MIME-Version: 1.0 X-Document-Type: Workbook Content-Type: multipart/related; boundary="----=_NextPart_01C5E60F.7FB651C0" This document is a Single File Web Page, also known as a Web Archive file. If you are seeing this message, your browser or editor doesn't support Web Archive files. Please download a browser that supports Web Archive, such as Microsoft Internet Explorer. ------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252" <body> <p>This page uses frames, but your browser doesn't support them.</p> </body> ------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/stylesheet.css Content-Transfer-Encoding: quoted-printable Content-Type: text/css; charset="windows-1252" tr {mso-height-source:auto;} col {mso-width-source:auto;} br {mso-data-placement:same-cell;} .style21 {color:blue; font-size:10.0pt; font-weight:400; font-style:normal; text-decoration:underline; text-underline-style:single; font-family:Arial; mso-generic-font-family:auto; mso-font-charset:0; mso-style-name:Hyperlink; mso-style-id:8;} a:link {color:blue; font-size:10.0pt; font-weight:400; font-style:normal; text-decoration:underline; text-underline-style:single; font-family:Arial; mso-generic-font-family:auto; mso-font-charset:0;} a:visited {color:purple; font-size:10.0pt; font-weight:400; font-style:normal; text-decoration:underline; text-underline-style:single; font-family:Arial; mso-generic-font-family:auto; mso-font-charset:0;} .style0 {mso-number-format:General; text-align:general; vertical-align:bottom; white-space:nowrap; mso-rotate:0; mso-background-source:auto; mso-pattern:auto; color:windowtext; font-size:10.0pt; font-weight:400; font-style:normal; text-decoration:none; font-family:Arial; mso-generic-font-family:auto; mso-font-charset:0; border:none; mso-protection:locked visible; mso-style-name:Normal; mso-style-id:0;} td {mso-style-parent:style0; padding:0px; mso-ignore:padding; color:windowtext; font-size:10.0pt; font-weight:400; font-style:normal; text-decoration:none; font-family:Arial; mso-generic-font-family:auto; mso-font-charset:0; mso-number-format:General; text-align:general; vertical-align:bottom; border:none; mso-background-source:auto; mso-pattern:auto; mso-protection:locked visible; white-space:nowrap; mso-rotate:0;} .xl24 {mso-style-parent:style21; color:blue; text-decoration:underline; text-underline-style:single;} .xl25 {mso-style-parent:style0; color:#993366; font-weight:700; font-family:Arial, sans-serif; mso-font-charset:0;} .xl26 {mso-style-parent:style0; font-weight:700;} .xl27 {mso-style-parent:style0; color:#993366; font-size:9.0pt; font-weight:700; font-family:Arial, sans-serif; mso-font-charset:0;} .xl28 {mso-style-parent:style0; background:yellow; mso-pattern:auto none;} ------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/tabstrip.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
 1 Management=    Parsed   2 TechInfraS= tructure   3 ProtectInf= o   4 DisasteRec=    4Parsed   5 BusinessAp= p   6Parsed   7 ISAuditPro= c 
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet001.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
http://www.isaca.org/Template.cfm?Section=3DExam_Infor= mation&Template=3D/ContentManagement/ContentDisplay.cfm&ContentID= =3D20728 
1. Management, Planning, and Organization of IS ISACA Compliance WorkBook
(Content Area, Approximately 11% of exam)
Evaluate the strategy, policies, standards, procedures= and related practices for the management, planning, and organization of IS. T= asks and Knowledge Statements
= 1.1 Evaluate the IS strategy and the process for its development, deployment,= and maintenance to ensure that it supports the organization's business objectives.
=
= 1.2 Evaluate the IS policies, standards, and procedures and the processes for their development, deployment, and maintenance to ensure that they support the IS strategy.
=
= 1.3 Evaluate IS management practices to ensure compliance with IS policies, standards, and procedures.
=
= 1.4 Evaluate IS organization and structure to ensure appropriate and adequate support of the organization's business requirements in a controlled manne= r.
=
= 1.5 Evaluate the selection and management of third-party services to ensure t= hat they support the IS strategy.
