Program management - Answers The process of managing programs mapped to business objectives that
improve organizational performance.
Risk - Answers A possible event that could cause harm or loss or affect the ability to achieve objectives.
A risk is measured by the probability of a threat, the vulnerability of the asset to that threat, and the
impact it could have if it occurred.
Business impact - Answers The effect, acceptable or unacceptable, of an event on an organization. The
types of business impact are usually described as financial and non-financial and are further divided into
specific types
of impact.
Awareness - Answers To create an understanding of basic business continuity issues and limitations. This
will enable staff to recognize threats and respond accordingly.
Critical function/processes - Answers A critical function is a service, process, or business activity or a
collection of such, normally performed by a unit that must continue at a sufficient level without
interruption or restart within given timeframes after a disruption to the service.
Business continuity - Answers An ongoing process to ensure that the necessary steps are taken to
identify the impact of potential losses and maintain viable recovery strategies, recovery plans, and
continuity of services.
Disaster recovery - Answers The technical aspect of business continuity. The collection of resources and
activities to re-establish information technology services (including components such as infrastructure,
telecommunications, systems, applications and data) at an alternate site following a disruption of IT
services. Disaster recovery includes subsequent resumption and restoration of those operations at a
more permanent site.
Risk assessment - Answers Process of identifying the risks to an organization, assessing the critical
functions necessary for an organization to continue business operations, defining the controls in place to
reduce organization exposure and evaluating the cost for such controls. Risk analysis often involves an
evaluation of the probabilities of a particular event.
Business Impact Analysis (BIA) - Answers A method of identifying the effects of failing to perform a
function or requirement.
Recovery time objective (RTO) - Answers Time goal for the restoration and recovery of functions or
resources based on the acceptable down time and acceptable level of performance in case of a
disruption of operations.