Section 5 Business Continuity

Business Continuity Planning (BCP)

The set of controls designed to keep a business running in the face of adversity, whether natural or man-made.

BCP is also known as

Continuity of Operations Planning (COOP)

Business Continuity supports which security objective?

Availability

Business Impact Assessment (BIA)

A risk assessment that uses a quantitative or qualitive process and identifies org mission essential functions and then traces those backwards to identify critical IT systems that support these processes.

Business Continuity in the cloud requires

collaboration between providers and customers

Redundancy protects

against the failure of a single component

Single Point of Failure Analysis

provides security professionals with a mechanism to identify and remove single points of failure within their systems.

A single Web server architecture has

many single points of failure

What address the single point of failure at a web server

Clustering

SPOF analysis continues until

the cost of addressing risks outweighs the benefit

High Availability (HA)

uses multiple systems to protect against service failure

Fault Tolerance (FT)

makes a single system resilient against technical failures

Load Balancing

spreads demand across systems; different goal to HA

Redundant Array of Inexpensive Disks (RAID)

provides redundancy by having more disks than needed to meet business needs. (protects failure of a single storage device)

Disk Mirroring is also known as

RAID level 1

Disk Mirroring

each server contains two disks and each have identical contents and when the system writes to one it automatically does the same change to the other.

Disk Striping with Parity is also known as

RAID Level 5

Disk Striping with Parity

Uses three or more disks to store data and parity information

RAID is an example of

Fault Tolerance

Examples of Network Redundancy

• Having Multiple ISPs

• Dual Network Interface Cards aka NIC teaming

• Multipath Networking

How many disk in RAID level 5?

Three or more

Important to use

A diverse set of technologies