Business Continuity and Disaster Recovery Flashcards

When reviewing BC/DR plans, the information security manager should PRIMARILY ensure that:

Answer: Security controls are maintained and not bypassed during recovery operations

The information security manager must ensure that security controls remain in force during recovery, as the pressure to restore quickly can lead to shortcuts that introduce vulnerabilities.

How often should a Business Continuity Plan be tested at MINIMUM according to best practices?

Answer: At least annually, and after any significant change to the environment

Best practices and most frameworks require BCP testing at least annually and after any significant changes to ensure the plan remains effective and current.

Which element should be included in a crisis communications plan?

Answer: Pre-approved messaging templates and designated spokespersons for stakeholder communication

A crisis communications plan defines who communicates, what is communicated, and provides pre-approved templates to ensure timely, consistent, and accurate messaging during a disruption.

A succession plan within business continuity primarily addresses:

Answer: Designating backup personnel who can assume critical roles if key individuals are unavailable

A succession plan ensures that backup personnel are identified and trained to assume critical roles if primary individuals are unavailable during a crisis.

Which statement BEST describes the relationship between RTO and MTD?

Answer: RTO must always be shorter than MTD to ensure recovery occurs before irreversible harm

RTO must be set shorter than MTD to ensure systems are recovered before the maximum tolerable period of disruption is breached, avoiding irreversible business impact.

When conducting a parallel test during disaster recovery, the organization is:

Answer: Running recovery systems simultaneously alongside production to validate functionality without disruption

A parallel test activates the recovery environment while keeping production running simultaneously, allowing validation of the DR site without risking a real outage.

What is the MOST important reason for involving business unit leaders in Business Continuity Plan development?

Answer: To accurately identify critical processes, dependencies, and acceptable recovery targets

Business unit leaders have the knowledge to identify which processes are truly critical and what recovery targets are operationally acceptable, making their involvement essential for a realistic and effective BCP.