risk management

Question 1

what is a BIA?

Answer 1

business impact analysis is a process to determine sources and relative impact values of risk elements in a process

Question 2

What is the RTO?

Answer 2

recovery time object describes target time set for resumption of operations

Question 3

what is the RPO?

Answer 3

recovery point objective is maximum amount of time of acceptable data loss

Question 4

difference between RTO and RPO

Answer 4

RTO defines requirements of business continuity and RPO deals with backup frequency

Question 5

what is the MTBF?

Answer 5

mean time between failures

Question 6

MTTR?

Answer 6

mean time to repair

Question 7

MTBF formula

Answer 7

(start of downtime - start of uptime) / number of failures

Question 8

MTTR formula

Answer 8

(total downtime) / (number of breakdowns)

Question 9

availability formula

Answer 9

MTBF / (MTBF+MTTR)

Question 10

what is impact?

Answer 10

cost associated with a realized risk

Question 11

what is risk?

Answer 11

chance of something not working as planned and causing adverse impact

Question 12

privacy impact assessment

Answer 12

analysis of how PII is handled through business process

Question 13

privacy threshold assessment

Answer 13

analysis of whether PII is collected and maintained by a system. then analysis of risk done through PIA

Question 14

what is SLE

Answer 14

single loss expectancy

Question 15

what is ale

Answer 15

annual loss expectancy (ALE)

Question 16

what is ARO

Answer 16

annualized rate of occurrence (ARO)

Question 17

asset value

Answer 17

ammount of money to replace asset

Question 18

risk register

Answer 18

list of risks associated with a system

Question 19

4 ways to handle risk

Answer 19

avoid, mitigate, accept, transfer