Domain III – Information Technology – Section C: Disaster Recovery

Question 1

Business Continuity Management (BCM)

Answer 1

is the process by which an organization prepare for future incidents that could jeopardize the organization’s core mission and its long‐term viability. Such incidents include building fires, earthquakes, or natural events like pandemic illnesses.

Question 2

The Key Components of the BCM

Answer 2

1. Management Support
2. Risk Assessment and Risk Mitigation
3. Business Impact Analysis (BIA)
4. Business Recovery and Continuity Strategy
5. Awareness and Training
6. Exercises
7. Maintenance

Question 3

Risk Assessment and Risk Mitigation

Answer 3

Potential risks due to threats must be identified, and the probability and potential impact to the business must be determined.
=> The BC risk assessment is used to shape the overall BCM program scope by providing a list of likely events and associated consequences that should be addressed in a risk mitigation plan and the BCM program.

Question 4

3. Business Impact Analysis (BIA)

Answer 4

The BIA is used to identify business processes that are integral to keeping the business unit functioning in a disaster and to determine how soon these integral processes should be recovered following a disaster. The steps of BIA are:

• Identifying the Business Processes.
• Determine a recovery time objective (RTO) based on the types of business impact (i.e. duration of time to restore a business process).
• Next, determine a recovery point objective (RPO) for information systems. (i.e amount of data that can be lost).
• Identifying the Other Parties and Physical Resources
• Obtaining Sponsor and Manager Approval

Question 5

Business Recovery and Continuity Strategy

Answer 5

Business recovery and continuity strategies must be developed for critical business processes identified during the BIA.
=> This strategy addresses the actual steps, people, and resources required to recover critical business processes.

Question 6

Hot Recovery Plan/Capabilities

Answer 6

• A recovery plan exists.
• Recovery resources are available at recovery site and data is synchronized in real‐time to enable the system to be recovered immediately or within hours.
• Typical recovery time is minutes to 1 day.

Question 7

Warm Recovery Plan/Capabilities

Answer 7

• A recovery plan exists.
• Recovery resources (e.g., nonproduction systems, spare hardware, etc.) are available at recovery site but may need to be configured to support the production system when the disaster occurs.
• Some data may need to be restored (probably from tape or other backups).
• Typical recovery time is 2 to 13 days.