How does a bcp help mitigate risk

Computer Science

Access the Labs link provided by WOW using your own pass code. By now, you should have received the link and the pass code via separate e-mails.
To complete Lab 7, please access and complete the lab activities under Topic 3: Performing a Business Impact Analysis for a Mock IT Infrastructure.
To complete Lab 8, please access and complete the lab activities under Topic 4: Developing an Outline for a Business Continuity Plan for an IT Infrastructure.

Performing a Business Impact Analysis for a Mock IT Infrastructure

Course Name and Number: _____________________________________________________ Student Name: ________________________________________________________________ Instructor Name: ______________________________________________________________ Lab Due Date: ________________________________________________________________

Overview

In this lab, you defined a BIA’s goal and objective, you identified where the BIA fits in the business continuity plan (BCP), you identified mission-critical applications and data access requirements, you performed a BIA qualitative assessment approach, and you created a BIA executive summary report for management.

Lab Assessment Questions & Answers

1. What is the goal and purpose of a business impact analysis (BIA)?

2. Why is a business impact analysis (BIA) an important first step in defining a business continuity �plan (BCP)?

3. What is the definition of recovery time objective (RTO)? Why is this important to define in an IT Security Policy Definition as part of the business impact analysis (BIA) or business continuity plan (BCP)?

4. How do risk management and risk assessment relate to a business impact analysis (BIA) for an IT infrastructure?

Performing a Business Impact Analysis for a Mock IT Infrastructure

5. True or false: If the recovery point objective (RPO) metric does not equal the recovery time objective (RTO), you can potentially lose data that might not be backed up. This represents a gap in potential lost or unrecoverable data.

6. If you have an RPO of 0 hours, what does that mean?

7. What must you explain to executive management when defining RTO and RPO objectives for the BIA?

8. What questions do you have for executive management in order to finalize your BIA?

9. Why do customer service business functions typically have a short RTO and RPO maximum allowable time objective?

10. To write backup and recovery procedures, you need to review the IT systems, hardware, software, and communications infrastructure that supports business operations and functions, and you need to define how to maximize availability. This alignment of IT systems and components must be based on business operations, functions, and prioritizations. This prioritization is usually the result of a risk assessment and how those risks, threats, and vulnerabilities impact business operations and functions. What is the proper sequence of development and implementation for the following plans?:

Business Continuity Plan: Disaster Recovery Plan: Risk Management Plan: Business Impact Analysis:

Course Name and Number:
Student Name:
Instructor Name:
Lab Due Date:
Text67:
Text68:
Text69:
Text70:
Text71:
Text72:
Text73:
Text74:
Text75:
Text76: