Which of the following is ultimately accountable for effective business continuity and disaster recovery controls?

These are steps included in business process re-engineering: a) Gain an understanding of the business process to be reviewed, b) Establish a continuous improvement process, c) Redesign and streamline the process, d) Define the areas to be reviewed, e) Implement and monitor the new process, f) Develop a project plan. What is the proper sequence of these steps?

A. d, f, a, c, e, b
B. a, f, d, c, e, b
C. f, a, d, c, e, b
D. d, a, f, c, e, b

Answer: A

Of the options, the most effective would be to regularly review the currency of information detailed in the plan, such as contact names and locations, backup frequency and content, recovery procedures, etc. Regular recovery exercises should be held, but it is better that staff who are not recovery experts are involved. This will provide better assurance that, should a disaster occur, the plan can be used by any staff available. Exercises should be planned and announced, an unplanned test, however frequently performed, will be more difficult to evaluate and is less likely to provide assurance that the plan is effective. Unannounced shut down of primary processing should not be a consideration at any time due to the potential effect on "live" processing should the recovery fail.

Who is ultimately accountable for effective business continuity and disaster recovery control?

Security administratorsC. Network administratorsD. Executive officersAnswer: DThe executive officers of an organization are ultimately accountable corporategovernance, which includes decisions to have or forego BCP/DRP controls.

Who is responsible for an effective business continuity program?

It is important that business continuity management has the full support of an organisation's most senior committee to ensure the initiative does not stall. One member of this committee should be made the overall sponsor with responsibility for initiating BCM across the entire organisation.

Who is responsible for disaster recovery in a company?

Disaster Recovery Coordinator Also known as a crisis management coordinator, this person should be a business leader within your organization who will oversee the execution of your disaster recovery (this is primarily IT-focused) plan as a whole.

Which of the following is commonly the first priority of business continuity/disaster recovery?

The first priority of a business continuity plan is to *avoid* disaster.” The purpose of a DR plan is to recover your hardware, software and apps after a disaster.