Module 05 Incident Response and Contingency Planning

_____ is a contractual document guaranteeing certain minimal levels of service provided by a vendor.

Service agreement

A crime involving digital media, computer technology, or related components is best called an act of _____.

digital malfeasance

A(n) _____ is a document containing contact information for the people to be notified in the event of an incident.

alert roster

Most common data backup schemes involve _____.

RAID & disk-to-disk-to-cloud

both a and b

A fundamental difference between a BIA and risk management is that risk management focuses on identifying threats, vulnerabilities, and attacks to determine which controls can protect information, while the BIA assumes that _____.

All of the above

Which type of organizations should prepare for the unexpected?

organizations of every size and purpose

Using a service bureau is a BC strategy in which an organization contracts with a service agency to provide a facility for a fee.

True

Incident detail assessment determines the impact from a breach of confidentiality, integrity, and availability on information and information assets.

False

A disaster is any adverse event that could result in loss of an information asset or assets but does not currently threaten the viability of the entire organization.

False

Business impact analysis is a preparatory activity common to both CP and risk management.

True