=
Knowledge Statements
=
1= .01 Knowledge of the components of IS strategies, policies, standards, and procedures
=
= 1.02 Knowledge of the processes for the development, deployment and maintenanc= e of IS strategies, policies, standards, and procedures
=
1= .03 Knowledge of IS project management strategies and policies
=
1= .04 Knowledge of IT governance, risk management and control frameworks
=
1= .05 Knowledge of IS problem and change management strategies and policies
=
1= .06 Knowledge of IS quality management strategies and policies
=
1= .07 Knowledge of IS information security management strategies and policies
=
1= .08 Knowledge of IS business continuity management strategies and policies
=
1= .09 Knowledge of contracting strategies, processes and contract management practices
=
1= .10 Knowledge of roles and responsibilities of IS functions (e.g. segregation= of duties)
=
1= .11 Knowledge of principles of IS organizational structure and design
=
= 1.12 Knowledge of IS management practices, key performance indicators and performance measurement techniques
=
1= .13 Knowledge of relevant legislative and regulatory issues (e.g. privacy, intellectual property)
=
postamble();
1.14 Kno= wledge of generally accepted international IS standards and guidelines
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet002.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
  1. M= anagement, Planning, and Organization of IS (Con= tent Area, Approximately 11% of exam)
  1.1 Evaluate the IS strateg= y and the process for its development, deployment, and maintenance to ensure th= at it supports the organization's business objectives.
 
Parsed Phrase1  
TRUE Evaluate the IS strategy and= the process for its development, deployment, and maintenance to ensure that it supports the organization's business objectives.  
TRUE Evaluate the IS strategy for= its development  
TRUE Evaluate the IS strategy for= its maintenance  
TRUE Evaluate the IS process to e= nsure that it supports the organization's business objectives.  
   
MultipleChoice CopyPasteSpecialTransposed<= /span>
Question: Evaluate the IS strategy for= its: Evaluate the IS strategy fo= r its: 4 development deployment maintenance All of the above None of the above
AnswerA: development
AnswerB: deployment
AnswerC: maintenance
AnswerD: All of the above
AnswerE: None of the above
Correct: 4
 
MultipleChoice All of the above TRUE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Tr= ue: Which of the following is T= rue: 4 Evaluate the IS strategy for its develop= ment Evaluate the IS strategy for its mainten= ance Evaluate the IS process to ensure that it supports the organization's business objectives. All of the above None of the above
AnswerA: Evaluate the IS strategy for= its development
AnswerB: Evaluate the IS strategy for= its maintenance
AnswerC: Evaluate the IS process to e= nsure that it supports the organization's business objectives.
AnswerD: All of the above
AnswerE: None of the above
Correct: 4
=
P= arsed Phrase2
TRUE Evaluate the IS strategy to = ensure that it supports the organization's business objectives.
TRUE Evaluate the IS process for = its development
TRUE Evaluate the IS process for = its maintenance
TRUE Evaluate the IS process to e= nsure that it supports the organization's business objectives.
=
MultipleChoice CopyPasteSpecialTransposed<= /span>
Question: Evaluate the IS process for = its: Evaluate the IS process for its:<= /td> development deployment maintenance All of the above None of the above 4
AnswerA: development
AnswerB: deployment Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: maintenance Evaluate the IS process for its: development deployment maintenance All of the above None of the above 5
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 4 Evaluate the IS process for its:<= /td> 5 development deployment maintenance All of the above None of the above
=
Synonym
TRUE Assess the IS strategy and = the process for its development, deployment, and maintenance to ensure that it supports the organization's business objectives.
TRUE Assess the IS strategy for i= ts development
TRUE Assess the IS strategy for i= ts maintenance
TRUE Assess the IS strategy to en= sure that it supports the organization's business objectives.
TRUE Assess the IS process for its development
TRUE Assess the IS process for its maintenance
TRUE Assess the IS process to ens= ure that it supports the organization's business objectives.
Antonym
FALSE Accept the IS strategy and = the process for its development, deployment, and maintenance to ensure that it supports the organization's business objectives.
FALSE Accept the IS strategy for i= ts development
FALSE Accept the IS strategy for i= ts maintenance
FALSE Accept the IS strategy to en= sure that it supports the organization's business objectives.
FALSE Accept the IS process for its development
FALSE Accept the IS process for its maintenance
FALSE Accept the IS process to ens= ure that it supports the organization's business objectives.
