$1.$ What is the name for the broad process of planning for the unexpected? What are its primary components?

o$$ Answer:

$2.$ Which two communities of interest are usually associated with contingency planning? Which community must give authority to ensure broad support for the plans?

o$$ Answer:

$3.$ According to some reports, what percentage of businesses that do not have a disaster plan go out of business after a major loss?

o$$ Answer:

$4.$ List the seven$-$step CP process recommended by NIST.

o$$ Answer:

$5.$ List and describe the teams that perform the planning and execution of the CP plans and processes. What is the primary role of each?

o$$ Answer:

$6.$ Define the term incident as used in the context of IRP. How is it related to the concept of incident response?

o$$ Answer:

$7.$ List and describe the criteria used to determine whether an actual incident is occurring.

o$$ Answer:

$8.$ List and describe the sets of procedures used to detect, contain, and resolve an incident.

o$$ Answer:

$9.$ What is incident classification?

o$$ Answer:

$10.$ List and describe the actions that should be taken during the reaction to an incident.

o$$ Answer:

$11.$ What is an alert roster? What is an alert message? Describe the two ways they can be used.

o$$ Answer:

$12.$ List and describe several containment strategies given in the text. On which tasks do they focus?

o$$ Answer:

$13.$ What is a disaster recovery plan, and why is it important to the organization?

o$$ Answer:

$14.$ What is a business continuity plan, and why is it important?

o$$ Answer:

$15.$ What is a business impact analysis, and what is it used for?

o$$ Answer:

$16.$ Why should contingency plans be tested and rehearsed?

o$$ Answer:

$17.$ Which types of organizations might use a unified continuity plan? Which types of organizations might use the various contingency planning components as separate plans? Why?

o$$ Answer:

$18.$ What strategies can be used to test contingency plans?

o$$ Answer:

$19.$ List and describe two specialized alternatives not often used as a continuity strategy.

o$$ Answer:

$20.$ What is digital forensics, and when is it used in a business setting?

o$$ Answer:

$21.$ What is a security awareness program?

o$$ Answer: