Business Continuity Planning Complete Study Guide Test.

Business Continuity Planning Complete Study Guide Test. Business Continuity Planning (BCP) - correct answer Undertaken to reduce risks related to the onset of disasters and other disruptive events BCP activities identify risks and mitigate those risks through changes or enhancements in technology or business processes - The impact of disasters is reduced and the time to recovery is lessened Improve chances that the organization will survive a disaster without incurring costly or even fatal damage to its most critical activities The activities for BCP development scale for any size organizations The elements of the BCP process life cycle are: - correct answer -Develop BCP policy - Conduct business impact analysis - Perform criticality analysis - Establish recovery targets - Develop recovery and continuity strategies and plans - Test recovery and continuity plans procedures - Train personnel - Maintain strategies, plans, and procedures through periodic reviews and updates BCP Policy - correct answer Include/cite specific controls that ensure that key activities in the BCP life cycle are performed appropriately Define the scope of the BCP strategy The specific business processes that are included in the BCP effort must be defined BCP (Cont'd) - correct answer -Develop IT continuity framework - Conduct business impact analysis and risk assessment - Develop and maintain IT continuity plans - Identify and categorize IT resources based on recovery objectives - Define and execute change control procedures to ensure IT continuity plan is current - Regularly test IT continuity plan - Develop follow-up action plan from test results - Plan and conduct IT continuity training - Plan IT services recovery and resumption - Plan and implement backup storage and protection - Establish procedures for conducting post-resumption reviews Business Impact Analysis - correct answer Identify the impact that different scenarios will have on ongoing business operations Critical, detailed analysis that is carried out before the development of continuity or recovery plans and procedures Inventory key processes & systems • Establish a detailed list of all identifiable processes and systems • Develop questionnaire/intake form that is circulated to key personnel in end- user departments and also within IT • Typically, the information gathered on intake forms is transferred to a multi- columned spreadsheet - Information on all of the organization's in-scope processes can be viewed together Business Impact Analysis (Cont'd) - correct answer Statements of impact • Qualitative/quantitative description of the impact if the process or system were incapacitated for a time • Captures the number of users and names of departments/functions that are affected by the unavailability of a specific IT system • Includes the geography of affected users and functions • Examples: - Three thousand users in France and Italy will be unable to access customer records - All users in North America will be unable to read or send email Cites the business processes that would be affected Examples: - Accounts payable and accounts receivable functions will be unable to process - Legal department will be unable to access contracts and addendums