1. What does MAO define?
The MAO identifies the maximum acceptable downtime for a system. If the MAO is exceeded, the mission of the organization is affected. The MAO directly affects the recovery time.
2. Define CSFs for a BIA.
Any element necessary to perform the mission of an organization. An organization will have a few elements that must succeed in order for the organization to succeed
3. List four of the seven steps for a contingency plan based on the NIST 800-34 standard.
Develop the contingency planning policy statement. b. Conduct the business impact analysis. c. Identify preventative controls. d. Develop recovery strategies. e. Develop an IT contingency plan. f. Plan testing, training, and exercises. g. Plan maintenance.
4. What is the objective of a BIA?
The overall objective of the BIA is to identify the impact of outages.
5. In the seven domains of an IT infrastructure, list three things that should be included as CBFs.
The Web server must have reliable Internet access. If Internet access fails, the customer cant access the Web server. Web server availability
6. List at least two differences between BCP and a DRP plan.
The BCP is used to identify and ensure the critical elements of a business can continue to operate after a disruption. While a DRP is used to implement how a business will recover to functioning ability after a disaster. A BCP is used to ensure the business can continue operating (making money) where a DRP is solely focused on getting the company back to working order
7. Describe and list four elements of a BCP.
The Purpose: To ensure the business continues to function after a disruption/disaster. The Scope: An outline of the BCP to outline what must be done. The BIA: Identifies critical business functions and their priorities. The Strategy: Identifies the key elements in a plan; location, notification, transportation,
8. What does a BCP program manager do? What are his or her duties?
BCP Program Manager is