IS operations, business continuity, and disaster recovery concepts tested on the CISA exam.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary purpose of a Service Level Agreement (SLA)?
- To define expected service quality, performance metrics, availability targets, and remedies if not met
- Define Recovery Time Objective (RTO).
- The maximum acceptable time allowed to restore a system or business function after a disruption
- What does Recovery Point Objective (RPO) measure?
- The maximum acceptable amount of data loss, measured as time elapsed since the last backup
- Explain Business Impact Analysis (BIA).
- A process to identify critical business functions and assess the financial and operational impact of disruptions
- What is the difference between a hot site and a warm site?
- Hot site is fully replicated and immediately ready (high cost); warm site is partially equipped and requires activation time (moderate cost)
- Define change management in IT operations.
- A formal process to control, document, review, test, and implement modifications to systems and infrastructure
- What is the purpose of capacity planning?
- To ensure sufficient IT resources and infrastructure are available to meet current and future business demands
- Explain the role of incident management.
- To detect, classify, respond to, and resolve unplanned IT service disruptions in a timely manner
- What is problem management?
- A proactive process to identify root causes of incidents and implement permanent solutions to prevent recurrence
- Define configuration management.
- The practice of documenting and maintaining an accurate inventory of all IT assets, their versions, and their relationships
- What is a cold site?
- An unequipped backup facility that can be prepared and outfitted as an alternate location if the primary site becomes unavailable
- What does Maximum Tolerable Period of Disruption (MTPD) represent?
- The longest time an organization can tolerate a critical system or business function being unavailable
- Explain business continuity planning (BCP).
- A comprehensive strategy and set of procedures to maintain critical business operations during and after a disruptive event
- What is the primary goal of disaster recovery planning?
- To establish documented procedures, resources, and teams needed to restore IT systems and operations after a disaster
- Define a backup.
- A copy of data, applications, or systems created and stored separately to protect against loss or corruption