Business Continuity Management Quiz: CPMT and Planning Terminology

Study Notes

Contingency Planning

Adverse event: an event with negative consequences that could threaten an organization's information assets or operations
Incident: an adverse event that could result in loss of an information asset or assets, but does not currently threaten the viability of the entire organization
Disaster: an adverse event that could threaten the viability of the entire organization

Business Continuity Planning

Business Continuity Plan (BCP): a documented plan showing an organization's intended efforts to continue critical functions when operations at the primary site are not feasible
Business Continuity Planning (BCP): actions taken by senior management to develop and implement the BC policy, plan, and continuity teams
Business Resumption Planning (BRP): actions taken by senior management to develop and implement a combined DR and BC policy, plan, and set of recovery teams

Contingency Planning

Contingency Plan: a documented product of contingency planning; a plan that shows an organization's intended efforts in reaction to adverse events
Contingency Planning (CP): actions taken by senior management to specify an organization's efforts and actions if an adverse event becomes an incident or disaster
Contingency Planning Management Team (CPMT): a group of senior managers and project members organized to conduct and lead all CP efforts

Disaster Recovery Planning

Disaster Recovery Plan (DRP): a documented product of disaster recovery planning; a plan that shows an organization's intended efforts in the event of a disaster
Disaster Recovery Planning (DRP): actions taken by senior management to specify an organization's efforts in preparation for and recovery from a disaster

Incident Response Planning

Incident Response Plan (IRP): a documented product of incident response planning; a plan that shows an organization's intended efforts in the event of an incident
Incident Response Planning (IRP): actions taken by senior management to develop and implement the IR policy, plan, and computer security incident response team

Business Impact Analysis

Business Impact Analysis (BIA): an investigation and assessment of various adverse events that can affect an organization, conducted as a preliminary phase of the contingency planning process
BIA determines how critical a system or set of information is to an organization's core processes and recovery priorities

Recovery Objectives

Maximum Tolerable Downtime (MTD): the total amount of time the system owner or authorizing official is willing to accept for a mission/business process outage or disruption
Recovery Point Objective (RPO): the point in time prior to a disruption or system outage to which mission/business process data can be recovered after an outage
Recovery Time Objective (RTO): the maximum amount of time that a system resource can remain unavailable before there is an unacceptable impact on other system resources, supported mission/business processes, and the MTD
Work Recovery Time (WRT): the amount of effort (expressed as elapsed time) necessary to make the business function operational after the technology element is recovered

Description

Explore key terms related to business continuity planning such as adverse event, business continuity plan (BC plan), and business continuity planning (BCP). Test your understanding of how organizations prepare to continue critical functions during disruptive events.