What business process can be used to determine the outer bound of a Maximum Tolerable Downtime?
A.
Accounts receivable
B.
Invoicing
C.
Payroll
D.
Shipment of goods
Explanation:
Answer C is correct; Most organizations should not allow unmanaged risk of two missed payrolls: if a company pays every 2 weeks, the maximum MTD would be 2 weeks. This is used to determine the outer bound; most organizations will determine a far lower MTD (sometimes in days, hours, or less).Incorrect Answers and Explanations: A, B, and D: Answers A, B, and D are incorrect. All are valid concerns, but the risk of being unable to pay personnel for two consecutive pay periods carries higher risk.
Shipment of goods just as well. If you want to stay in the market or survive as a business (which is the main message of the CISSP module Business Continuity and Disaster Recovery) you’ll have to comply with contracts or delivery agreements. If not, customers/clients could start doing business with your competitor because they have every reason to. Or you can expect claims and get bankrupt.
0
0
I suddenly remember. I encountered the question before. The question is copied from Eric Conrad’s CISSP Study Guide. It’s a bad question. In fact all processes mentioned could be candidates to determine the MTD. A and B are synonyms. If you are not able to send out invoices you could run into serious cash flow problems, jeopardizing your business. The importance of a process towards determining the MTD depends on the type of business you’re in. So, there is no normative answer. All the processes mentioned, and in fact every process in the world, can be used to determine the outer bounds of the MTD. It just depends.
0
0
Final elaboration on this.
Example 1: What if a flower auction (you know, with those big auction clocks projected on huge screens) cannot bill their customers (invoicing, accounts receivable)? Well, you’re not able to sell by auction.
Example 2: What if a very big web shop (like Amazon) cannot bill their customers (invoicing, accounts receivable)? Remember that some web shops do hundreds of transactions per second.
Example 3: What if a supplier to Ford does not deliver the car seats on time (shipment of goods)? Keep in mind that car manufacturers have implemented critical just-in-time (JIT) manufacturing schedules.
All examples lead to challenging MTDs. More challenging perhaps then the MTD for payroll.
0
0
Most organizations should not allow unmanaged risk of two missed payrolls: if a company pays every 2 weeks, the maximum MTD would be 2 weeks. This is used to determine the outer bound; most organizations will determine a far lower MTD (sometimes in days, hours, or less). 大多數組織不應該允許兩個錯過了就業的非託管的風險：如果公司支付每2週，最高MTD是2週。這是用來測定結合的外;大多數組織將確定一個低得多的MTD（有時以天，小時，或更小）。
0
0