IS3110 CHAP 13 Flashcards
A team that collects data after a disruption to determine the extent of the damage.
Damage Assessment Team (DAT)
A team composed of senior management personnel, who have overall authority during a disruption or disaster.
Emergency Management Team (EMT)
Any system, function, or process identified as critical to the mission of the organization. These systems and activities are necessary to keep the organization functioning.
Mission-critical
A team responsible for recovering critical systems after a disruption or outage.
Technical Recovery Team (TRT)
- A(n) ___ is a plan that helps an organization continue to operate during and after a disruption or disaster.
BCP or business continuity plan
- Business continuity and disaster recovery is the same thing.
TRUE OR FALSE
FALSE
- You want to ensure that a BCP includes specific locations, systems, employees and vendors. You should identify these requirements in the ___ statement.
Scope
- What is the purpose of a BCP?
- To identify critical business functions
- To reduce or eliminate threats
- To ensure mission-critical elements of an organization continue to operate after a disruption
- All the above
To ensure mission-critical elements of an organization continue to operate after a disruption
- What does a BCP help to protect during and after a disruption or disaster?
- Confidentiality, information and authentication
- Certifications, identities, and accreditations
- Mission essential and non-mission-essential BCFs
- Confidentiality, integrity, and availability
Confidentiality, integrity, and availability
- The ___ is responsible for declaring an emergency and activating the BCP.
BCP coordinator
- After a BCP has been activated, who will assess the damages?
- EMT
- DAT
- TRT
- CAT
EMT
- After a BCP has been activated, who will assess the damages?
- BCP coordinator
- EMT
- DAT
- TRT
DAT
- After a BCP has been activated, who will recover and restore critical IT services?
- BCP coordinator
- EMT
- DAT
- TRT
TRT
- What are the three phases of a BCP?
- Activation/notification, transfer, recover
- Activation/notification, recovery, reconstitution
- Recovery, renewal, reconstitution
- Transfer, recovery, notification
Activation/notification, recovery, reconstitution
- A major disruption has forced you to move operations to an alternate location. The disruption is over and you need to begin normalizing operations. What operations should you move back to the original location first.
- Least critical business functions
- Most critical business functions
- Non-mission-essentil personnel
- Mission-essential personnel
Least critical business functions
- A major disruption has forced you to move operations to an alternate location. The disruption is over and you need to begin normalizing operations. You have rebuilt several servers at the primary location. What should you do?
- Test the servers and then turn off the servers at the alternate location
- Bring the servers online and turn off the alternate location servers
- Run the servers concurrently with the alternate location for three to five days
- Tes the servers for three to five days before brining them online
Run the servers concurrently with the alternate location for three to five days
- What can you do to show that the BCP will work as planned?
- BCP planning
- BCP training
- BCP testing
- BCP exercises
BCP testing
- What types of exercises can demonstrate a BCP in action? (Select three)
- Tabletop exercises
- Functional exercises
- Pull-the-plug exercises
- Full-scale exercises
Tabletop exercises
Functional exercises
Full-scale exercises
- Once a BCP has been developed, it should be reviewed and updated on a regular basis, such as annually.
TRUE OR FALSE
TRUE
