CHAPTER 1 – INTRODUCTION TO DISASTER RECOVERY
TRUE/FALSE
1. Five out of every ten organizations surveyed have been through a disaster.
2. A good public image is an asset that takes years to achieve and considerable diligence to maintain.
3. Developing a solid disaster recovery plan only requires the support of an organization’s upper
managers.
4. Planners must continually evaluate new threats and business conditions as they develop.
5. Disaster recovery planning can be broken down into 10 major steps.
6. In general, three major groups staff an organization’s disaster recovery function.
7. In organizations of 250 or fewer employees, a centralized office of disaster recovery is probably not
necessary.
8. All business processes must be identified and analyzed during a business impact analysis.
9. Most managers surveyed think that testing and rehearsing recovery plans are not beneficial.
10. IT and network managers help develop and deliver training to department managers and employees
who will assist in recovery procedures for computer systems and networks.
MODIFIED TRUE/FALSE
1. To successfully manage business continuity during a disaster and restore normal operations,
organizations require a good disaster protection plan. _________________________
2. The underlying philosophy of disaster recovery needs to be rooted in an organization’s desire to protect
and preserve its positive public image. _________________________
3. Most organizations have had a disaster recovery plan in place for more than one year.
_________________________
4. An organization’s community relations units are dedicated to polishing public image.
_________________________
5. A major effort of publicly traded companies is trader and investor relations.
_________________________
6. All policies and procedures in the disaster recovery plan must support the daily needs of business
operations. _________________________
7. All policies and procedures in the disaster recovery plan must be documented clearly so that all
participating employees can understand and implement them. _________________________
8. A specialized group is more important in large organizations because disaster response and
coordinated recovery efforts are more complex. _________________________
9. Disaster recovery planners must work within the structures of the organization for which the plan is
being developed. _________________________
10. Every participating department in a disaster recovery planning team should assign a primary
representative and an alternate to the team. _________________________
MULTIPLE CHOICE
1. How many out of every 10 organizations have suffered disasters?
a.
2
c.
7
b.
3
d.
8
2. How many organizations out of 10 do not have a disaster recovery plan in place?
a.
1
c.
2
b.
3
d.
4
3. How many organizations out of 10 have had disaster recovery plans in place for more than 10 years?
a.
1
c.
4
b.
2
d.
5
4. How many organizations out of 10 say that spending for disaster recovery planning has increased since
September 2001?
a.
1
c.
3
b.
2
d.
8
5. How many organizations out of 10 report spending less on disaster recovery planning since September
2001?
a.
0
c.
2
b.
1
d.
3
6. Assessing an organization’s risks requires a realistic understanding of which of the following
condition(s)?
a.
Environmental
d.
Both a and b
b.
Social
e.
a, b, and c
c.
Political
7. How many major steps are there in disaster recovery planning?
a.
6
c.
8
b.
7
d.
10
8. How many groups staff an organization’s disaster recovery function?
a.
4
c.
3
b.
2
d.
5
9. In which step of disaster recovery planning should the team be trained in disaster recovery planning?
a.
Organizing the team
c.
Preparing to handle disasters
b.
Developing policies and procedures
d.
Ongoing management
10. In which step of disaster recovery planning are all business processes identified and analyzed?
a.
Assessing risks in the enterprise
c.
Preparing to handle disasters
b.
Developing policies and procedures
d.
Ongoing management
11. In which step of disaster recovery planning does the planning team determine the contribution that
each department can make to the plan and disaster recovery?
a.
Organizing the team
b.
Developing policies and procedures
c.
Establishing roles across departments and organizations
d.
Ongoing management
12. In which step of disaster recovery planning does the planning team determine the interdependency of
each department and organization involved?
a.
Organizing the team
b.
Establishing roles across departments and organizations
c.
Developing policies and procedures
d.
Documenting disaster recovery procedures
13. In which step of disaster recovery planning is each policy and procedure drafted, reviewed, and
approved by management and all of the departments and organizations responsible for its
implementation?
a.
Organizing the team
b.
Assessing risks in the enterprise
c.
Documenting disaster recovery procedures
d.
Preparing to handle disasters
14. In which step of disaster recovery planning is the final plan distributed to all of the departments,
organizations, and employees involved in disaster response and recovery?
a.
Organizing the team
b.
Developing policies and procedures
c.
Documenting disaster recovery procedures
d.
Preparing to handle disasters
15. In which step of disaster recovery planning do all departments and support organizations run through
the entire disaster recovery process?
a.
Organizing the team
c.
Preparing to handle disasters
b.
Developing policies and procedures
d.
Training, testing, and rehearsal
16. In which step of disaster recovery planning does the planning team assess the emergence of new
threats, adjust for changes in organizational structure, and determine the impact of new technology on
recovery procedures?
a.
Ongoing management
c.
Assessing risks in the enterprise
b.
Organizing the team
d.
Training, testing, and rehearsal
17. How many companies out of 10 stated that their worst disaster would affect their national
infrastructure?
a.
1
c.
