Business Continuity - correct answer -An ongoing process to ensure that the necessary steps are taken to identify the impact of potential losses and maintain viable recovery strategies, recovery plans, and continuity of services. (NFPA 1600)
Disaster Recovery - correct answer -The technical aspect of business continuity. The collection of resources and activities to re-establish information technology services (including components such as infrastructure, telecommunications, systems,
applications and data) at an alternate site following a disruption of IT services. Disaster recovery includes subsequent resumption and restoration of those operations at a more permanent site. (DRJ)
Risk Assessment - correct answer -The quantification of threats to an organization and the probability of them being realized. (BCI)
Business Impact Analysis - correct answer -A method of identifying the effects of failing to perform a function or requirement. (FCD-1)
Recovery Time Objective - correct answer -Time goal for the restoration and recovery of functions or resources based on the acceptable down time and acceptable level of performance in case of a disruption of operations. (ASIS)
Recovery Point Objective - correct answer -Point to which information used by an activity must be restored to enable the activity to operate on resumption. ISO Editor's Note: Can also be referred to as "maximum data loss". (ISO 22301)
Crisis Management - correct answer -The overall coordination of an organization's response to a crisis, in
an effective, timely manner, with the goal of avoiding or minimizing damage to the organization's profitability, reputation, and ability to operate. (DRJ)
Incident Management - correct answer -The process by which an organization responds to and controls an incident using emergency response procedures or plans. (DRJ) Incident Response - correct answer -The response of an organization to a disaster or other significant event that may significantly impact the organization, its people, or its ability to function productively. An
incident response may include evacuation of a facility, initiating a disaster recovery plan, performing damage assessment, and any other measures necessary to bring an organization to a more stable status.
(DRJ)
The Business Continuity Professional's Role - correct answer -1. Establish the need for a business continuity program 2. Obtain support and funding for the business continuity program 3. Build the organizational framework to support the business continuity program
Scope - correct answer -The boundary, or extent, to which a process, procedure, certification, or contract applies - considers the whole entity.
Objectives - correct answer -Documents what will be delivered at the end of the project and what benefit that will provide to the entity.
Assumptions - correct answer -Documents the assumptions you are making regarding the program.
The steering committee should .. - correct answer -Determine/establish objectives, program structure, critical success factors and be involved in project/program management
In which area of the professional practices would you develop teams for the Business Continuity program? - correct answer -Program initiation and management
Leadership is accountable/liable for? - correct answer -Understanding their legal responsibilities to the business continuity program. The laws, regulations, contractual/employment agreements.
How often should you conduct a risk assessment? - correct answer -Annually or as significant changes occur.