<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:10pt"><DIV></DIV>
<DIV>I think 'dependencies' is the answer. I think the word 'mapping' below mean for dependencies.</DIV>
<DIV> </DIV>
<DIV>Below what OIG book page 359-360:</DIV><B><FONT face=Cheltenham-Bold size=1><FONT face=Cheltenham-Bold size=1>
<P align=left>Business Impact Assessment (BIA). </B></FONT></FONT><FONT face=Cheltenham-Book size=2><FONT face=Cheltenham-Book size=2>The goal of the BIA is to provide</P>
<P align=left>enterprise management with a prioritized list of time-critical business processes,</P>
<P align=left>and estimate a recovery time objective (RTO) for each of the timecritical</P>
<P align=left>processes and the components of the enterprise that support</P>
<P>those processes.</P>
<P></FONT></FONT> </P><FONT face=Cheltenham-Book size=2><FONT face=Cheltenham-Book size=2>
<P align=left>Executive management must understand the potential losses or impacts</P>
<P align=left>to the organization as precisely as possible to allocate resources to the</P>
<P align=left>continuity planning process. It is vital that they thoroughly understand the</P>
<P align=left>time-critical business processes. The BIA is where this information is gathered,</P>
<P align=left>analyzed, consolidated, and presented with recommendations</P>
<P align=left>(including next steps and rough order of magnitude cost). Another important</P>
<P align=left>outcome of the BIA is the 'mapping' of time-critical processes to their</P>
<P align=left>constituent support resources (i.e., IT servers and applications, infrastructure</P>
<P align=left>and networks, facilities space requirements, business partner connectivity,</P>
<P>etc.).</P></FONT></FONT>
<DIV><BR>Cheers </DIV>
<P>Antong Kwok</P>
<P>Email disclaimer: http://bit.ly/9Hk8Dt<BR></P>
<P><A href="http://antongkwok.blogspot.com/2010/01/email-disclaimer.html" target=_blank rel=nofollow><BR></A></P>
<DIV><BR></DIV>
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: Courier New, courier, monaco, monospace, sans-serif"><BR>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><FONT face=Tahoma size=2>
<HR SIZE=1>
<B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B> Clement Dupuis <clement.dupuis@cccure.com><BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> The CISSP Study Mailing list <cisspstudy@cccure.org><BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> Tue, 23 March, 2010 6:32:29<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> Re: [CCCure CISSP] Question on BIA<BR></FONT><BR>Very good answer so far,<BR><BR>However, it is not always about what me and you think is the correct answer. It is about what ISC2 believes is the correct answer.<BR><BR>Unfortunately I do not have access to my reference books right now as I am on the road teaching.<BR><BR>Could someone look this up in the official book to see what they say.<BR><BR>Thanks<BR><BR>Clement<BR><BR clear=all>Clément Dupuis, CD<BR>CISSP, GCFW, GCIA, QEH, QSA, Security+, CEH, ECSA, LPT, CCSA, CCSE, MBNS, MBIS, MBHS,
ACE<BR>----------------------------------------------------------------------------------------------<BR>In real life:<BR>Senior Security Specialist and Instructor<BR>Security University<BR>>> Call me to get the best CISSP training <<<BR>----------------------------------------------------------------------------------------------<BR>In Cyberspace:<BR>President/Security Evangelist/Chief Learning Officer (CLO)<BR>The CCCure Family of Portals<BR>----------------------------------------------------------------------------------------------<BR>Business: 407 479 3903<BR>Fax: 407 264 8396 <BR><BR>Maintainer of :<BR>The CCCure Family of Portals<BR><A href="http://www.cccure.org/" target=_blank rel=nofollow>http://www.cccure.org</A> <BR><BR>The Professional Security Testers Warehouse<BR><A href="http://www.professionalsecuritytesters.org/" target=_blank
rel=nofollow>http://www.professionalsecuritytesters.org</A> <BR><BR>Knowledge sharing and giving back to the community<BR><BR><BR>
<DIV class=gmail_quote>On Mon, Mar 22, 2010 at 12:11, <SPAN dir=ltr><<A href="mailto:An.Dang@do.treas.gov" target=_blank rel=nofollow ymailto="mailto:An.Dang@do.treas.gov">An.Dang@do.treas.gov</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid"><BR>I think "priorities" is more important in a contingency plan for disaster recovery. "Dependencies" and "service levels", I think, are better answers for this question.<BR><BR><BR><BR>-----Original Message-----<BR>From: <A href="mailto:cisspstudy-bounces@cccure.org" target=_blank rel=nofollow ymailto="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</A> [mailto:<A href="mailto:cisspstudy-bounces@cccure.org" target=_blank rel=nofollow ymailto="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</A>] On Behalf Of <A href="mailto:cisspstudy-request@cccure.org" target=_blank rel=nofollow ymailto="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</A><BR>Sent: Monday, March 22, 2010 12:00 PM<BR>To: <A href="mailto:cisspstudy@cccure.org" target=_blank rel=nofollow
ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR>Subject: CISSPstudy Digest, Vol 21, Issue 27<BR><BR>Send CISSPstudy mailing list submissions to<BR> <A href="mailto:cisspstudy@cccure.org" target=_blank rel=nofollow ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR><BR>To subscribe or unsubscribe via the World Wide Web, visit<BR> <A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank rel=nofollow>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR>or, via email, send a message with subject or body 'help' to<BR> <A href="mailto:cisspstudy-request@cccure.org" target=_blank rel=nofollow ymailto="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</A><BR><BR>You can reach the person managing the list at<BR> <A href="mailto:cisspstudy-owner@cccure.org" target=_blank
rel=nofollow ymailto="mailto:cisspstudy-owner@cccure.org">cisspstudy-owner@cccure.org</A><BR><BR>When replying, please edit your Subject line so it is more specific<BR>than "Re: Contents of CISSPstudy digest..."<BR><BR><BR>Today's Topics:<BR><BR> 1. Question on BIA (Anees Ghosh)<BR><BR><BR>----------------------------------------------------------------------<BR><BR>Message: 1<BR>Date: Mon, 22 Mar 2010 01:07:06 -0500<BR>From: Anees Ghosh <<A href="mailto:aneesghosh@hotmail.com" target=_blank rel=nofollow ymailto="mailto:aneesghosh@hotmail.com">aneesghosh@hotmail.com</A>><BR>To: <<A href="mailto:cisspstudy@cccure.org" target=_blank rel=nofollow ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A>><BR>Subject: [CCCure CISSP] Question on BIA<BR>Message-ID: <SNT136-w104380A00592357A61719CC8270@phx.gbl><BR>Content-Type: text/plain; charset="iso-8859-1"<BR><BR><BR>Hi,<BR><BR>I found the following quesiton on <A
href="http://freepracticetests.org/" target=_blank rel=nofollow>freepracticetests.org</A> and am confused about the answer.<BR><BR><BR>Which of the following should be emphasized during the business impact analysis (BIA) considering that the BIA focus is on business processes?<BR><BR>composition<BR>priorities<BR>dependencies<BR>service levels<BR><BR><BR>The correct answer is "dependencies" with the following explanation.<BR><BR>In performing the Business Impact Analysis (BIA) it is very important to consider what the dependencies are. You cannot bring a system if it depends on another system to be operational. You need to look at not only internal dependencies but external as well. You might not be able to get the raw materials for your business so dependencies are very important aspect of a BIA.<BR><BR>My thoughts are as following: The BIA phase helps the organization identify the business processes and MTD for each. Based on the MTD, and financial
impact a priority is defined and then further analysis is done to ensure this process is part of the BCP plan. Shouldnt priority be the answer? After the critical process is identified, this is when we will ensure all dependiencies are taken care of.<BR><BR><BR><BR>Appreciate the help!<BR><BR>Regards<BR>Anees Ghosh<BR><BR><BR><BR>_________________________________________________________________<BR>Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox.<BR><A href="http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_1" target=_blank rel=nofollow>http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_1</A><BR>-------------- next part --------------<BR>An HTML attachment was scrubbed...<BR>URL: <<A href="http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20100322/5b9434fc/attachment-0001.html" target=_blank
rel=nofollow>http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20100322/5b9434fc/attachment-0001.html</A>><BR><BR>------------------------------<BR><BR>_______________________________________________<BR>CISSPstudy mailing list<BR><A href="mailto:CISSPstudy@cccure.org" target=_blank rel=nofollow ymailto="mailto:CISSPstudy@cccure.org">CISSPstudy@cccure.org</A><BR><A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank rel=nofollow>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR><BR><BR>End of CISSPstudy Digest, Vol 21, Issue 27<BR>******************************************<BR><BR>_______________________________________________<BR>CISSPstudy mailing list<BR><A href="mailto:CISSPstudy@cccure.org" target=_blank rel=nofollow ymailto="mailto:CISSPstudy@cccure.org">CISSPstudy@cccure.org</A><BR><A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank
rel=nofollow>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR></BLOCKQUOTE></DIV><BR></DIV></DIV></div><br>
</body></html>