CISSP® Certification Domain 1 Security and Risk Management Video Boot Camp for 2022 - Business Continuity Planning - Par

The video tutorial discusses the importance of using frameworks and standards like NIST 800-34 for project management, focusing on business continuity and disaster recovery. It covers project initiation, scoping, business impact analysis, and tier systems for prioritizing critical systems. The tutorial also explains recovery strategies, plan development, testing, and maintenance, emphasizing the need for senior leadership involvement. A case study on crisis communication highlights the importance of media training.

Why is it beneficial to use publicly available frameworks and standards in project management?

• They simplify the process and prevent oversight.

• They ensure compliance with international laws.

• They are free of cost.

• They guarantee project success.

What is the purpose of a business impact analysis in project management?

• To increase project budget.

• To eliminate all risks.

• To identify and prioritize critical systems.

• To reduce project duration.

Which of the following is a preventative control measure?

• Ignoring potential risks.

• Issuing laptops with sensitive data.

• Building a data center in a flood-prone area.

• Not building in a flood-prone area.

What is a key consideration when developing recovery strategies?

• The financial viability and timeliness of recovery.

• The number of employees involved.

• The location of the CEO.

• The color of the recovery site.

Why is training important in the implementation of recovery plans?

• To delay the recovery process.

• To ensure staff readiness and identify plan gaps.

• To reduce the number of employees.

• To increase employee salaries.

Why should senior leadership be involved in the project initiation and maintenance phases?

• They are ultimately liable and need to understand the plan.

• They have the most free time.

• They can do the technical work.

• They need to approve every detail.

What lesson can be learned from BP's PR mishap after the oil spill?

• Vacations should never be canceled.

• Only trained individuals should handle crisis communication.

• Media should be ignored during a crisis.

• CEOs should always speak to the media.