=
MultipleChoice None of the above TRUE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Tr= ue: Which of the following is True: Accept the IS strategy for its developme= nt Accept the IS strategy for its maintenan= ce Accept the IS process for its developmen= t All of the above None of the above 5
AnswerA: Accept the IS strategy for i= ts development
AnswerB: Accept the IS strategy for i= ts maintenance Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: Accept the IS process for its development Which of the following is True: Accept the IS strategy for its developme= nt Accept the IS strategy for its maintenan= ce Accept the IS process for its developmen= t All of the above None of the above 4
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 5 Which of the following is True: 5 Accept the IS strategy for its developme= nt Accept the IS strategy for its maintenan= ce Accept the IS process for its developmen= t All of the above None of the above
=
MultipleChoice Some of the above TRUE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Tr= ue: Which of the following is True: Assess the IS strategy for its developme= nt Accept the IS strategy for its maintenan= ce Accept the IS process for its developmen= t All of the above None of the above 1
AnswerA: Assess the IS strategy for i= ts development
AnswerB: Accept the IS strategy for i= ts maintenance Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: Accept the IS process for its development Which of the following is True: Assess the IS strategy for its developme= nt Accept the IS strategy for its maintenan= ce Accept the IS process for its developmen= t All of the above None of the above 1
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 1 Which of the following is True: 1 Assess the IS strategy for its developme= nt Accept the IS strategy for its maintenan= ce Accept the IS process for its developmen= t All of the above None of the above
<= /td>
Negative
FALSE Do not evaluate the IS stra= tegy and the process for its development, deployment, and maintenance to ensure th= at it supports the organization's business objectives.
FALSE Do not evaluate the IS strat= egy for its development
FALSE Do not evaluate the IS strat= egy for its maintenance
FALSE Do not evaluate the IS strat= egy to ensure that it supports the organization's business objectives.
FALSE Do not evaluate the IS proce= ss for its development
FALSE Do not evaluate the IS proce= ss for its maintenance
FALSE Do not evaluate the IS proce= ss to ensure that it supports the organization's business objectives.
=
MultipleChoice All of the above FALSE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Fa= lse: Which of the following is False:<= /td> Do not evaluate the IS strategy for its development Do not evaluate the IS strategy for its maintenance Do not evaluate the IS process for its development All of the above None of the above 4
AnswerA: Do not evaluate the IS strat= egy for its development
AnswerB: Do not evaluate the IS strat= egy for its maintenance Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: Do not evaluate the IS proce= ss for its development Which of the following is False: Do not evaluate the IS strategy for its development Do not evaluate the IS strategy for its maintenance Do not evaluate the IS process for its development All of the above None of the above 4
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 4 Which of the following is False:<= /td> 4 Do not evaluate the IS strategy for its development Do not evaluate the IS strategy for its maintenance Do not evaluate the IS process for its development All of the above None of the above
=
M= ultipleChoice None of the above TRUE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Tr= ue: Which of the following is True: Do not evaluate the IS strategy for its development Do not evaluate the IS strategy for its maintenance Do not evaluate the IS process for its development All of the above None of the above 5
AnswerA: Do not evaluate the IS strat= egy for its development
AnswerB: Do not evaluate the IS strat= egy for its maintenance Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: Do not evaluate the IS proce= ss for its development Which of the following is True: Do not evaluate the IS strategy for its development Do not evaluate the IS strategy for its maintenance Do not evaluate the IS process for its development All of the above None of the above 5
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 5 Which of the following is True: 5 Do not evaluate the IS strategy for its development Do not evaluate the IS strategy for its maintenance Do not evaluate the IS process for its development All of the above None of the above 5
<= /td>
1.2 Evaluate the IS policie= s, standards, and procedures and the processes for their development, deployment, and maintenance to ensure that they support the IS strategy.<= /td>
=
1.3 Evaluate IS management practices to ensure compliance with IS policies, standards, and procedure= s.
=
1.4 Evaluate IS organizatio= n and structure to ensure appropriate and adequate support of the organization's business requirements in a controlled manner.
