Chapter 3 - BCP

Question 1

BCP Program Phases

Answer 1

Initiation
Business impact analysis
Strategy development
Plan development
Implementation
Testing
Maintenance

Question 2

BCP Elements

Answer 2

Scope plan initiation
Business impact Analysis – includes vulnerability assessment
Business continuity plan development
Plan approval and implementation

Question 3

BIA Goals

Answer 3

Criticality Prioritization: Critical business units must be identified and prioritized.

Downtime Escalation: Estimate the maximum tolerable downtime (MTD)

Resource Requirements: Identify resource requirements for the critical processes.

Question 4

BIA Process

Answer 4

1. Identification of priorities
2. Risk identification
3. Likelihood assessment
4. Impact assessment
5. Resource prioritization

Question 5

Continuity Strategy Steps

Answer 5

○ Strategy development
○ Provisions and processes
	§ People first
	§ Building and facilities
		□ Hardening provisions
		□ Alternate sites
	§ Infrastructure
		□ Physically hardening systems
		□ Alternative systems - Redundant communications links
○ Plan approval
	§ From Sr. mgmt
○ Plan implementation
Training and education

Question 6

BCP Plan should contain

Answer 6

○ Goals
○ Statement of importance
○ Statement of priorities
○ Statement of organizational responsibility
○ Statement of urgency and timing
○ Risk assessment
○ Risk acceptance/mitigation
○ Vital records program
○ Emergency-response guidelines
○ Maintenance
Testing and exercises