Deck 3: Assessing Risks in the Enterprise

Question 1

Which of the following is not part of an exposure inventory list?

A)Facilities
B)Processes
C)Baselines
D)Systems

Answer 1

C

Question 2

The inventory sheet should include a three-digit facility number and a building number to identify the buildings being inventoried.

Answer 2

False

Question 3

An exposure inventory should be conducted for each facility that an organization owns or operates.

Answer 3

True

Question 4

The exposure inventory sheets provide a bottom-up data collection process.

Question 5

Light equipment includes manufacturing, transportation, and industrial plant equipment.

Question 6

A business process inventory illustrates the installed systems on which the departments rely.

Question 7

The sales inventory sheet details the resources needed to support sales.

Question 8

Data on natural disaster is relatively easy to obtain from historical records.

Question 9

The installed systems exposure inventory sheet lists all large systems, servers, workstations and related peripherals.

Question 10

The first necessary sheet is the physical facilities exposure inventory sheet.

Question 11

The exposure inventory can easily be related to physical facilities and property.

Question 12

" style="vertical-align: 0px;" width="419px" height="463px The table above is an example of a revenue collection inventory sheet.

Question 13

Revenue collection is a goal of a product -focused organization.

Question 14

Risk assessment reports should be circulated both inside and outside the organization to update both employees and investors.

Question 15

Gains and potential losses are delicately balanced against each other when determining how to approach disaster recovery planning.

Question 16

Risk assessment is the fundamental building block of disaster recovery planning.

Question 17

" style="vertical-align: 0px;" width="396px" height="406px The table above is an example of a facilities exposure inventory overview sheet.

Question 18

The facility number combines the building number with a unique three-digit number.

Question 19

Data for the requirements analysis comes primarily from the exposure inventory sheets for each facility.

Question 20

The physical facilities exposure inventory sheet shows among other things, the square footage of the building.

Question 21

Which of the following goals are common between product- and service-focused organizations?

A)Revenue collection
B)Distribution
C)Platform
D)Delivery

Question 22

Which of the following pressures can affect the classification of systems?

A)Legal
B)Social
C)Management
D)Financial

Question 23

An installed systems exposure inventory list contains ____.

A)computer networks
B)fire prevention systems
C)large systems
D)both a and b
E)both a and c

Question 24

A heavy equipment exposure inventory sheet should contain ____ equipment.

A)maintenance
B)emergency
C)desktop
D)transportation

Question 25

If a specific exposure inventory sheet is not needed for a facility what should you do?

A)Include a blank inventory sheet with the appropriate numbering scheme
B)Circle N/A on the overview sheet
C)Nothing
D)Both a and b

Question 26

Which of the following is an example of a numbering scheme for an Information Technology exposure inventory sheet?

A)PEIS01
B)ITIS01
C)ITEIS01
D)ITIS01

Question 27

Which of the following requirements can affect the classification of systems?

A)Competitive
B)Contractual
C)Financial
D)Humanitarian

Question 28

Which of the following is not part of a physical facilities inventory sheet?

A)Building square footage
B)Date of occupancy
C)Number of employees working at the building
D)Date of construction

Question 29

A products/parts exposure inventory sheet lists ____.

A)finished products
B)raw materials
C)large systems
D)both a and b
E)a, b, and c

Question 30

A unique ____-digit number is part of the building number.

A)two
B)three
C)four
D)five

Question 31

A light equipment exposure inventory sheet should contain ____.

A)lighting equipment
B)security systems
C)tools
D)industrial plant

Question 32

Which of the following is an example of a numbering scheme for an installed systems exposure inventory sheet?

A)ISEIS01
B)ISE01
C)OSEIS01
D)ISSIS01

Question 33

Which of the following are primary types of organizations?

A)Manufacturing-focused
B)Product-focused
C)Engineering-focused
D)Both a and c
E)Both a and b

Question 34

Which of the following is part of a personnel exposure inventory sheet?

A)Furniture
B)Tools
C)Special lighting
D)Business processes

Question 35

Which of the following expectations can affect the classification of systems?

A)Labor
B)Management
C)Social
D)Contractual

Question 36

Which of the following is an example of a numbering scheme for an office equipment exposure inventory sheet?

A)OEIS01
B)OEEIS01
C)ITIS01
D)PEEIS01

Question 37

An information technology exposure inventory sheet lists ____.

A)all computer networks
B)copiers
C)servers
D)both a and c
E)a, b, and c

Question 38

Which of the following is included on an office equipment exposure inventory sheet?

A)Furniture
B)Cabinetry
C)Fax machines
D)Both a and b
E)a, b, and c

Question 39

If an organization has six facilities, how many exposure inventory sheets should they have?

A)1
B)3
C)6
D)12

Question 40

Which of the following is NOT included on an information technology exposure inventory sheet?

A)Copiers
B)PDAs
C)Desktop computers
D)Workstations

Question 41

The ____ threat inventory sheet details the threats to an entire facility, as well as threats to heavy equipment, light equipment, and installed systems.

A)business process
B)organization
C)facility
D)structural process

Question 42

A business process inventory illustrates ____ areas.

A)6
B)7
C)8
D)10

Question 43

The ____ inventory sheet provides detailed information about manufacturing.

A)product
B)product manufacturing
C)manufacturing support
D)manufacturing requirement

Question 44

What are the five key goals for a product-focused organization?

Question 45

List seven areas that should be included in an exposure inventory.

Question 46

The ____ inventory sheet provides detailed information about product sales.

A)sales
B)sales support
C)sales requirement
D)none of the above

Question 47

" style="vertical-align: 0px;" width="432px" height="448px Which support requirements sheet is displayed in the table above?

A)Revenue collection
B)Sales
C)Product distribution
D)Service delivery

Question 48

The ____ requirements sheet details the resources needed to support procurement.

A)procurement support
B)procurement inventory
C)product manufacturing
D)product manufacturing support

Question 49

What two approaches can planners use to determine which threats could adversely affect their organization's assets?

Question 50

Which type of threat can be quantified by collecting data on the political stability of the region where facilities are located?

A)Severe weather
B)Air pollution caused by accident
C)Civil unrest
D)Building fire

Question 51

The ____ threat mitigation sheet details the actions taken or the systems in place to reduce the impact of threats.

A)facility
B)organization
C)business process
D)system process

Question 52

" style="vertical-align: 0px;" width="432px" height="365px Which inventory sheet is displayed in the table above?

A)Personnel exposure
B)Physical facilities exposure
C)Light equipment exposure
D)Product/parts exposure

Question 53

Which type of threat can be quantified by collecting data on frequency, severity, and proximity to facilities?

A)Severe weather
B)Train derailments
C)Building explosions
D)Computer hacks

Question 54

What are the two primary types of organizations?

Question 55

The ____ support requirements sheet details the resources needed to support service delivery.

A)sales
B)service
C)service delivery
D)service inventory

Question 56

What are the five key goals for a service-focused organization?

Question 57

What eight things does a business process inventory illustrate?

Question 58

Which type of threat can be extremely difficult to quantify?

A)Natural disasters
B)Accidents
C)Disruptive deliberate actions
D)Both a and b
E)Both b and c

Question 59

What three things must planners fully understand before they can start classifying the organization's systems and functions?

Question 60

What should be included in a personnel exposure inventory sheet?

Question 62

What four forms can help disaster recovery planners record the potential threats to their facilities, as well as details of actions and systems that can mitigate these threats?

Question 63

What kind of actions could be included in destructive or deliberate actions against a facility and its operations?