31 Jan Question 8 Throughout the course,

Question
Week 8 final exam

Question 1

Which of the following best describes risk analsysis?

Risk analysis is a method/approach to evaluate the potential loss of IT assets given a disaster incident.

Risk analysis allows us to identify areas of possible business improvement.

Risk analysis is a process that is conducted to simply impress auditors.

Risk analysis is a process that is based on regulatory requirements.

Question 2 Explain the formula for assessing risk (Threat × Likelihood = Inherent Risk). Provide an example.

Question 3 2 weeks ago, Omega experienced a significant loss of proprietary data, estimated value $550,000.00, that were stored electronically in an Oracle database in their main office in Reston. The data were unrecoverable, and backups were not being routinely maintained, so no restoration was possible. Although there is no hard evidence, Omega’s CTO believes that the loss resulted from deliberate deletion of files by a systems administrator from the Kansas City office who had been “let go” several weeks prior to the loss. Needless to say, the CTO has been tasked to get things under control.

Using the TAM, describe what happened here. Identify other potential vulnerabilities to the asset and potential threat agents.

Question 4 Assess the five goals of conducting a BIA. Identify each of them, and describe its importance.

Question 5 Describe recovery time objective and its effect on the recovery strategy.

Question 6 Assess the difference between peer, client/server, and data center storage strategies. What is Omega Research’s current strategy?

Question 7 What does Toigo mean by adopting a “storage recovery plan?”

Question 8 Throughout the course, you’ve been exposed to Omega Research, Inc. Omega Research is a rapidly growing research and consulting firm. They have a single main office located in Reston, VA and three small branch offices located in San Diego, CA, Salem, OR, and Kansas City, MO. Omega is not currently involved in e-commerce or business-to-business relationships.

Throughout the development of their new disaster recovery and contingency plan documentation, they asked for assistance in preparing their crisis communication plan (CCP). There are four officers in the company: the CEO, the CIO, the CFO, and the director of marketing. These officers jointly report to the board of directors.

Assess the chain of authority that would likely be in place for Omega.

Question 9 Assess Fourth Amendment expectations of privacy as they apply to the search and seizure of computer equipment.

Question 10 During Week 4, we discussed the value of testing our recovery plans. Discuss the basic requirement of establishing a test scenario in advance.