Chapter 3 (Domain 1 & 7)

Question 1

Business Continuity Planning (BCP)

Answer 1

Assessing the risks to organizational processes and creating policies, plans, and procedures to minimize the impact those risks might have on the organization if they were to occur.

Question 2

Four steps of the BCP

Answer 2

1) Project scope and planning
2) Business impact analysis
3) Continuity planning
4) Approval and implementation

Question 3

BCP: Project scope and planning

4 steps

Answer 3

1) Organizational Review - Identify all departments and individuals who have a stake in the BCP Process
2) BCP Team Selection - Representatives from each department, IT SME, Cybersecurity, Physical Security, Attorneys, Human Resources, Public Relations, Senior Management.
3) Resource Requirements - Resources for BCP Development, BCP Testing Training and Maintenance, And BCP Implementation.
4) Legal and Regulatory Requirements

Question 4

BCP: Business Impact Analysis

5 tasks

Answer 4

1) Identifying Priorities
2) Risk Identification
3) Likelihood Assessment
4) Impact Analysis
5) Resource Prioritization

Question 5

BCP: Continuity Planning

Two Primary Subtasks

Answer 5

1) Strategy Development

2) Provisions and Processes

Question 6

BCP: Plan Approval and Implementation

Answer 6

The plan should be endorsed by the top executive in your business.

Question 7

List the necessary member of the business continuity planning team.

Answer 7

Representatives from each department
IT SME
Cybersecurity
Physical Security
Attorneys
Human Resources
Public Relations
Senior Management

Question 8

BCP documentation benifits

Answer 8

• Ensures BCP personnel have a written continuity document to reference in the even of an emergency.
• Provides a historical record of the BCP process that will be useful to future personnel seeking both understanding and reasoning behind implementation and procedures.
• Forces the team members to commit their thoughts to paper-a process that often facilitates the identification of flaws in the plan.

Question 9

Statement of Importance

Answer 9

This document commonly takes the form of a letter to the organization’s employees, stating the reason that the organization devoted significant resources to the BCP.

Question 10

Statement of Priorities

Answer 10

Listing the functions considered critical to continued business operations in a prioritized order.

Question 11

Statement of Organizational Responsibility

Answer 11

Echoes the sentiment that “business continuity is everyone’s responsibility!”

Question 12

Statement of Urgency and Timing

Answer 12

Expresses the criticality of implementing the BCP and outlines the implementations timetable decided on by the BCP team.

Question 13

Vital Records Program

Answer 13

States where critical business records will be stored and the procedures for making and storing backup copies of those records.