WGU Digital Forensics in Cybersecurity - C840 exam 2023

Business Continuity Plan (BCP) A plan for maintaining minimal operations until the business can return to full normal operations. Disaster Recovery Plan (DRP) A plan for returning the business to full normal operations. International Organization for Standardization (ISO) 27001 standard It is a code of practice for implementing an information security management system, against which organizations can be certified. National Institute of Standards and Technology (NIST) 800-34 standard It is entitled Contingency Planning Guide for Information Technology Systems—thus it is clearly related to business continuity and disaster recovery. Business Impact Analysis (BIA) An analysis of how specific incidents might impact the business operations. U.S. National Fire Protection Association (NFPA) 1600 Standard This is formally titled Standard on Disaster/Emergency Management and Business Continuity Programs focused on responding to fire-related incidents. Maximum Tolerable Downtime (MTD) The length of time a system can be down before the business cannot recover. Mean Time to Repair (MTTR) The average time needed to repair a given piece of equipment. Mean time to failure (MTTF) How long, on average, before a given piece of equipment will fail through normal use. Recovery Point Objective (RPO) The amount of work that might need to be redone, or data lost. Recovery Time Objective (RTO) The time that the system is expected to be back up. This must be less than MTD. Single Loss Expectancy (SLE) The expected monetary loss every time a risk occurs. Single Loss Expectancy (SLE) formula Asset Value (AV) x Exposure Factor (EF)