=
1.5 Evaluate the selection = and management of third-party services to ensure that they support the IS strategy.
=
Knowledge Statements CISA Certified Information Systems Auditor
=
1.01 Knowledge of the compon= ents of IS strategies, policies, standards, and procedures
P= arsed Phrase1
TRUE CISA has nowledge of the com= ponents of IS strategies, policies, standards, and procedures
TRUE CISA has nowledge of the com= ponents of IS strategies
TRUE CISA has nowledge of the com= ponents of IS policies
TRUE CISA has nowledge of the com= ponents of IS standards
TRUE CISA has nowledge of the com= ponents of IS procedures
=
MultipleChoice CopyPasteSpecialTransposed<= /span>
Question: CISA has nowledge of the com= ponents of IS: CISA has nowledge of the components of I= S: strategies policies standards procedures All of the above 5
AnswerA: strategies
AnswerB: policies Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: standards CISA has nowledge of the components of IS: strategies policies standards procedures All of the above 4
AnswerD: procedures
AnswerE: All of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 5 Which of the following is True: 5 strategies policies standards procedures All of the above 5
=
MultipleChoice All of the above TRUE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Tr= ue: Which of the following is True: CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies CISA has nowledge of the components of IS standards All of the above None of the above 4
AnswerA: CISA has nowledge of the com= ponents of IS strategies
AnswerB: CISA has nowledge of the com= ponents of IS policies Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: CISA has nowledge of the com= ponents of IS standards Which of the following is True: CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies CISA has nowledge of the components of IS standards All of the above None of the above 4
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 4 Which of the following is True: 4 CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies CISA has nowledge of the components of IS standards All of the above None of the above
=
M= ultipleChoice None of the above FALSE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Fa= lse: Which of the following is False:<= /td> CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies CISA has nowledge of the components of IS standards All of the above None of the above 5
AnswerA: CISA has nowledge of the com= ponents of IS strategies
AnswerB: CISA has nowledge of the com= ponents of IS policies Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: CISA has nowledge of the com= ponents of IS standards Which of the following is False: CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies CISA has nowledge of the components of IS standards All of the above None of the above 5
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 5 Which of the following is False:<= /td> 5 CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies CISA has nowledge of the components of IS standards All of the above None of the above
=
N= egative Phrase1
FALSE CISA does not have nowledge= of the components of IS strategies, policies, standards, and procedures
FALSE CISA does not have nowledge = of the components of IS strategies
FALSE CISA does not have nowledge = of the components of IS policies
FALSE CISA does not have nowledge = of the components of IS standards
FALSE CISA does not have nowledge = of the components of IS procedures
=
MultipleChoice Some of the above FALSE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Fa= lse: Which of the following is False:<= /td> CISA does not has nowledge of the compon= ents of IS policies CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies All of the above None of the above 1
AnswerA: CISA does not has nowledge o= f the components of IS policies
AnswerB: CISA has nowledge of the com= ponents of IS strategies Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: CISA has nowledge of the com= ponents of IS policies Which of the following is False: CISA does not has nowledge of the compon= ents of IS policies CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies All of the above None of the above 1
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 1 Which of the following is False:<= /td> 1 CISA does not has nowledge of the compon= ents of IS policies CISA has nowledge of the components of IS strategies CISA has nowledge of the components of IS policies All of the above None of the above
 
=
MultipleChoice All of the above FALSE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Fa= lse: Which of the following is False:<= /td> CISA does not has nowledge of the compon= ents of IS policies CISA does not has nowledge of the compon= ents of IS standards CISA does not has nowledge of the compon= ents of IS procedures All of the above None of the above 4
AnswerA: CISA does not has nowledge o= f the components of IS policies
AnswerB: CISA does not has nowledge o= f the components of IS standards Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: CISA does not has nowledge o= f the components of IS procedures Which of the following is False: CISA does not has nowledge of the compon= ents of IS policies CISA does not has nowledge of the compon= ents of IS standards CISA does not has nowledge of the compon= ents of IS procedures All of the above None of the above 4
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 4 Which of the following is False:<= /td> 4 CISA does not has nowledge of the compon= ents of IS policies CISA does not has nowledge of the compon= ents of IS standards CISA does not has nowledge of the compon= ents of IS procedures All of the above None of the above
=
MultipleChoice None of the above FALSE CopyPasteSpecialTransposed<= /span>
