Cissp Lesson 8

Front 1

Upper Management BCP Role

Back 1

Authorizes initiation, ensures appropriate resouces are committed to the project.

Front 2

Project Manager BCP Role

Back 2

Coordinates the design and development effort. Responsible for completion, maintenance, and revisions

Front 3

Recovery Team BCP Role

Back 3

Controls the recovery operations. Provides immediate response. Restores Systems

Front 4

Business Unit Representatives BCP Role

Back 4

Defines critical business processes and assist in developing and executing the BCP

Front 5

Employees BCP Role

Back 5

Receive awareness and training.

Front 6

Business Continuity Planning Process

Back 6

1. Project management and initiation.
2. Analyze business impact.(BIA)
3. Identify recovery strategies.
4. Design and develop plan.
5. Conduct testing, maintenance, awareness, and training.

Front 7

Business Impact Analysis(BIA)

Back 7

Requires formal approval from senior management for maximum tolerable downtime(MTD) for time-critical business processes within an organization. Is must quantify the loss impact from a financial standpoint.

Front 8

Vulnerability Assessment

Back 8

Focuses on financial and operational loss impact information for use in a business impact analysis.

Front 9

Quantitative Loss Criteria

Back 9

Loss impact from loss of revenue.

Front 10

Qualitative Loss Criteria

Back 10

Loss impact from loss of competitive advantage, market share, or credibility.

Front 11

Critical Support Criteria

Back 11

Loss impact if a critical business function cannot sustain business continuity.

Front 12

Maximum Tolerable Downtime(MTD)

Back 12

The longest period of time a business process can remain interrupted before it is unrecoverable.

Front 13

What is the difference between a BCP and a DRP?

Back 13

DRP focuses on the immediate actions needed to recover critical resources and business processes. Saving lives and minimizing added damage.

Front 14

Electronic Vaulting Transaction Redundancy Type

Back 14

Transferring bulk data to an alternative location. Electronic data transferis batch processed.

Front 15

Remote Journaling Transaction Redundancy Type

Back 15

Transmitting journal or data logs, rather than data files to an alternative location. More immediate than Electronic Vaulting.

Front 16

Database Shadowing Transaction Redundancy Type

Back 16

Mirroring database sets to multiple servers to an alternative location.

Front 17

Hot Site

Back 17

Site configured with required software and hardware. (subscription service) Most expensive option and usually includes an annual test.

Front 18

Warm Site

Back 18

Site with heat, air, power, and hardware but not pre-configured for business.

Front 19

Cold Site

Back 19

Site without resources or equipment. Most inexpensive.

Front 20

Mobile Site

Back 20

Site housed in a van or trailer that can be operated anywhere.

Front 21

Mirror Site

Back 21

Site equipped with communication lines and appropriate hardware and software to process transactions in parallel w/ primary site. Full redundancy.

Front 22

Checklist BCP/DRP Test

Back 22

Preliminary test and is not sufficient in itself to validate efficacy.

Front 23

Structured Walkthrough BCP/DRP Test

Back 23

Reps from each dept. meet to walk through the plan. Often uses different scenarios to test all phases of the plan.

Front 24

Simulation BCP/DRP Test

Back 24

Operational and support personnel come together to practice the steps they are expected to go through based on a specific scenario.

Front 25

Parallel BCP/DRP Test

Back 25

Operational test that verifies that specific systems can actually perform at the alternate location. Systems are moved to the alternate location.

Front 26

Full-Interruption BCP/DRP Test

Back 26

Full test in which normal business operations are shut down and business processes are conducted at the alternative site. Expensive but most effective test.

Front 27

Recovery Team

Back 27

Implements the recovery procedures at the onset of a disaster. Execute procedures and get the time-critical processes operating.

Front 28

Salvage Team

Back 28

Restores the primary site to its normal operating environment. Clean, repair, salvage and assess the primary location after the disaster.

Front 29

Recovery Issues

Back 29

Non-operational business concerns associated with an emergency response to a disaster.

Front 30

Media Relations Recovery Issue

Back 30

Preparing an established organizational response delivered by a trained, credible company spokesperson.

Front 31

Employee Relations Recovery Issue

Back 31

Involves managing the organization's relationship with its employees and their families.

Front 32

Finances Recovery Issue

Back 32

Involves disbursing funds in the event of a disaster and may require procedures for storing signed, authorized checks offsite.

Front 33

Fraud and Crime Recovery Issue

Back 33

Involves protection measures to thwart looting and vandalism.

Front 34

External Groups Recovery Issue

Back 34

Involves interacting with entities outside the organization, such as police, fire, utility providers, customers, and shareholders.