Business impact analysis, recovery strategies, and disaster recovery plan testing concepts tested across CISSP Domains 1 and 7.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary purpose of a Business Impact Analysis (BIA)?
Show answer
To identify critical business functions and assess the potential impact of a disruption on the organization's operations, finances, and reputation.- What does RTO stand for in disaster recovery?
Show answer
Recovery Time Objective: the maximum acceptable time within which a system or business function must be restored after a disruption.- What does RPO stand for in disaster recovery?
Show answer
Recovery Point Objective: the maximum acceptable amount of data loss measured in time, indicating how current the recovered data should be.- Define MTTR in the context of disaster recovery.
Show answer
Mean Time To Repair: the average time required to repair a failed component or system and return it to operational status.- What is MTPD?
Show answer
Maximum Tolerable Period of Downtime: the longest duration a business function can be unavailable without causing unacceptable damage.- What is the key difference between a Business Continuity Plan and a Disaster Recovery Plan?
Show answer
A BCP keeps the business running through alternate processes during disruption; a DRP restores systems and data after a disaster occurs.- Name four categories of impact assessed in a Business Impact Analysis.
Show answer
Financial, operational, legal/regulatory, and reputational impact.- What is financial impact in the context of BIA?
Show answer
The measurable monetary loss resulting from service disruption, including lost revenue, recovery costs, and regulatory fines.- What is operational impact in the context of BIA?
Show answer
The degradation or loss of business functions, productivity, and ability to deliver products or services to customers.- What does legal or regulatory impact mean in BIA?
Show answer
Potential violations of laws, compliance requirements, or contractual obligations, resulting in sanctions, fines, or loss of license.- What is reputational impact in BIA?
Show answer
Damage to the organization's brand, customer trust, market position, and stakeholder confidence caused by a service disruption.- What is a criticality rating in the BIA process?
Show answer
A classification assigned to business functions indicating their importance and impact priority, typically ranked as critical, important, or non-critical.- Define Work Recovery Time (WRT).
Show answer
The time required to perform manual or alternate work processes to recover lost business functions after a system is restored.- What is a full interruption test in disaster recovery?
Show answer
A test that completely shuts down the primary system to verify the backup system can take over and sustain operations.- What is a parallel test in disaster recovery?
Show answer
A test where both the primary and recovery systems run simultaneously to verify the recovery system functions correctly without affecting production.
FlashKeepers