security lab 6

NT2580 Student LabManual

LABORATORY

-

N

Lawrence Small

1/30/15

Week 3 lab2


LABORATORY

-

N


LABORATORY

-

N

Lab Assessment Questions & Answers

1. What is the different between a risk analysis (RA) and a business impact analysis (BIA)?

Risk analysis is often identifying the potential threats and the associated vulnerabilities to the organizations .Risk analysis doesn’t view the organization from the mission critical Business Process point of view.

2. What is the difference between a Disaster Recovery Plan and aBusiness Continuity Plan?

Disaster recovery is the process by which you resume business after a disruptive event. Business continuity planning suggestsa more comprehensive approach to making sure you can keep making money in the face of a disruptive event.

3. Typically, a business continuity plan is also a compilation or collection of other plans. What other plans might a BCP and all supporting documents include?

Technical Backup Plan: showing ways to recover smoothly from technical difficulties.

Communication Plan: How to communicate the problem to the company.

4. What is the purpose of a risk assessment and business impact analysis? Why is this an important first step in defining a BCP and DRP?

The purpose of a Business Impact and Risk Assessment is to determine the approximate business value of IT assets, to assess the impact the loss of those assets would have on


LABORATORY

-

N

business units, and to assign recovery priorities to the assets.

5. How does risk assessment (RA) relate to a business impact analysis for an organization?

6. Given the list of identified mission critical business functions and processes, what kind of company would you say this organization is, and what do you think are its most important business processes and functions?IT Company; Risk Analysis & Disaster Recovery Plan to get the business up and running on the web.


LABORATORY

-

N

7. Given the prioritization list provided for the organization's identified business functions and processes, write an assessmentof how this prioritization will impact the need for IT systems, applications, and data access.

8. For the top 5 identified business functions and processes, what recovery time objective (RTO) would you recommend for this organization and why?

9. Why is payroll for employees and Human Resources listed as a co-number 1 business priority?It is listed as a number one because it is highly what runs the office and something very important for these two parts to be correct. The employees are the most valuable resource a company can have so make those two things top priority is a must.

security lab 6

Documents