Recovery Strategy & Planning Flashcards
7 cards from real CRP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Recovery Strategy & Planning flashcards as text
A company's IT recovery strategy specifies replication to a cloud provider. Which risk must be explicitly addressed in the plan?
Answer: Internet connectivity dependency and bandwidth during recovery
Cloud-based recovery depends on network connectivity; if the disaster also disrupts internet service, the cloud recovery strategy may be inaccessible.
The term 'Maximum Tolerable Downtime' (MTD) represents:
Answer: The longest period a business function can be unavailable before causing irreparable harm
MTD (also called Maximum Allowable Downtime) defines the absolute outer limit of acceptable unavailability before the business suffers unacceptable consequences.
When should recovery strategies be re-evaluated after initial development?
Answer: Whenever significant changes occur to business operations, technology, or the threat environment
Recovery strategies must be reviewed whenever material changes occur to processes, systems, staffing, or threats to ensure they remain effective.
A 'cold site' recovery option is characterized by:
Answer: Basic infrastructure (power, network, space) with no pre-installed equipment
A cold site provides only basic utilities and physical space; the organization must procure and install all equipment before it can be used.
Which approach BEST ensures that supply chain disruptions are addressed in recovery planning?
Answer: Identifying critical suppliers, assessing their resilience, and developing alternate sourcing strategies
Effective supply chain recovery planning requires understanding supplier dependencies, assessing their resilience, and establishing pre-qualified alternatives.
In the context of recovery planning, 'Resource Requirements' documentation should capture:
Answer: Personnel, technology, facilities, vital records, and vendor services required at each recovery phase
Resource requirements must comprehensively cover all categories—people, technology, space, records, and suppliers—needed at each phase of recovery.
A recovery strategy that relies on 'reciprocal agreements' between two companies carries which SIGNIFICANT risk?
Answer: The partner organization may also be affected by the same regional disaster
Reciprocal agreements may fail in regional disasters because both parties can be affected simultaneously, leaving neither able to support the other.