Summary
In this chapter, you explored various aspects of business resiliency, including BIA, data backups, BCPs and DRPs, and testing methodologies. You also learned about various processes to evaluate an organization’s ability to continue business operations.
You have now acquired the relevant knowledge and skills required should business resilience appear in the CISA exam, along with a number of practical aspects such as how to derive the RTO and RPO.
The following are some important points that were covered in this chapter:
- A BIA determines the impact arising from the unavailability of each system. The more critical the system, the higher the impact. A BIA is conducted on the basis of input from the business process owner.
- Once the critical applications have been identified through the BIA, the next step is to develop a strategy to recover the critical assets as soon as possible for the continuity of business operations. The BCP is the next step once the...
