
Q
  • BCP Business Impact Analysis (BIA) process

- Here we allocate resources to the various risks we’ve already identified and assessed

A

Resource prioritization

30
Q
  • Company that owns large server farms and fields of workstations, it leases this computer time
  • Can support all IT needs in the event of a disaster even desktops
  • Tend to oversell their capacity by betting all their contracts will not be excised at the same time
  • Potential for resource contention in the event of a major disaster
A

Service bureaus

CISSP (30 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions