Term
| Business Impact Assessment |
|
Definition
|
|
Term
| Business Impact Assessment |
|
Definition
- gather needed assessment materials
- perform vulnerability assessment
- analyze information
- document present recommendations
- utilizes quantative and qualitative criterias
- helps a company decide what needs to be recovered and how quickly it needs to be recovered.
|
|
|
Term
| Business Continuity Plan Development |
|
Definition
| define and document continuity strategy |
|
|
Term
| Plan Approval and Implementation |
|
Definition
| receive approval by senior management and create an awareness o the plan |
|
|
Term
| Plan Approval and Implementation |
|
Definition
Receive approval by senior management develop enterprise awareness of the plan maintain and update plan |
|
|
Term
| Scope plan and initiation |
|
Definition
| marks the start of the business continuity planning and defines the scope for the plan |
|
|
Term
| Scope plan and initiation |
|
Definition
identify the work required identify resources to be used define management practices to be used |
|
|
Term
|
Definition
(Ordered) Scope plan and initiation Business Impact Assessment Business Continuity Plan Development Plan Approval and Implementation |
|
|
Term
|
Definition
The facility has necessary space and infrastructure support (electric power, telecommunications support, environmental controls), but does not contain IT equipment. |
|
|
Term
|
Definition
The facility is partially equipped with some of the necessary IT equipment. It is maintained in an operational status ready to receive the relocated system. |
|
|
Term
|
Definition
The facility is equipped with all necessary infrastructure and IT equipment to be immediately and fully functional. A hot site is typically staffed 24 hours a day, 7 days a week. |
|
|
Term
|
Definition
A self-contained transportable unit that is custom-fitted with specific telecommunications and IT equipment necessary to meet defined requirements |
|
|
Term
|
Definition
| A fully redundant facility that has real-time information mirroring and is identical in all technical aspects to the primary site. |
|
|
Term
|
Definition
Allows backups to be created offsite automatically by the use of an electronic vaulting provider. This is primarily done through a batch process of transferring bulk data to a remote server. Media that may be used includes optical disks, magnetic disks, mass storage devices, or automated tape libraries. |
|
|
Term
|
Definition
Transmits transaction logs or journals to a remote location. Remote journaling allows parallel processing of transactions at a remote site, and enables transactions, applications, or database changes since the last backup to be recovered quickly. |
|
|
Term
|
Definition
| a combination of server mirroring and remote journaling where multiple local and multiple offsite backups are created. |
|
|
Term
|
Definition
real-time backup system that creates an exact duplicate copy of your data onto duplicate hardware. This can be accomplished with a RAID 1 system or with complete mirrored server hardware boxes. The backup is usually local, but the backup is in real-time. |
|
|
Term
|
Definition
| Who is responsible for restoring the operations of the primary site, after the immediate disaster has ended? |
|
|
Term
|
Definition
is responsible for getting ensuring that the critical business functions are operating at the alternate backup process site, after a disaster has occurred |
|
|
Term
|
Definition
is responsible to create, implement, and test the BCP plan Senior Management has the ultimate responsibility for all phases of the plan, from initiating, monitoring and testing of the plan, and execution of the plan during a disaster. |
|
|
Term
|
Definition
| How often should a DRP plan be tested? |
|
|
Term
| procedures to prevent interruptions to normal business plan |
|
Definition
| The purpose of BCP planning? |
|
|
Term
|
Definition
-
Captures all files selected for backup.
-
Depending on the volume of data and frequency, full backups can require a large storage capacity and a significant amount of time to record the information.
-
Because of the overhead, a full backup is NOT ideal for cases where the data changes infrequently from backup to backup.
-
In cases where much of the data does not change from backup to backup, incremental / differential backups can be considered.
|
|
|
Term
|
Definition
What type of backup,
-
Captures only files created or modified since the last backup.
-
Is the fastest backup method
-
This method is more efficient from a storage media perspective, but may require more time for restoration, depending on when the last full backup was taken prior to initiating a recovery operation.
-
It stores all files that have changed since the last full backup, incremental or differential backup.
|
|
|
Term
|
Definition
-
Stores files that were created or modified since the last full backup.
-
This method takes less time to complete than a full backup and may require fewer storage units than an incremental approach because only the full backup tape and the last incremental tape would be needed for restoration.
