Professional Practice Three - Business Impact Analysis

Question 0

The BCP will demonstrate knowledge of Business Impact Analysis by (b)

Answer 0

Establish the Business Impact Analysis (BIA) process and methodology

Question 1

The BCP will demonstrate knowledge of Business Impact Analysis by (a)

Answer 1

Identify the criteria to be used to quantify and qualify the entity’s impact from events.

Question 2

The BCP will demonstrate knowledge of Business Impact Analysis by (c)

Answer 2

Plan and coordinate data gathering and analysis

Question 3

The BCP will demonstrate knowledge of Business Impact Analysis by (d)

Answer 3

Gain leadership agreement on BIA methodology and criteria to be used

Question 4

The BCP will demonstrate knowledge of Business Impact Analysis by (e)

Answer 4

Analyze the data collected against the approved criteria to establish RTO and RPO for each operational area and the technology that supports them

Question 5

The BCP will demonstrate knowledge of Business Impact Analysis by (f)

Answer 5

Document minimum resource requirements for resumption and recovery of core and support business functions and their escalation over time.

Question 6

The BCP will demonstrate knowledge of Business Impact Analysis by (g)

Answer 6

Prepare and present the BIA results to the entity’s leadership and gain acceptance of the RTO and RPO for each process.

Question 7

How does BCP Identify the criteria to be used to quantify and qualify the impact to the entity?

Answer 7

Define and obtain approval for criteria to be used to assess the impact on the entity’s operations including 1)Customer impact, 2) Financial impact, 3) Regulatory impact, 4) Operational impact, 5) Reputational impact, 6) Human impact

Question 8

Define Customer impact as it relates to BIA

Answer 8

How quickly customers will know, How worried they will be, What is the likelihood they will seek an alternative, What the impact to service level will be, The impact to supply chain customers, Injury or death of customer.

Question 9

Define Financial impact as it relates to BIA

Answer 9

Loss of revenue, additional cost of recovery, clean up and restoration cost, loss of financial control, impact to cash flow, market share, future sales, share price of stock, contractual fines and penalties, Lawsuits

Question 10

Define Regulatory impact as it relates to BIA

Answer 10

Fines, penalties, recall requirement

Question 11

Define operational impact as it relates to BIA

Answer 11

Reduced services level, increased overtime cost, Workflow disruptions, loss of control, inability to meet deadlines, supply chain disruption

Question 12

Define Reputational impact as it relates to BIA

Answer 12

Media attention, social media, community, shareholder confidence, competitor taking advantage of negative attention

Question 13

Define Human impact as it relates to BIA

Answer 13

Loss of life and injury, impact to the community, stress, long term emotional impact

Question 14

How will BCP establish the BIA process and methodology?

Answer 14

Identify and obtain a sponsor for the BIA, Define objectives and scope for the BIA process, Choose an appropriate BIA planning methodology, Choose an appropriate BIA data collection methodology.

Question 15

Data to be collected include

Answer 15

Operational Process.

Impacts to the process and how those impacts change over time.

Question 16

What are the minimum resource requirements to perform function at the minimum acceptable level?

Answer 16

Technology, Physical Space, Equipment, Vital Records, Personnel, Supplies

Question 17

How would BCP plan and coordinate data gathering and analysis?

Answer 17

Data collection via questionnaires, data collection via interviews, data collection via workshop

Question 18

How would BCP gain the leadership agreement on BIA methodology and criteria to be used? (a)

Answer 18

Identify and obtain agreement as to how potential financial and non- financial impact can be quantified and evaluated in each impact area.

Question 19

How would BCP gain the leadership agreement on BIA methodology and criteria to be used? (b)

Answer 19

Identify and obtain agreement on requirements for non-quantifiable impact information in data collection.

Question 20

How would BCP gain the leadership agreement on BIA methodology and criteria to be used? (c)

Answer 20

Establish definition of the impact scale to be used during the data collection.

Question 21

How would BCP gain the leadership agreement on BIA methodology and criteria to be used? (e)

Answer 21

Identify team members to participate in BiA process

Question 22

How would BCP gain the leadership agreement on BIA methodology and criteria to be used? (f)

Answer 22

Conduct data collection.

Question 23

How would the BCP analyze the data collected against the approved criteria to establish RTO and RPO for each operational area and the technology that supports them? (a)

Answer 23

Based on the data collected, determine the prioritize toon of processes/services

Question 24

How would the BCP analyze the data collected against the approved criteria to establish RTO and RPO for each operational area and the technology that supports them? (b)

Answer 24

Document interdependencies between each business process and the supporting infrastructure.

Question 25

How would the BCP analyze the data collected against the approved criteria to establish RTO and RPO for each operational area and the technology that supports them? (c)

Answer 25

Determine the order of recovery for core and support business functions and technology.

Question 26

How would BCP document minimum resource requirements for resumption and recovery of core and support business functions? (a)

Answer 26

Include internal and external resources, owned vs. non-owned, short vs. long term resource needs, and existing and additional resources.

Question 27

How would BCP document minimum resource requirements for resumption and recovery of core and support business functions? (b)

Answer 27

Vital Records Management - Document vital records and evaluate existing backup and restoration procedures

Question 28

How would BCP document minimum resource requirements for resumption and recovery of core and support business functions? (c)

Answer 28

Identify gaps between current recovery capabilities and requirements defined by the results of the BIA.

Question 29

How would a BCP prepare and present the BIA results to entity's leadership? (a)

Answer 29

Prepare draft BIA report using initial impact and identified gaps.

Question 30

How would BCP document minimum resource requirements for resumption and recovery of core and support business functions? (b)

Answer 30

Prepare final BiA

Question 31

How would BCP document minimum resource requirements for resumption and recovery of core and support business functions? (c)

Answer 31

Prepare and submit formal presentation of BIA findings to entity's leadership.

Question 32

How would BCP document minimum resource requirements for resumption and recovery of core and support business functions? (d)

Answer 32

Gain acceptance of the RTO and RPO for each process as defined by the results of the BIA.