Domain 2 Reading

Business Continuity Planning

  • Business Continuity: Keep a business running in the face of adversity

  • Scoping Questions

    • Which business activities are covered

    • What systems are covered

    • What controls are considered

      • Make things redundance and fault-tolerant

  • Business Impact Analysis: Impact assessment that starts by identifying mission essential functions and traces them backwards to identify the IT systems that support the processes

  • Disaster Recovery: Subset of business continuity activity designed to restore a business to normal opoerations as quickly as possible

    • Recovery Time Objective: Targeted amount of time that it will take to restore a service to operation following a disruption

    • Recovery Point Objective: Maximum time period from which data may be lost as a result of disaster

    • Recovery service level: Percentage of service that must be available during a disaster

    • Disaster recovery only stips when an organiation is back to normal operations

  • Backups: Failsafe way to recover data in the event of a technology failure, error, or disaster