Question: Which of the following is Fa= lse: Which of the following is False:<= /td> CISA does not has nowledge of the compon= ents of IS policies CISA does not has nowledge of the compon= ents of IS standards CISA does not has nowledge of the compon= ents of IS procedures All of the above None of the above 5
AnswerA: CISA does not has nowledge o= f the components of IS policies
AnswerB: CISA does not has nowledge o= f the components of IS standards Shift1ColumnToTheRightStarti= ngWith2ndColumn
AnswerC: CISA does not has nowledge o= f the components of IS procedures Which of the following is False: CISA does not has nowledge of the compon= ents of IS policies CISA does not has nowledge of the compon= ents of IS standards CISA does not has nowledge of the compon= ents of IS procedures All of the above None of the above 5
AnswerD: All of the above
AnswerE: None of the above MoveCorrectAnswerIndexInto2n= dColumn
Correct: 5 Which of the following is False:<= /td> 5 CISA does not has nowledge of the compon= ents of IS policies CISA does not has nowledge of the compon= ents of IS standards CISA does not has nowledge of the compon= ents of IS procedures All of the above None of the above
=
N= one of the above FALSE correlates All of the above FALSE
=
1.02 Knowledge of the proce= sses for the development, deployment and maintenance of IS strategies, policies, standards, and procedures
=
1.03 Knowledge of IS project management strategies and policies
=
1.04 Knowledge of IT governa= nce, risk management and control frameworks
=
1.05 Knowledge of IS problem= and change management strategies and policies
=
1.06 Knowledge of IS quality management strategies and policies
=
1.07 Knowledge of IS informa= tion security management strategies and policies
=
1.08 Knowledge of IS business continuity management strategies and policies
=
1.09 Knowledge of contracting strategies, processes and contract management practices
=
1.10 Knowledge of roles and responsibilities of IS functions (e.g. segregation of duties)
=
1.11 Knowledge of principles= of IS organizational structure and design
=
1.12 Knowledge of IS manage= ment practices, key performance indicators and performance measurement techniq= ues
=
1.13 Knowledge of relevant legislative and regulatory issues (e.g. privacy, intellectual property)
=
1.14 Knowledge of generally = accepted international IS standards and guidelines
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet003.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
2. Technical Infrastructure and Operation= al Practices
http://www.isaca.org/Template.cfm?Section=3DContent_Ar= eas&Template=3D/ContentManagement/ContentDisplay.cfm&ContentID=3D20= 728 
(Content Area, Approximately 13% of exam)
Evaluate the effectiveness and efficiency of the organization's implementation and ongoing management of technical and operational infrastructure to ensure that they adequately support the organization's business objectives. Tasks and Knowledge Statements
= 2.1 Evaluate the acquisition, installation, and maintenance of hardware to en= sure that it efficiently and effectively supports the organizations IS process= ing and business requirements and is compatible with the organization's strategies.
=
= 2.2 Evaluate the development/acquisition, implementation, and maintenance of systems software and utilities to ensure ongoing support of the organization's IS processing and business requirements and compatibility = with the organization's strategies.
=
= 2.3 Evaluate the acquisition, installation, and maintenance of the network infrastructure to ensure efficient and effective support of the organization's IS processing and business requirements.
=
= 2.4 Evaluate IS operational practices to ensure efficient and effective utilization of the technical resources which are used to support the organization's IS processing and business requirements.
=
= 2.5 Evaluate the use of system performance and monitoring processes, tools, a= nd techniques to ensure that computer systems continue to meet the organization's business objectives.
=
Knowledge Statements
=
= 2.01 Knowledge of risks and controls related to hardware platforms, system software and utilities, network infrastructure, and IS operational practi= ces
=
= 2.02 Knowledge of systems performance and monitoring processes, tools, and techniques (e.g. network analyzers, system error messages, system utiliza= tion reports, load balancing)
=
= 2.03 Knowledge of the process of IT infrastructure acquisition, development, implementation and maintenance
=
= 2.04 Knowledge of change control and configuration management principles for hardware and system software
=
= 2.05 Knowledge of practices related to the management of technical and operati= onal infrastructure (e.g. problem management/resource management procedures, h= elp desk, scheduling, service level agreements)
=
= 2.06 Knowledge of the functionality of systems software and utilities (e.g. database management systems, security packages)
=
= 2.07 Knowledge of the functionality of network components (e.g. firewalls, routers, proxy servers, modems, terminal concentrators, hubs, switches)
=
= 2.08 Knowledge of network architecture (e.g. network protocols, remote computi= ng, network topologies Internet, Intranet, Extranet, client server)
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet004.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
3. Protection of Information Assets
=
(Content Area, Approximately 25% of exam)
Evaluate the logical, environmental, and IT infrastruc= ture security to ensure that it satisfies the organization's business requirem= ents for safeguarding information assets against unauthorized use, disclosure, modification, damage, or loss. Tasks and Knowledge Statements
= 3.1 Evaluate the design, implementation, and monitoring of logical access controls to ensure the integrity, confidentiality, and availability of information assets.
