1
Guide to Disaster Recovery
Chapter 10 Solutions
Review Questions
1. What is the purpose of a procedure audit? Answer: Procedure audits show if information is current,
2. How does an organization perform a live walk-through of procedures? Answer: Live walk through
3. What is the purpose of a live walk-through of related procedures? Answer: Live walk through of
4. How does an organization perform scenario testing? Answer: Scenario testing is accomplished by
5. How does an organization perform facility-level tests? Answer: Facility level tests are accomplished
6. When auditing disaster recovery procedures, what questions must the auditors address? Answer: 1.)
7. When conducting walk-through tests for disaster recovery procedures, what questions must the
8. How does an organization generally conduct audits of computer system and network vulnerability?
9. How does an organization conduct intrusion tests of computer systems and networks? Answer: By
10. Why is there resistance to large-scale scenario tests of disaster recovery plans and procedures?
2
facilities, or organizations can be consumed for hours or days to test complex scenarios. Such
resource consumption makes many managers skeptical of the value of the scenario testing method
because of an unproven ROI.
11. When staging a test of evacuation procedures, which of the following points should an organization
note and consider? (Choose all that apply.) Answer:
12. When staging a test of shutdown procedures, which of the following questions should an
organization note and consider? Answer:
13. When staging a test of lockdown procedures, what should an organization test for? Answer: 1.) How
14. What issues should organizations evaluate when testing their procedures for dealing with hazardous
materials in a disaster? Answer: 1.) Were the names, titles, and contact information of people that
15. What issues should organizations evaluate when testing their procedures for protecting art, antiques,
and collectibles in a disaster? Answer: 1.) Aspects of procedure tests for dealing Antiques, art, and
3
16. What issues should organizations evaluate when testing their procedures for protecting trade secrets
in a disaster? Answer: 1.) Were the names, titles, and contact information for people that are
17. What elements make up a test scenario? Answer: 1.) Test scenario element. 2.) The date and time
18. During a scenario test, what types of activities can be measured using quantitative data? Answer:
19. During a scenario test, what types of activities can be measured using qualitative data? Answer:
20. What information should be included in the scenario test evaluation report? Answer: title page, table
21. In the scenario test evaluation report, what data sources are used to create the chronology of events?
22. In the scenario test evaluation report, what data sources are used to create synthesized evaluation
4
Hands-On Projects Tips
The hands-on projects in this text are designed for students to gain experience in developing a disaster recovery
plan. Students are expected to select an organization for which to develop a plan. This may be easier for
students that are in adult-oriented evening programs than it is for students in a traditional four-year program
In grading the hands-on projects the instructor should consider the following:
Project 10-1
This project is designed for the student to learn how to conduct a procedure audit. Students are to conduct a
procedure audit of any three disaster recovery procedures they developed for the organization for which they
are developing a disaster recovery plan. Students should use the sample procedure audit form in Table 10-2
or create their own. The procedure audit should at least address the following questions:
Is the procedure written clearly enough to be executed? Review the clarity of language, use of terms,
Project 10-2
This project is designed for the student to learn how conduct a walk-through test of disaster recovery
procedures. Students are to conduct a walk-through test of any three disaster recovery procedures they
developed for the organization for which they are developing a disaster recovery plan. Student should use
the sample procedure audit form in Table 10-3 or create their own. The walk-through test should at least
address the following questions:
Are the steps in the procedures adequate to execute them?
5
Project 10-3
This project is designed for the student to learn how to develop a scenario to test and evaluate evacuation
procedures for the organization which they are developing a disaster recovery plan. The test scenario should
include the elements listed in Table 10-4.
Project 10-4
Project 10-6
This project is designed for the student to learn how to develop a scenario to test and evaluate hazardous
material procedures in the organization for which they are developing a disaster recovery plan. The test
scenario should include the items listed in Table 10-5.
Project 10-7
Project 10-9
This project is designed for the student to learn how to develop a scenario to test and evaluate procedures to
protect trade secrets in the organization for which they are developing a disaster recovery plan. The test
scenario should include the items listed in Table 10-8.
Project 10-10
This project is designed for the student to learn how to develop a scenario to test and evaluate procedures to
protect life forms in the organization for which they are developing a disaster recovery plan. The test
scenario should include the items listed in Table 10-9.
6
Project 10-11
Project 10-13
This project is designed for the student to learn how develop an evaluation survey to collect data from
employees who participated in the severe weather test scenario in the organization for which they are
developing a disaster recovery plan. The survey should cover at least the following topics:
Effectiveness of the plan or procedures
Case Projects Discussion
The case projects in this book all cover the same company, Harris and Heartfield Manufacturing. As with the
hands-on projects, the case projects are designed to build skills and knowledge for disaster recovery
Case Project: Harris and Heartfield Manufacturing
This project is designed to help students understand how to develop test procedures for a disaster recovery plan.
Optional Team Case Assignments Discussion
The optional team case assignments in this book are designed to develop communications and research skills of
students. The assignments in each chapter require students to do an activity that they will likely need to
accomplish during the disaster recovery planning process.
Team Case Assignment 1
This assignment requires student is to identify possible scenarios to test disaster recovery plans. Their
7
Team Case Assignment 2
This assignment requires student is to identify possible scenarios to test disaster recovery plans. Their