Examkin

Soru

Zorluk: Çok zorBusiness Impact Analysis and Business Continuity Management

An enterprise financial institution processes real-time transaction records that are committed to a primary relational database every 15 minutes. Following a catastrophic database corruption incident at 14:00, the organization restores system functionality by 17:00 using a clean backup snapshot created at 13:00. During the subsequent Business Impact Analysis (BIA) audit, the board notes that while the system was successfully restored within the acceptable 4-hour operational window before regulatory penalties apply, the financial loss from unrecoverable transactions exceeded the acceptable threshold of 30 minutes of data loss. Which parameter must the Chief Information Security Officer (CISO) modify in the Business Continuity Plan (BCP) to directly address this compliance failure?

  1. Decrease the Recovery Point Objective (RPO) requirement and adjust automated database snapshot schedules accordingly.Cevap
  2. B
    Reduce the Recovery Time Objective (RTO) requirement to accelerate system restoration speed.
  3. C
    Implement compensating technical controls to extend the Maximum Tolerable Downtime (MTD).
  4. D
    Increase the Mean Time Between Failures (MTBF) metric by deploying redundant hot-site infrastructure.

Cevap

The organization must decrease the Recovery Point Objective (RPO) requirement and adjust automated snapshot frequencies to limit transaction data loss.
The correct answer correctly identifies Recovery Point Objective (RPO) as the metric governing maximum acceptable data loss measured in time. Because 1 hour of transaction data was lost while the allowable threshold was 30 minutes, lowering the RPO requirement and increasing snapshot frequency is the required corrective action.

Adım Adım Çözüm

1
Analyze the incident metrics described in the scenario.
System downtime lasted 3 hours (14:00 to 17:00), which met the 4-hour recovery time constraint. Data loss spanned 1 hour (13:00 snapshot to 14:00 crash), exceeding the 30-minute allowable threshold.
Differentiating between time to restore operational state and maximum acceptable data loss is essential for proper metric identification.
2
Map the unmet constraint (data loss duration) to the appropriate BIA continuity metric.
The target metric measuring allowable data loss in time is Recovery Point Objective (RPO).
RPO dictates backup frequency and data replication requirements to ensure unrecoverable transactional data remains within tolerance.
3
Determine the necessary operational change.
Lowering the RPO threshold to 30 minutes or less forces snapshot schedules to run more frequently, rectifying the audit compliance finding.
Aligning technical backup windows with the revised lower RPO ensures lost data falls within acceptable financial risk boundaries.

Anahtar Kavram

Distinction between Recovery Point Objective (RPO) and Recovery Time Objective (RTO) in Business Impact Analysis
Bu soruyu puanla

Konular

Business Impact Analysis and Business Continuity Management

Bu konudan daha fazla soru