=
= 3.2 Evaluate network infrastructure security to ensure integrity, confidentiality, availability and authorized use of the network and the information transmitted.
=
= 3.3 Evaluate the design, implementation, and monitoring of environmental cont= rols to prevent and/or minimize potential loss.
=
= 3.4 Evaluate the design, implementation, and monitoring of physical access controls to ensure that the level of protection for assets and facilities= is sufficient to meet the organization's business objectives.
=
Knowledge Statements
=
= 3.01 Knowledge of the processes of design, implementation, and monitoring of security (e.g. gap analysis, baseline, tool selection)
=
3= .02 Knowledge of encryption techniques (e.g. DES, RSA)
=
= 3.03 Knowledge of public key infrastructure (PKI) components (e.g. certificati= on authorities (CA), registration authorities)
=
3= .04 Knowledge of digital signature techniques
=
3= .05 Knowledge of physical security practices (e.g. biometrics, card swipes)
=
= 3.06 Knowledge of techniques for identification, authentication, and restricti= on of users to authorized functions and data (e.g. dynamic passwords, challenge/response, menus, profiles)
=
= 3.07 Knowledge of security software (e.g. single sign-on, intrusion detection systems (IDS), automated permissioning, network address translation)
=
= 3.08 Knowledge of security testing and assessment tools (e.g. penetration test= ing, vulnerability scanning)
=
3= .09 Knowledge of network and Internet security (e.g. SSL, SET, VPN, tunneling= )
=
3= .10 Knowledge of voice communications security
=
= 3.11 Knowledge of attack/fraud methods and techniques (e.g. hacking, spoofing, Trojan horses, denial of service, spamming)
=
= 3.12 Knowledge of sources of information regarding threats, standards, evaluat= ion criteria and practices in regard to information security
=
= 3.13 Knowledge of security monitoring, detection and escalation processes, and techniques (e.g. audit trails, intrusion detection, computer emergency response team)
=
3= .14 Knowledge of viruses and detection, prevention, and response mechanisms
=
= 3.15 Knowledge of environmental protection practices and devices (e.g. fire suppression, cooling systems)
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet005.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
4. Disaster Recovery and Business Continu= ity
=
(Content Area, Approximately 10% of exam)
Evaluate the process for developing and maintaining documented, communicated, and tested plans for continuity of business operations and IS processing in the event of a disruption. Tasks and Knowledge Statements
= 4.1 Evaluate the adequacy of backup and recovery provisions to ensure the resumption of normal information processing in the event of a short-term disruption and/or the need to rerun or restart a process.
=
= 4.2 Evaluate the organization's ability to continue to provide information sy= stem processing capabilities in the event that the primary information process= ing facilities are not available.
=
= 4.3 Evaluate the organization's ability to ensure business continuity in the event of a business disruption.
=
Knowledge Statements
=
4= .01 Knowledge of crisis management and business impact analysis techniques
=
= 4.02 Knowledge of disaster recovery and business continuity techniques (e.g. h= ot site, cold site, fail-safe network design, reciprocal agreements)
=
4= .03 Knowledge of disaster recovery and business continuity planning and proce= sses
=
4= .04 Knowledge of backup and storage methods and practices
=
4= .05 Knowledge of disaster recovery and business continuity testing approaches= and methods
=
4= .06 Knowledge of insurance in relation to business continuity and disaster recovery
=
4= .07 Knowledge of human resource issues (e.g. evacuation planning, response te= ams)
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet006.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
4. Disaster Recovery and Business Continu= ity
TrueTF
= Evaluate the process for developing and maintaining documented, communicated, and tested plans for continuity of business operations and IS processing in t= he event of a disruption.
= Evaluate the adequacy of backup and recovery provisions to ensure the resumption of normal information processing in the event of a short-term disruption and= /or the need to rerun or restart a process.
