Business Continuity Flashcards
7 cards from real CCISO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity flashcards as text
An organization stores encrypted backup tapes off-site. Which BC control does this practice primarily support?
Answer: Data availability and integrity for recovery operations
Off-site encrypted backup tapes ensure data remains available and uncompromised for recovery even if the primary site is completely destroyed.
What is the relationship between Disaster Recovery Planning (DRP) and Business Continuity Planning (BCP)?
Answer: DRP is an IT-focused subset of the broader BCP
DRP focuses on restoring IT systems and infrastructure, while BCP encompasses the broader strategy for maintaining all business functions during and after a disruption.
Which document formally records the results of a BIA, including critical processes, dependencies, and recovery priorities?
Answer: BIA Report
The BIA Report is the formal deliverable that captures all findings, including process criticality rankings, interdependencies, RTOs, RPOs, and resource requirements.
A CISO implements a reciprocal agreement with a partner organization for BC purposes. What is the main risk of this arrangement?
Answer: Both organizations may be affected by the same regional disaster simultaneously
Reciprocal agreements are cost-effective but risky if both organizations are in the same geographic region or industry sector and face the same disaster event.
Which BC strategy involves running parallel operations at both the primary and recovery sites simultaneously to ensure zero downtime?
Answer: Active-active configuration
An active-active configuration has both sites processing transactions simultaneously, so if one fails, the other continues without any service interruption.
When conducting a BCP audit, which finding would be considered the most critical gap?
Answer: Key personnel have never tested the plan and do not know their recovery roles
An untested plan with personnel unaware of their roles is effectively non-functional; the most dangerous gap is people not knowing what to do when a real disaster occurs.
Which framework specifically provides internationally recognized guidance for Business Continuity Management Systems?
Answer: ISO 22301
ISO 22301 is the international standard for Business Continuity Management Systems (BCMS), providing requirements for planning, implementing, and improving business continuity.