ISA BUNDLED EXAMS COMPLETE
QUESTIONS AND ANSWERS VERIFIED FULL
SOLUTION PACKAGE GRADED A PLUS
⩥ incident candidate.
Answer: See adverse event.
⩥ Work recovery time (WRT).
Answer: The amount of effort (expressed as elapsed time) necessary to
make the business function operational after the technology element is
recovered (as identified with RTO). Tasks include testing and validation
of the system.
⩥ Recovery point objective (RPO).
Answer: The point in time prior to a disruption or system outage to
which mission/business process data can be recovered after an outage
(given the most recent backup copy of the data).
⩥ Recovery time objective (RTO).
Answer: The maximum amount of time that a system resource can
remain unavailable before there is an unacceptable impact on other
system resources, supported mission/business processes, and the MTD.
,⩥ Maximum tolerable downtime (MTD).
Answer: The total amount of time the system owner or authorizing
official is willing to accept for a mission/business process outage or
disruption, including all impact considerations.
⩥ business impact analysis (BIA).
Answer: An investigation and assessment of the various adverse events
that can affect the organization, conducted as a preliminary phase of the
contingency planning process, which includes a determination of how
critical a system or set of information is to the organization's core
processes and recovery priorities.
⩥ contingency planning management team (CPMT).
Answer: The group of senior managers and project members organized
to conduct and lead all CP efforts.
⩥ business resumption planning, or BRP.
Answer: The actions taken by senior management to develop and
implement a combined DR and BC policy, plan, and set of recovery
teams.
⩥ business continuity plan (BC plan).
Answer: The documented product of business continuity planning; a
plan that shows the organization's intended efforts to continue critical
functions when operations at the primary site are not feasible.
,⩥ disaster recovery plan (DR plan).
Answer: The documented product of disaster recovery planning; a plan
that shows the organization's intended efforts in the event of a disaster.
⩥ incident response plan (IR plan).
Answer: The documented product of incident response planning; a plan
that shows the organization's intended efforts in the event of an incident.
⩥ disasters.
Answer: An adverse event that could threaten the viability of the entire
organization. A disaster may either escalate from an incident or be
initially classified as a disaster.
⩥ incidents.
Answer: An adverse event that could result in loss of an information
asset or assets, but does not currently threaten the viability of the entire
organization.
⩥ business continuity planning (BCP).
Answer: The actions taken by senior management to develop and
implement the BC policy, plan, and continuity teams.
⩥ disaster recovery planning (DRP).
, Answer: The actions taken by senior management to specify the
organization's efforts in preparation for and recovery from a disaster.
⩥ incident response planning (IRP).
Answer: The actions taken by senior management to develop and
implement the IR policy, plan, and computer security incident response
team.
⩥ contingency plan.
Answer: The documented product of contingency planning; a plan that
shows the organization's intended efforts in reaction to adverse events.
⩥ adverse events.
Answer: An event with negative consequences that could threaten the
organization's information assets or operations. Sometimes referred to as
an incident candidate.
⩥ contingency planning (CP).
Answer: The actions taken by senior management to specify the
organization's efforts and actions if an adverse event becomes an
incident or disaster. This planning includes incident response, disaster
recovery, and business continuity efforts, as well as preparatory business
impact analysis.
⩥ security education, training, and awareness (SETA).
QUESTIONS AND ANSWERS VERIFIED FULL
SOLUTION PACKAGE GRADED A PLUS
⩥ incident candidate.
Answer: See adverse event.
⩥ Work recovery time (WRT).
Answer: The amount of effort (expressed as elapsed time) necessary to
make the business function operational after the technology element is
recovered (as identified with RTO). Tasks include testing and validation
of the system.
⩥ Recovery point objective (RPO).
Answer: The point in time prior to a disruption or system outage to
which mission/business process data can be recovered after an outage
(given the most recent backup copy of the data).
⩥ Recovery time objective (RTO).
Answer: The maximum amount of time that a system resource can
remain unavailable before there is an unacceptable impact on other
system resources, supported mission/business processes, and the MTD.
,⩥ Maximum tolerable downtime (MTD).
Answer: The total amount of time the system owner or authorizing
official is willing to accept for a mission/business process outage or
disruption, including all impact considerations.
⩥ business impact analysis (BIA).
Answer: An investigation and assessment of the various adverse events
that can affect the organization, conducted as a preliminary phase of the
contingency planning process, which includes a determination of how
critical a system or set of information is to the organization's core
processes and recovery priorities.
⩥ contingency planning management team (CPMT).
Answer: The group of senior managers and project members organized
to conduct and lead all CP efforts.
⩥ business resumption planning, or BRP.
Answer: The actions taken by senior management to develop and
implement a combined DR and BC policy, plan, and set of recovery
teams.
⩥ business continuity plan (BC plan).
Answer: The documented product of business continuity planning; a
plan that shows the organization's intended efforts to continue critical
functions when operations at the primary site are not feasible.
,⩥ disaster recovery plan (DR plan).
Answer: The documented product of disaster recovery planning; a plan
that shows the organization's intended efforts in the event of a disaster.
⩥ incident response plan (IR plan).
Answer: The documented product of incident response planning; a plan
that shows the organization's intended efforts in the event of an incident.
⩥ disasters.
Answer: An adverse event that could threaten the viability of the entire
organization. A disaster may either escalate from an incident or be
initially classified as a disaster.
⩥ incidents.
Answer: An adverse event that could result in loss of an information
asset or assets, but does not currently threaten the viability of the entire
organization.
⩥ business continuity planning (BCP).
Answer: The actions taken by senior management to develop and
implement the BC policy, plan, and continuity teams.
⩥ disaster recovery planning (DRP).
, Answer: The actions taken by senior management to specify the
organization's efforts in preparation for and recovery from a disaster.
⩥ incident response planning (IRP).
Answer: The actions taken by senior management to develop and
implement the IR policy, plan, and computer security incident response
team.
⩥ contingency plan.
Answer: The documented product of contingency planning; a plan that
shows the organization's intended efforts in reaction to adverse events.
⩥ adverse events.
Answer: An event with negative consequences that could threaten the
organization's information assets or operations. Sometimes referred to as
an incident candidate.
⩥ contingency planning (CP).
Answer: The actions taken by senior management to specify the
organization's efforts and actions if an adverse event becomes an
incident or disaster. This planning includes incident response, disaster
recovery, and business continuity efforts, as well as preparatory business
impact analysis.
⩥ security education, training, and awareness (SETA).