= Evaluate the organization's ability to continue to provide information system processing capabilities in the event that the primary information process= ing facilities are not available.
E= valuate the organization's ability to ensure business continuity in the event of a business disruption.
E= valuate the process for developing IS processing
E= valuate the process for maintaining IS processing
Evaluate the documented IS proce= ssing
E= valuate the communicated IS processing
E= valuate the tested plans for continuity of business operations
E= valuate the communicated plans for continuity of business operations
Evaluate the adequacy of backup<= /td>
E= valuate the adequacy of recovery provisions
E= valuate the adequacy of backup and recovery provisions
E= valuate the adequacy of normal information processing
E= valuate the adequacy resumption of normal information processing in the event of = the need to rerun or restart a process.
C= ISA has knowledge of crisis management and business impact analysis techniques
= CISA has knowledge of disaster recovery and business continuity techniques (e.g. h= ot site, cold site, fail-safe network design, reciprocal agreements)
C= ISA has knowledge of disaster recovery and business continuity planning and proce= sses
C= ISA has knowledge of backup and storage methods and practices
C= ISA has knowledge of disaster recovery and business continuity testing approaches= and methods
C= ISA has knowledge of insurance in relation to business continuity and disaster recovery
C= ISA has knowledge of human resource issues (e.g. evacuation planning, response te= ams)
FalseTF
= Do not Do not evaluate the process for developing and maintaining documented, communicated, and tested plans for continuity of business operations and = IS processing in the event of a disruption.
= Do not Do not evaluate the adequacy of backup and recovery provisions to ensure the resumption of normal information processing in the event of a short-term disruption and/or the need to rerun or restart a process.
= Do not Do not evaluate the organization's ability to continue to provide information system processing capabilities in the event that the primary information processing facilities are not available.
D= o not Do not evaluate the organization's ability to ensure business continuity in = the event of a business disruption.
D= o not evaluate the process for developing IS processing
D= o not evaluate the process for maintaining IS processing
D= o not evaluate the documented IS processing
D= o not evaluate the communicated IS processing
D= o not evaluate the tested plans for continuity of business operations
D= o not evaluate the communicated plans for continuity of business operations
Do not evaluate the adequacy of = backup
D= o not evaluate the adequacy of recovery provisions
D= o not evaluate the adequacy of backup and recovery provisions
D= o not evaluate the adequacy of normal information processing
D= o not evaluate the adequacy resumption of normal information processing in the event of the need to rerun or restart a process.
C= IS does not have knowledge of crisis management and business impact analysis techniques
= CIS does not have knowledge of disaster recovery and business continuity techniques (e.g. hot site, cold site, fail-safe network design, reciprocal agreement= s)
C= IS does not have knowledge of disaster recovery and business continuity planning = and processes
C= IS does not have knowledge of backup and storage methods and practices
C= IS does not have knowledge of disaster recovery and business continuity testing approaches and methods
C= IS does not have knowledge of insurance in relation to business continuity and disaster recovery
C= IS does not have knowledge of human resource issues (e.g. evacuation planning, response teams)
TrueTF2MC
Evaluate the process for develop= ing and: 4 maintaining documented, communicated sys= tems tested plans for continuity of business operations IS processing in the event of a disrupti= on. All of the above None of the above
Evaluate the adequacy of backup = and recovery provisions for: 4 the resumption of normal information processing the event of a short-term disruption the need to rerun or restart a process.<= /span> All of the above None of the above
Evaluate the organization's abil= ity to: 4 continue provide information system processing capabilities to process facilities thtat are not avai= lable. All of the above None of the above
CISA has knowledge of disaster r= ecovery and business continuity techniques such as hot si= te, and/or: 4 cold siteagreements) fail-safe network design reciprocal agreements All of the above None of the above
CISA has knowledge of disaster r= ecovery and: 4 business continuity planning processes All of the above None of the above
CISA has knowledge of: 4 backup storage methods practices All of the above None of the above
CISA has knowledge of disaster r= ecovery and: 4 business continuity testing approaches methods All of the above None of the above
CISA has knowledge of: 4 insurance business continuity disaster recovery All of the above None of the above
CISA has knowledge of 4 human resource issues evacuation planning response teams All of the above None of the above
FalseTF2MC
Do not evaluate the process for developing and: 5 maintaining documented, communicated sys= tems tested plans for continuity of business operations IS processing in the event of a disrupti= on. All of the above None of the above
