ISA 4.0 Module 8 – Topic Wise

Module 8: Business Resilience & Cyber Crisis Audit (BCM) Business Continuity Planning (BCP), Disaster Recovery (DR), Cyber Crisis Management (CCMP) & Resilience Drills Course Overview & Scope: Modern organizations face threats ranging from ransomware and supply chain disruptions to power grid failures and natural disasters. This course provides 268 questions covering end-to-end organizational resilience. Candidates study Business Impact Analysis (BIA), defining Maximum Tolerable Downtime (MTD), Recovery Time Objectives (RTO), Recovery Point Objectives (RPO), Business Continuity Plans (BCP), Disaster Recovery Plans (DRP), alternative processing sites (hot, warm, cold, cloud DR), Cyber Crisis Management Plans (CCMP), incident response teams (CERT/CSIRT), crisis communication, disaster recovery team roles, simulation exercises (tabletop, walk-through, parallel, full interruption), and auditing resilience governance and continuous improvement. Key Regulatory Frameworks & Standards Covered: ISO 22301:2019 (Security and Resilience – BCM), ISO/IEC 27031 (Business Continuity for ICT), NIST SP 800-34, RBI Master Direction on Business Continuity. Core Audit Competencies Tested in Quizzes:

• Auditing Business Impact Analysis (BIA) methodologies, dependency mapping, and financial/operational impact ratings.
• Evaluating RTO and RPO targets against technological capabilities (backup schedules, replication, cloud failover).
• Auditing Disaster Recovery Plans (DRP), alternative processing site contracts, and technical recovery runbooks.
• Reviewing Cyber Crisis Management Plans (CCMP) for ransomware scenarios, out-of-band communication, and CERT reporting.
• Evaluating BCP/DR testing schedules, test results, lessons learned, and management action tracking.

Detailed Topic-Wise Active Quiz Index (Module 8)

Chapter / Section	Topic Quiz Title	Qs
Chapter 1: Introduction to Resilience & Regulatory Drivers	Business Continuity Management	16
	Business Continuity Management – Introduction	6
	Performance Management Systems	1
	Concepts of IS Audit – Learning Objectives	1
Chapter 2: Business Continuity Planning (BCP) & BIA	Key Concepts of Disaster Recovery, Business Continuity Plan and Business Continuity Management	41
	Business Continuity Plan vs. Disaster Recovery Plan	1
	Objectives of BCP and BCM	10
	Objectives of Business Continuity Plan	3
Chapter 3: Disaster Recovery Planning (DRP)	Disaster Recovery Plan (DRP)	1
	Disaster Recovery Plan (DRP) Scope and Objectives	20
	Disaster Recovery Phases	11
	Key Disaster Recovery Activities	1
Chapter 4: Cyber Crisis Management Planning (CCMP)	Business Continuity Management – Incident	3
	Data backup, Retention and Restoration Practices	18
	Types of Recovery and Alternative Sites	7
	Backup Strategies	6
Chapter 5: Incident Response & Crisis Management	Introduction to Protection of Information Assets	22
	Business Continuity Management – Incident	3
	Testing	4
Chapter 6: Resilient Technology Architecture	Invoking a DR Phase / BCP Phase	30
Chapter 7: Testing, Exercising & Maintenance	System Resiliency Tools and Techniques	3
	Components of Contingency Planning	3
	Enterprise and Alignment Goals	1
Chapter 8: Audit Programs & Evidence Gathering	Documentation: BCP Manual and BCM Policy	4
	Role of IS Auditor in BCP Audit	6
	Services that can be Provided by an IS Auditor in BCM	3
Chapter 9: Governance, Metrics & Continuous Improvement	Definitions of Key Terms – Rpo	16
	Definitions of Key Terms – Rpo & Rto	7
	Definitions of Key Terms – Rto	18
	Concepts of Governance and Management of – Enterprise Risk Management	2
	TOTAL ACTIVE QUESTIONS IN MODULE 8:	268