Information Security - Contingency Planning

Contingency planning is a program developed to prepare for, react to, and recover from events that threaten the security of an organization's information assets.

The main goal of contingency planning is to restore normal modes of operation with minimal cost and disruption to normal business activities after an unexpected event.

<p>True</p> Signup and view all the answers

<p>A planning methodology, a policy environment, an understanding of the causes and effects of core precursor activity (BIA), and access to financial and other resources</p> Signup and view all the answers

<p>BIA stands for Business Impact Analysis. It is used to identify the potential impact of a disruption on the organization's critical business processes and information assets.</p> Signup and view all the answers

<p>BIA assumes controls have been bypassed, failed, ineffective, or the attack succeeded, while risk management focuses on identifying threats and vulnerabilities</p> Signup and view all the answers

<p>An IRP is designed to anticipate, detect, and mitigate the effects of an unexpected event, or incident, that might compromise information resources.</p> Signup and view all the answers

<p>False</p> Signup and view all the answers

<p>Incident classification is the process of examining a possible incident and determining whether it is indeed an incident or a false alarm.</p> Signup and view all the answers

<p>During the incident, after the incident, before the incident</p> Signup and view all the answers

<p>The two main tasks involved are stopping the incident and recovering control of the affected systems.</p> Signup and view all the answers

<p>An alert roster is a document containing contact information for individuals who need to be notified in the event of a security incident.</p> Signup and view all the answers

<p>Incident damage assessment is the immediate determination of the scope of a security breach, assessing the impact on confidentiality, integrity, and availability of information assets.</p> Signup and view all the answers

<p>False</p> Signup and view all the answers

<p>A disaster occurs when either the organization is unable to contain or control the impact of an incident, or the level of damage or destruction from an incident makes quick recovery impossible.</p> Signup and view all the answers

<p>The main objective of a DRP is to define how to reestablish operations at the location where the organization is usually located, in case of a disaster.</p> Signup and view all the answers

<p>Develop a DR planning policy statement, review the BIA, identify preventive controls, develop recovery strategies, develop the DR plan document, and plan testing, training, and exercises.</p> Signup and view all the answers

<p>The business manager leads the DR team and is responsible for developing the DR policy, which outlines the plan's purpose, scope, roles and responsibilities, resources, training, exercises, maintenance, and special considerations.</p> Signup and view all the answers

<p>False</p> Signup and view all the answers

<p>A BCP ensures that critical business functions can continue if a disaster occurs, enabling the organization to maintain operations despite disruptions.</p> Signup and view all the answers

<p>False</p> Signup and view all the answers

<p>A BCP is activated and executed concurrently with the DR plan when a disaster is major or long-term, requiring a comprehensive and complex restoration of information and IT resources.</p> Signup and view all the answers

<p>Hot sites, warm sites, cold sites</p> Signup and view all the answers

<p>A hot site is a fully configured computer facility, including all services, communication links, and physical plant operations. It replicates critical computing resources, systems, peripherals, and applications, enabling a relatively quick and seamless transition in the event of a disaster.</p> Signup and view all the answers

<p>Timeshare, service bureau, mutual agreement</p> Signup and view all the answers

<p>True</p> Signup and view all the answers

<p>False</p> Signup and view all the answers

<p>A mutual agreement is a contract between two organizations where each party agrees to assist the other in the event of a disaster, providing mutual support and resource sharing.</p> Signup and view all the answers

<p>Business resumption planning refers to the combination of DR and BC plans into a single planning document, providing a comprehensive framework for disaster recovery and business continuity.</p> Signup and view all the answers

<p>Desk check, structured walk-through, simulation, parallel testing, and full interruption</p> Signup and view all the answers

<p>A desk check is a simple review of the contingency plan documents to ensure that they are complete, well-organized, and consistent with current policies and procedures.</p> Signup and view all the answers

<p>A structured walk-through involves bringing together members of the contingency planning team and walking through each step of the plan, discussing roles, responsibilities, processes, and procedures.</p> Signup and view all the answers

<p>A simulation involves simulating a disaster scenario, testing the plan in a controlled environment to assess how the organization responds and whether the procedures are effective.</p> Signup and view all the answers

<p>Parallel testing involves running both the primary system and the backup system simultaneously, testing the backup system's functionality and ensuring a smooth transition in the event of a disaster.</p> Signup and view all the answers

<p>Full interruption testing involves shutting down the primary system and relying entirely on the backup system to operate, simulating a complete outage.</p> Signup and view all the answers