Business Continuity and Resilience Planning Flashcards

What is cyber resilience in the context of business continuity management?

Answer: The ability to continuously deliver intended outcomes despite cyber attacks or incidents

Cyber resilience combines cybersecurity with business continuity, ensuring the organization can maintain operations and recover quickly from cyber incidents.

What is the purpose of a communication call tree in emergency management?

Answer: To ensure rapid, structured notification of key personnel during a crisis

A call tree provides a hierarchical, structured method for rapidly notifying and mobilizing the right people during an emergency or business disruption.

What is a 'warm site' in disaster recovery planning?

Answer: A backup facility partially equipped that requires some additional setup before becoming fully operational

A warm site is partially configured with hardware and connectivity but requires additional setup, offering a middle ground between costly hot sites and slow cold sites.

What does NIST Special Publication 800-34 provide guidance on?

Answer: Contingency planning for federal information systems

NIST SP 800-34 provides guidelines for developing and implementing contingency plans for federal information systems to ensure continuity of operations.

What is the primary role of senior management in a business continuity program?

Answer: To provide strategic direction, resources, and accountability for the BCP program

Senior management champions the BCP program, ensures adequate resources, sets risk tolerance, and holds the organization accountable for maintaining continuity capabilities.

What is a Business Continuity Management System (BCMS)?

Answer: A holistic management framework that establishes, implements, and continually improves business continuity capabilities

A BCMS is a comprehensive management framework based on standards like ISO 22301 that integrates policies, procedures, and controls to build and maintain business continuity capabilities.