Business impact analysis, recovery strategies, and disaster recovery plan testing concepts tested across CISSP Domains 1 and 7.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary purpose of a Business Impact Analysis (BIA)?
- To identify critical business functions and assess the potential impact of a disruption on the organization's operations, finances, and reputation.
- What does RTO stand for in disaster recovery?
- Recovery Time Objective: the maximum acceptable time within which a system or business function must be restored after a disruption.
- What does RPO stand for in disaster recovery?
- Recovery Point Objective: the maximum acceptable amount of data loss measured in time, indicating how current the recovered data should be.
- Define MTTR in the context of disaster recovery.
- Mean Time To Repair: the average time required to repair a failed component or system and return it to operational status.
- What is MTPD?
- Maximum Tolerable Period of Downtime: the longest duration a business function can be unavailable without causing unacceptable damage.
- What is the key difference between a Business Continuity Plan and a Disaster Recovery Plan?
- A BCP keeps the business running through alternate processes during disruption; a DRP restores systems and data after a disaster occurs.
- Name four categories of impact assessed in a Business Impact Analysis.
- Financial, operational, legal/regulatory, and reputational impact.
- What is financial impact in the context of BIA?
- The measurable monetary loss resulting from service disruption, including lost revenue, recovery costs, and regulatory fines.
- What is operational impact in the context of BIA?
- The degradation or loss of business functions, productivity, and ability to deliver products or services to customers.
- What does legal or regulatory impact mean in BIA?
- Potential violations of laws, compliance requirements, or contractual obligations, resulting in sanctions, fines, or loss of license.
- What is reputational impact in BIA?
- Damage to the organization's brand, customer trust, market position, and stakeholder confidence caused by a service disruption.
- What is a criticality rating in the BIA process?
- A classification assigned to business functions indicating their importance and impact priority, typically ranked as critical, important, or non-critical.
- Define Work Recovery Time (WRT).
- The time required to perform manual or alternate work processes to recover lost business functions after a system is restored.
- What is a full interruption test in disaster recovery?
- A test that completely shuts down the primary system to verify the backup system can take over and sustain operations.
- What is a parallel test in disaster recovery?
- A test where both the primary and recovery systems run simultaneously to verify the recovery system functions correctly without affecting production.