1. What is the difference between a Recovery Time Objective (RTO) and a Recovery Point Objective (RPO)? Give one example of each type of objective.

2. Identify 3 potential sources of financial loss from a crisis event. Which one of your examples is the most difficult to quantify? Why?

3. what are the six steps of Risk Analysis?

4. Why is "worst case scenario" analysis difficult to perform? Give one example of a worst case scenario and the outcome expected.

5. One strategy for mitigating risk is to provide an alternate (backup) facility that would be used if a crisis event occurs. Explain why this may be a desirable strategy for a service-oriented business, but much less desirable for a manufacturing plant.