Business Continuity & Disaster Recovery Planning Flashcards
7 cards from real CSC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity & Disaster Recovery Planning flashcards as text
A security consultant identifies that a client's critical operations can tolerate no more than four hours of downtime. This value is referred to as the:
Answer: Maximum Tolerable Downtime (MTD)
Maximum Tolerable Downtime (MTD) is the absolute maximum time a business process can be unavailable before the impact causes irreversible harm.
Which type of alternate site provides basic infrastructure such as raised flooring, power, and connectivity, but requires the organization to install its own equipment?
Answer: Cold site
A cold site provides only the basic physical infrastructure, requiring the organization to procure and install all equipment before operations can resume.
The concept of 'threat vulnerability asset' (TVA) mapping in business continuity planning is primarily used to:
Answer: Correlate identified threats and vulnerabilities to specific critical assets
TVA mapping links specific threats and vulnerabilities to the assets they could affect, enabling targeted and prioritized risk mitigation in continuity planning.
In a Disaster Recovery Plan (DRP), the 'crisis communications plan' ensures that:
Answer: Stakeholders, staff, and the public receive timely and accurate information
A crisis communications plan establishes protocols for delivering timely, accurate, and consistent information to all relevant stakeholders during a disaster.
A security consultant conducting a full-scale continuity exercise that involves actual system failovers and personnel mobilization is performing a:
Answer: Full-scale simulation
A full-scale simulation activates the actual recovery plan, mobilizes resources, and tests real system failovers to validate plan effectiveness under realistic conditions.
Which of the following is considered a critical component of a Business Continuity Plan's maintenance program?
Answer: Conducting regular plan reviews and updates after organizational changes or exercises
Regular reviews and updates after organizational changes, incidents, or exercises ensure the BCP remains accurate, current, and actionable.
Under the ASIS Business Continuity Management standard (ASIS SPC.1), what is the role of senior management in a continuity program?
Answer: To demonstrate leadership commitment, allocate resources, and establish policy
ASIS SPC.1 emphasizes that senior management must demonstrate commitment by setting policy, allocating resources, and supporting the continuity program's development.