Writing Assignment: Module 11 Flashcards
What is BCP?
represents the final response of the organization when faced with any interruption of its critical operations. In general, business continuity is the rapid relocation of an organization’s critical business functions to an alternate location until such time as the organization is able to return to the primary site or relocate to anew permanent facility
What is the difference between disaster recovery and business continuity?
DR focuses on resuming operations at the normal operating facility known as the primary site. BC concentrates on resuming critical functions at another, alternate site
What are the primary and alternate sites in the context of contingency planning?
where the organization is currently located in normal operation settings.
sites that are set up in the case of a disaster and the primary site can no longer be used
What are RTO and RPO, and why is it essential to define them early in the BC planning process?
The recovery time objective (RTO) is the amount of time that the business can tolerate until the alternate capabilities are available. The recovery point objective (RPO) is the point in the past to which the recovered applications and data at the alternate infrastructure will be restored
What parts of the organization should the BC team draw on for its members?
The BC team should consist of representatives from every major organizational unit. Unlike the DR team, the need for specialized technology-focused members is significantly reduced, and the emphasis should be placed in generalized business and technology skills instead of highly specialized technical skills.
List the subteams that support the BC team.
BC management team
Operations team
Computer setup (hardware team
Systems recovery (OS) team
Network recovery team
Application recovery team
Data management team
Logistics team
What is similar about the DR and BC planning processes with respect to special documentation and equipment needs?
All members of the BC team should have multiple copies of the BC plan readily available in all locations from which they may be asked to respond in the event of mobilization
What should be the first step in business continuity planning? Which NIST document is used to inform this process?
a.Develop the BC planning policy statement. Which is a formal organizational policy provides the authority and guidance necessary to develop an effective continuity plan.
b.The NIST document used is SP 800-34, Rev. 1
List and describe the components of the BC policy document.
Develop the BC planning policy statement
Review the BIA.
Identify preventative controls.
Create BC contingency strategies.
Develop the BC plan
Ensure BC Plan testing, training, and exercises.
Ensure BC plan maintenance.
List and describe the phases of the BC plan.
a.Preparation for BC actions - In this phase of the BC plan, the organization specifies what type of relocation services are desired and what type of data management strategies are deployed to support relocation.
b.Relocation to the alternate site - This phase of the BC plan specifies under what conditions and how the organization relocates from the primary to the alternate site.
c.Return to the primary site - This phase of the BC plan should have documented procedures for “clearing” the BC site and redirecting employees back to their normal work offices
What are the advantages of including an AAR process in the BC plan?
stored to serve as a training case for future staff.
At what point does an organization implement the BC plan, and what is this point called?
occurs when the organization experiences a circumstance in which it cannot reasonably expect to return to normal operations at the primary site.
trigger point or set point.
What are the critical steps in BC implementation?
Implementation of the BC plan involves relocation to the alternate site, establishment of operations, and return to the primary site or new permanent alternate site
Is it practical to prepare for all possible contingencies? How can this best be handled?
Preparing for all possible contingencies is usually not practical. However, one or several general training programs focused on implementing critical business functions at an alternate site should prepare all involved parties for the implementation of a specific BC operation.
Why must the staff at the alternate site continue to observe backup strategies that are in place at the primary site?
This is because good backup practices can safeguard losses that occur while operating in the suboptimum conditions of the contingency deployment, when errors or faults can cause additional disruptions, and because there will eventually be a need to relocate to the primary site.
