CISSP培训-业务连续性和灾难恢复计划

CISSPCISSPBusinessCon[e-mail]4006-866-833CBKThecandidatewillbeexpectedtoknowthedifferencebtbitiitlidditbetweenbusinesscontinuityplanninganddisasterrecovery;businessplanningintermsofprojectscopeandplanning,businessimpactanalysisrecoverystrategiesrecoveryplanbusinessimpactanalysis,recoverystrategies,recoveryplandevelopment,andimplementation.Thecandidateshouldunderstanddisasterrecoveryintermsofrecoveryplandevelopment,implementationandrestoration—CISSPCBKCopyright©20094006-866-833•BCPDRP•BCPDRP•BCP•BCP•BCP•BIA•BackupRecovery•BackupRecovery•BCPCopyright©20094006-866-833•BCPDRP•BCPDRP•BIA••••••Copyright©20094006-866-833„„„BCP„BCP„„BCP„BCPCopyright©20094006-866-833„„„„BCPCopyright©20094006-866-833911zzCopyright©20094006-866-833•••99•55•55•4578•••3••••Copyright©20094006-866-833•Ericsson•Nokia12%9%•Nokia9%27%30%27%Copyright©20094006-866-833„„„„BCPCopyright©20094006-866-833•Disaster•DisasterUnplannedCalamitousEventsNaturalMan-Made//System/TechnicalSupplySystemsCopyright©20094006-866-833•Critical•CriticalBusinessFunctions––––••––Copyright©20094006-866-833•Gartner•Gartner–2/5–1/32•–75%–43%Copyright©20094006-866-833„„„„BCPCopyright©20094006-866-833•BCP••–EmergencySituationEmergencySituationMeasuredResponse–––––––IndustryComplianceRequirementCopyright©20094006-866-833BCPPlanTestingTrainingPjtBusinessIdentifyPreventiveDevelopRecoveryStrategiesDesignandDevelopmentTrainingMaintainingProjectManagementandInitiationImpactAnalysiscontrolsStrategiesCopyright©20091234564006-866-833BCPBiCtiitPlBusinessContinuityPlanBusinessRecoveryPlanITITContingencyPlanDisasterRecoveryPlanCCyberIncidentResponsePlanOccupantEmergencyPlanCrisisCommunicationsPlanCopyright©2009OccupantEmergencyPlanCrisisCommunicationsPlan4006-866-833•BCPBCPVs.DRP•BCP–––Continuity•DRP––ITR–RecoveryCopyright©20094006-866-833BCPBCPCopyright©20094006-866-833•BCP•–GB/T20988-2007–NIST800-34(IT)()–•––©20094006-866-833„„„BCPBCP„„BCPBCP„„BCP„BCPCopyright©20094006-866-833BCP„„„Copyright©20094006-866-833BCPBCPBCPBCPCopyright©20094006-866-833BCPGoalScopepNeedsBCPPrinciplesGuideline(BusinessContinuityPolicyStatement)ResponsibilityAccountabilityAccountabilityRequirementsCopyright©20094006-866-833Objective-to-taskmappingResource-to-taskmapping(PjtPl)MilestonesBdttit(ProjectPlan)BudgetestimatesSuccessfactorsDeadlinesCopyright©20094006-866-833BCP„„„Copyright©20094006-866-833•BusinessContinuityCoordinatorBCP•BusinessContinuityCoordinatorBCPPlanningPreparingTrainingpgg–SeniorManagement–––BCPBCPCommittee––––Copyright©20094006-866-833BusinessUnitRepresentativeLegalRepresentativesBCPBCPCittInformationSecurityDepartmentUsersBCPCommitteeRecoveryTeamsCrisisManagementTeamSystemandNetworkExpertsCopyright©2009RecoveryTeams4006-866-833„„BCP„BCP„„„BCP„BCPCopyright©20094006-866-833BIA„BIA„BIACopyright©20094006-866-833•BusinessImpactAnalysisBIA•BusinessImpactAnalysis•BIABIA–Quantitative)–Qualitative•BIAPriorities–MaximumTolerableDowntime–InterdependenciesCopyright©20094006-866-833•Lossinrevenue•Lossinrevenue•Delayedincomecosts•Lossinproductivity•Lossinproductivity•Increaseinoperationalexpenses•Lossinreputationandpublic•Lossinreputationandpublicconfidence•LossofcompetitiveadvantagesLossofcompetitiveadvantages•Violationsofcontractagreements•Violationsoflegalandregulatory•ViolationsoflegalandregulatoryrequirementsCopyright©20094006-866-833BIA„BIA„BIACopyright©20094006-866-833•InformationGatheringTechniquesBIA•InformationGatheringTechniques–(surveys)(questionnaires)–(qualitative)(quantitative)(q)(q)•Interviewees•(criticalbusinessfunctions)()•MTD•••BIABIA––Copyright©20094006-866-833•BIA•BIA––InterdependenciesInterdependencies––––––Copyright©2009–4006-866-833•OrganizeCorrelateAnalyses•OrganizeCorrelateAnalysesConfirm•ITIT•ITInterdependenciesp•RecoveryWindows•Copyright©20094006-866-833•Humanresources•Humanresources–•ProcessingcapabilityProcessingcapability–•Physicalinfrastructurey–•Computer-basedservices–•ApplicationandData–•DocumentsandpapersCopyright©2009–4006-866-833•PowerOutage•PowerOutage•FireFloodingStorm•FailureMalfunction•FailureMalfunction•••••TerroristAttacksExplosions•TerroristAttacksExplosionsStrikes••Copyright©20094006-866-833•InterDependenciesMTD•InterDependencies•MaximumTolerableMaximumTolerableDowntimeMTD–1–2472–72–7–3030•MTDsCopyright©20094006-866-833BIA12632GB/T204530988-200344712Copyright©20094006-866-833•BIA1•BIACopyright©20094006-866-833•Whatisoneofthefirststepsindevelopingabusiness1•Whatisoneofthefirststepsindevelopingabusinesscontinuityplan?A.IdentifybackupsolutionypB.Decidewhetherthecompanyneedstoperformawalk-through,parallel,orsimulationtestCPfbiitliC.PerformabusinessimpactanalysisD.DevelopabusinessresumptionplanCopyright©20094006-866-833•Whichofthefollowingactionsisleastimportantwhen2•Whichofthefollowingactionsisleastimportantwhenquantifyingrisksassociatedwithapotentialdisaster?A.Gatheringinformationfromagenciesthatreporttheprobabilityofggppycertainna