Question 1: Risk Assessment
Identify the key steps in risk management. Discuss the importance of categorizing risk (quantitative/qualitative) during threat, vulnerability, and impact assessments to prioritize risks for the risk remediation plan. Explain the importance of developing a risk mitigation strategy.
Question 2: Business Impact Analysis (BIA)
Identify the activities associated with a Business Impact Analysis (BIA). Discuss the business functions that must be included in the BIA. Explain the importance of identifying recovery point objectives (RPO) and recovery time objectives (RTO).
You may use chapter 4 of this book as a reference to construct your response for both Question 1 and Question 2
Snedaker, Susan, and Chris Rima. 2014. Business Continuity and Disaster Recovery Planning for IT Professionals. 2nd ed. Waltham, Massachusetts: Elsevier
Other resources might be:
Avalution Consulting. N.d. "The Ultimate Guide to Business Impact Analysis." Avalution Consulting.
Harris, Alex. 2012. "The Easy Guide to Business Impact Analysis Version 2.0." Continuity in Business. January 12, 2012.
You must adhere to the standard literature of risk assessment and business impact analysis while constructing your responses