Disaster Recovery & Business Continuity Flashcards

After a declared disaster, the incident manager activates the BCP. What is typically the FIRST operational step?

Answer: Notify and assemble the Business Continuity Team and assess the scope of impact

The first operational step upon BCP activation is mobilizing the BC team and performing an initial damage and impact assessment to guide all subsequent recovery actions.

Which of the following best describes 'cyber resilience' in the context of incident management and business continuity?

Answer: The capacity to anticipate, withstand, recover from, and adapt to adverse cyber conditions

Cyber resilience integrates cybersecurity and business continuity principles, acknowledging that some incidents will succeed and focusing on minimizing impact and enabling rapid recovery.

A company's RTO for its order management system is 4 hours, but testing shows actual recovery takes 7 hours. What is the most appropriate corrective action?

Answer: Invest in capabilities (automation, pre-staged resources) to reduce actual recovery time to meet the 4-hour RTO

The RTO is set by business need; when actual recovery time exceeds it, the organization must improve its recovery capabilities rather than relaxing the objective.

What is the purpose of a 'call tree' (or notification cascade) in a business continuity plan?

Answer: To provide a structured, sequential notification process ensuring all key personnel are contacted rapidly during an incident

A call tree distributes the notification burden by having each person contact a small group, accelerating communication to all stakeholders without relying on a single point of contact.

Which element of a BCP ensures that recovery priorities remain aligned with current business strategy as the organization evolves?

Answer: Annual BIA reviews and plan updates triggered by significant business changes

Regular BIA reviews and change-triggered plan updates ensure that recovery priorities, RTOs, and RPOs reflect the organization's current critical functions and strategic priorities.

In a multi-tenant cloud environment, who is primarily responsible for ensuring business continuity for customer workloads?

Answer: Responsibility is shared: the cloud provider ensures platform availability while the customer designs and manages application-level continuity

The shared responsibility model means cloud providers guarantee infrastructure availability, but customers must architect their applications for resilience, backup, and recovery.

Which type of BCP exercise involves actual evacuation of a facility and physical movement of staff to an alternate location to validate logistical assumptions?

Answer: Full-scale simulation exercise

A full-scale simulation (or live-play) exercise physically enacts the BCP, including evacuation and relocation, making it the most realistic and costly test type.