3
b.
2
d.
4
18. How many companies out of 10 stated that their worst disaster would be fire-related?
a.
4
c.
3
b.
2
d.
1
19. How many out of 10 organizations do not test or rehearse disaster recovery plans?
a.
1
c.
3
b.
2
d.
4
20. How many organizations out of 10 rehearse their entire disaster recovery plan?
a.
0
c.
2
b.
1
d.
4
21. How many organizations out of 10 update their disaster recovery plans as needed?
a.
2
c.
5
b.
4
d.
7
22. What do IT and network managers do during risk assessment and business impact analysis?
a.
Determine how many IT staff need to be on the team
b.
Help answer questions about potential consequences from system downtime
c.
Help develop and deliver training to department managers and employees
d.
Support and manage the ongoing disaster recovery plan
23. During a business impact analysis, how are business processes ranked?
a.
Necessary, critical, essential, desirable
b.
Critical, essential, necessary, desirable
c.
Essential, critical, necessary, desirable
d.
Desirable, necessary, essential, critical
24. In which step of disaster recovery planning should legal and contractual requirements be reviewed?
a.
Organizing the team
c.
Assessing risks in the enterprise
b.
Developing policies and procedures
d.
Preparing to handle disasters
25. In which step of disaster recovery planning should an awareness campaign about disaster recovery
planning begin?
a.
Organizing the team
b.
Assessing risks in the enterprise
c.
Establishing roles across departments and organizations
d.
Training, testing, and rehearsal
26. The planning team must establish procedures for communicating with which of the following?
a.
Employees
d.
Emergency services
b.
Media
e.
All of the above
c.
Law enforcement
YES/NO
1. Nearly 50% of organizations reported having a disaster plan in place.
2. Is disaster recovery planning simply a mechanical process?
3. Can an organization achieve excellent customer service by sending memos that encourage employees
to be nice to customers?
4. Are efforts to maintain faith and trust of investors less expensive than those required to regain lost
faith?
5. Has disaster recovery planning intensified since September 2001?
6. Can any off-the-shelf disaster recovery plan meet the needs of all organizations?
7. Do all employees involved in disaster response and recovery need to be trained to implement
documented procedures and to address unanticipated problems?
8. Evaluating the effectiveness of the disaster recovery plan should only be done during testing and
rehearsal.
9. Implementing the disaster recovery plan and responding to disaster is an organization-wide effort.
10. To be effective, the disaster recovery plan must be updated to ensure that business operations are
sustainable over long periods of time.
COMPLETION
1. The disaster recovery planning team should be ____________________ in disaster recovery planning
by attending an in-house session taught by a knowledgeable instructor.
2. When teams work without ____________________ or deadlines, projects tend to flounder or not
receive the attention they need.
3. Many organizations conduct a(n) ____________________ analysis to determine what types of backup
systems and disaster recovery processes they need to mitigate damage.
4. When an organization has ____________________ locations, it must identify local departments and
employees who can participate in disaster recovery planning.
5. ____________________ charts and work flow analysis are often required to illustrate the
interdependency of organizations and procedures.
6. A group must be established to manage ____________________ and the cycles of reviews, approvals,
and updates.
7. During the ____________________, observers monitor and evaluate response to determine how well
the procedures are implemented.
8. In many industries, planning teams may also need to monitor changes in laws and
____________________ that may affect their disaster recovery requirements.
9. The IT and ____________________ management in every organization have essential roles in disaster
recovery planning and response.
10. All ____________________ managers dream that customers will view their product as having high
quality and good value.
MATCHING
Match the following terms to the appropriate definition.
a.
Business impact analysis
d.
Disaster recovery policies
b.
Disaster recovery function
e.
Disaster recovery procedures
c.
Disaster recovery planning
1. People that facilitate disaster recovery
2. Step-by-step methods
3. Assessment of risks that an enterprise faces
4. Govern the development of disaster recovery procedures
5. Involves assessing the risks of an organization and developing procedures
Match the following steps to the proper disaster recovery plan definition.
a.
Step 2
e.
Step 3
b.
Step 5
f.
Step 1
c.
Step 7
g.
Step 9
d.
Step 4
6. Training, testing, and rehearsal
7. Organizing the team
8. Developing policies and procedures
9. Assessing risks in the enterprise
10. Establishing roles across departments and organizations
SHORT ANSWER
1. What is the first essential principle of a solid disaster recovery plan?
2. What are the three implications of managerial support and participation in a disaster recovery plan?
1. Implementing the plan and responding to disaster is and organization-wide effort.
2. Plan development requires many types of knowledge and skills.
3. Every organization-wide effort is laden with social and political obstacles that need to be addressed
during planning.
3. What three major groups staff an organization’s disaster recovery function?
ANS:
4. What is the disaster recovery planning team?
5. What is a disaster recovery rehearsal?
6. Ideally, who should be the champion of the disaster recovery planning team?
7. What do the results of the business impact analysis help to do?
8. Staff from which departments are involved in every disaster recovery planning step?