1
Guide to Disaster Recovery
Chapter 3 Solutions
Review Questions
1. The key to successfully measuring the likelihood of threats being realized is ____________.
2. What types of systems are installed systems? Answer: Computer networks, telephone systems, fire
3. What information does the light equipment exposure inventory sheet provide? Answer: A list all of
4. Explain why risk assessment is the fundamental building block of disaster recovery planning, and
why future steps in the planning process and successful disaster recovery depend on it. Answer:
5. Explain why financial requirements may affect the necessity to quickly recover a specific business
6. Explain what an exposure inventory is. Answer: An annotated list of all facilities, processes,
7. What is the purpose of the facility exposure inventory overview sheet? Answer: It is designed to
8. What is the purpose of the heavy equipment exposure inventory sheet? Answer: It lists all of the
9. What are the five key goals of a typical product-focused organization? Answer: Revenue collection,
10. What are the five key goals of a typical service-focused organization? Answer: Revenue collection,
11. What information does a business process inventory illustrate? Answer: 1.) How a process works.
2
12. The scope of exposure inventory has nothing to do with the size of the organization, the number of
13. The physical facilities exposure inventory sheet should be filled out only for very large buildings.
14. The personnel exposure inventory sheet should only cover employees who have worked for the
15. The information technology exposure inventory sheet only lists mainframes and servers. Answer:
17. When a business process spans more than one department, how can the disaster recovery planning
team determine how the business process actually works? Answer: Representatives from each
18. Why should business process inventory sheets be maintained for each facility or each group of
related facilities in the business process? Answer: To provide details on the process and which
19. Why is it necessary to know which resources are required to support each business process?
20. What information does the business process threat mitigation sheet provide? Answer: Details of the
21. What is the purpose of a risk assessment report? Answer: A risk assessment report describes an
22. What factors influence the format and length of a risk assessment report? Answer: The complexity
3
23. When compiling a risk assessment report, what should the authors do to make it a more valuable
24. Why should risk assessment reports be treated as confidential material? Answer: The report may
25. Under what conditions should people outside an organization have access to a risk assessment
Hands-On Projects Tips
The hands-on projects in this text are designed for students to gain experience in developing a disaster recovery
plan. Students are expected to select an organization for which to develop a plan. This may be easier for students
that are in adult-oriented evening programs than it is for students in a traditional four-year program or graduate
program and who are not employed or do not have any work experience. Students can work solo or in groups to
develop the disaster recovery plan.
The projects in each chapter call for students to develop sections of a disaster recovery plan that are explained in
that chapter. As the course is completed the students should have their disaster recovery plan completed.
In grading the hands-on projects the instructor should consider the following:
Project 3-1
This project is designed for the student to learn how to conduct exposure inventories. Students are to use the
sample exposure inventory forms or create a similar form on their own. Students should compile inventories
for facilities that their planning team considers most critical to the organization for which the student(s) are
developing a disaster recovery plan. Students should complete exposure inventory sheets for applicable
personnel, heavy equipment, light equipment, installed systems, information technology, office equipment,
and products or parts.
4
Project 3-2
This project is designed for the student to learn how to complete business process inventory and support
requirements analysis for revenue collection. Students are to use the sample business process exposure
Project 3-3
This project is designed for the student to learn how to complete business process inventory and support
Project 3-4
This project is designed for the student to learn how to complete business process inventory and support
Project 3-5
This project is designed for the student to learn how to complete business process inventory and support
Project 3-6
This project is designed for the student to learn how to complete business process inventory and support
Project 3-7
This project is designed for the student to learn complete a facility threat inventory sheet. This inventory for
Project 3-8
This project is designed for the student to learn complete a business process threat inventory sheet. This
inventory for should be completed for the facilities that the planning team considers most critical to the
5
Case Projects Discussion
The case projects in this book all cover the same company, Harris and Heartfield Manufacturing. As with the
hands-on projects, the case projects are designed to build skills and knowledge for disaster recovery
Case Project: Harris and Heartfield Manufacturing
This project is designed to help students internalize the importance of disaster recovery planning and be able to
communicate their viewpoints to others. In this assignment students have been asked to work with company
Optional Team Case Assignments Discussion
The optional team case assignments in this book are designed to develop communications and research skills of
Team Case Assignment 1
This assignment is designed to familiarize students with disaster recovery planning resources on the Internet.
Students are to identify data sources for assessing weather-related threats that could help complete their
Team Case Assignment 2
This assignment is designed to familiarize students with certification for disaster recovery planners that may be
relevant in their countries. Students are to use the Internet to locate five data sources for assessing computer