-
Disadvantages: is that the backups take longer because the amount of data since the last full backup increases daily until the next full backup is run. Restore is slower than restoring from a full backup and the storage space requirement is higher than incremental.
|
|
|
Term
| Friday's full backup + incremental backups from Monday, Tuesday, and Wednesday |
|
Definition
let's assume a full backup was performed on a Friday and incrementals were performed on Monday, Tuesday, and Wednesday. If the server crashed on Thursday, one would need to restore |
|
|
Term
|
Definition
| what type of restoration if Friday's full backup + Wednesday's differential backup is restored? |
|
|
Term
|
Definition
-
What is an agreement in which two parties agree to support each other in case of a disruptive event referred as a mutual aid agreement.
-
major disadvantge is resource contention with partner company in case of disaster strikes both companies.
-
is low cost, in comparison to hot site and warm site
|
|
|
Term
|
Definition
-
is responsible for getting ensuring that the critical business functions are operating at the alternate backup process site, after a disaster has occurred.
-
is responsible for ensuring the critical systems and applications are back online
|
|
|
Term
|
Definition
| Which backup type only captures files created or modified since the last backup? |
|
|
Term
|
Definition
resource requirements criticality priorization downtime estimation |
|
|
Term
|
Definition
Copies of plans are distributed to each business unit's management team, where the plans are reviewed to verify whether all procedures and critical areas of the organization are addressed. It also determines if sufficient supplies are stored at the backup site, telephone number listings are current, quantities of forms are adequate, and a copy of the recovery plan and necessary operational manuals are available. |
|
|
Term
| Structured walk-through test |
|
Definition
Team members meet to verbally walk through the specific steps of each component of the disaster recovery process as documented in the disaster recovery plan. The purpose of the test is to confirm the effectiveness of the plan and to identify gaps, bottlenecks or other weaknesses in the plan. |
|
|
Term
|
Definition
Organization emulates a disaster so normal operations will not be interrupted. A disaster scenario should take into consideration the purpose of the test, objectives, type of test, timing, scheduling, duration, test participants, assignments, constraints, assumptions, and test steps. Testing can include the notification procedures, temporary operating procedures, and backup and recovery operations. |
|
|
Term
|
Definition
Involves bringing the recovery site to a state of operational readiness, but maintaining operations at the primary site. Thus staff are relocated, backup tapes transferred, and operational readiness established in accordance with the disaster recovery plan while operations at the primary site continue normally. For instance, under this scenario, historical transactions, are processed against the preceding day s backup files at the contingency processing site or hot-site. All reports produced at the alternate site for the current business date should agree with those reports produced at the existing processing site. |
|
|
Term
|
Definition
| Organization simulates a disaster, even to the point of ceasing normal production operations and involving emergency services. |
|
|
Term
| Financial management activities during business continuity and disaster recovery process |
|
Definition
notify insurance companies track recovery costs assess cash flow projections establish financial reimbursement procedures |
|
|
Term
|
Definition
| purpose to identify the impact of a loss of critical business functions? |
|
|
Term
|
Definition
| What backup strategy involves three media pools for backups (Daily, weekly, and monthly) where each pool has a default retention period and number of storage media to save? |
|
|
Term
| Business Continuity Management Life Cycle |
|
Definition
Anaylze your business Assess the risks Develop your strategy Develop your plan Rehearse the plan |
|
|
Term
|
Definition
| A holistic management process that identies potential impacts that threaten an organization and provides a framework for building resilience and effective response tat will safeguard the interests of its key stakeholders, reputation, brand and value-creating activities. |
|
|
Term
|
Definition
| Required recovery time following a disaster 30 days? |
|
|
Term
|
Definition
| Required recovery time following a disaster 7 days? |
|
|
Term
|
Definition
| Required recovery time following a disaster 72 hours? |
|
|
Term
|
Definition
| Required recovery time following a disaster 24 hours |
|
|
Term
|
Definition
| Required recovery time following a disaster Minutes to Hours |
|
|
Term
| Maximum Tolerable Period of Disruption (MTPD) or (MTD) |
|
Definition
-
The period of time after which an organization's viability will be irrevocably threatened if delivery of a particular product or service cannont be resumed.
-
Or, a critical business system to be disabled for over long period.
|
|
|
Term
| Recovery Time Objective (RTO) |
|
Definition
| Allows time for unforeseen difficulty with recover or in other words is lower than critically necessary. |
|
|
Term
immediately following an exercise
following a major change in personnel
after installing software |
|
Definition
| A BCP should be updated and maintained |
|
|
Term
|
Definition
| Regardless of industry, which element of legal and regulatory requirements are all industries subject to? |
|
|
Term
| Meeting pre-determined time frame. |
|
Definition
| After the completion of BIA, recovery strategies must be developed. The primary concern of these recovery strategies is? |
|
|
Term
|
Definition
| What establishes the effect of disruptions on the organization? |
|
|