Do not evaluate the adequacy of = backup and recovery provisions for: 5 the resumption of normal information processing the event of a short-term disruption the need to rerun or restart a process.<= /span> All of the above None of the above
Do not evaluate the organization= 's ability to: 5 continue provide information system processing capabilities to process facilities thtat are not avai= lable. All of the above None of the above
CIS does not have knowledge of d= isaster recovery and business continuity techniques such a= s hot site, and/or: 5 cold siteagreements) fail-safe network design reciprocal agreements All of the above None of the above
CIS does not have knowledge of d= isaster recovery and: 5 business continuity planning processes All of the above None of the above
CIS does not have knowledge of:<= /td> 5 backup storage methods practices All of the above None of the above
CIS does not have knowledge of d= isaster recovery and: 5 business continuity testing approaches methods All of the above None of the above
CIS does not have knowledge of:<= /td> 5 insurance business continuity disaster recovery All of the above None of the above
CIS does not have knowledge of 5 human resource issues evacuation planning response teams All of the above None of the above
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet007.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
5. Business Application System Developmen= t, Acquisition, Implementation, and Maintenance
=
(Content Area, Approximately 16% of exam)
Evaluate the methodology and processes by which the bu= siness application system development, acquisition, implementation, and maintena= nce are undertaken to ensure that they meet the organization's business objectives. Tasks and Knowledge Statements
= 5.1 Evaluate the processes by which application systems are developed and implemented to ensure that they contribute to the attainment of the organization's business objectives.
=
= 5.2 Evaluate the processes by which application systems are acquired andimplemented to ensure that they contribute to the attainment of the organization's business objectives.
=
= 5.3 Evaluate the processes by which application systems are maintained to ens= ure the continued support of the organization's business objectives.
=
Knowledge Statements
=
= 5.01 Knowledge of system development methodologies and tools (e.g. prototyping, RAD, SDLC, object-oriented design techniques)
=
5= .02 Knowledge of documentation and charting methods
=
5= .03 Knowledge of application implementation practices(e.g. piloting, parallel run)
=
5= .04 Knowledge of software quality assurance methods
=
= 5.05 Knowledge of application architecture (e.g. client server applications, object-oriented, data warehousing, web-based applications, interfaces)
=
5= .06 Knowledge of testing principles, methods, and practices
=
= 5.07 Knowledge of project management principles, methods, and practices (e.g. PERT, CPM, estimation techniques)
=
= 5.08 Knowledge of application system acquisition processes (e.g. evaluation of vendors, preparation of contracts, vendor management, escrow)
=
5= .09 Knowledge of application maintenance principles (e.g. versioning, packagi= ng, change request)
=
5= .10 Knowledge of system migration and data conversion tools, techniques, and procedures
=
5= .11 Knowledge of application change control and emergency change management procedures
=
5= .12 Knowledge of post-implementation review techniques
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet008.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
6. Business Process Evaluation and Risk Management
TrueTF
= Evaluate the efficiency and effectiveness of information systems in supporting business processes, through techniques such as benchmarking, best practice analysis, or business process reengineering (BPR), to ensure optimization= of business results.
= Evaluate the design and implementation of programmed and manual controls to ensure that identified risks to business processes are at an acceptable level.
E= valuate business process change projects to ensure that they are properly organiz= ed, staffed, managed, and controlled.
E= valuate the organization's implementation of risk management and governance.
Evaluate business systems
Ensure that risks are managed
E= nsure that risks are managed in accordance with the organization's business objectiv= es.
E= valuate the efficiency of information systems in supporting business processes
E= valuate the effectiveness of techniques such as benchmarking
E= valuate the effectiveness of techniques such as best practice analysis
E= valuate the effectiveness of techniques such as business process reengineering (B= PR)
E= valuate the effectiveness of techniques to ensure optimization of business result= s.
Evaluate the design of programmed controls
E= valuate the implementation of programmed controls
E= valuate the programmed and manual controls to ensure that identified risks to business processes
E= valuate business process change projects to ensure that they are properly organiz= ed
E= valuate business process change projects to ensure that they are properly staffed=
E= valuate business process change projects to ensure that they are properly managed=
E= valuate business process change projects to ensure that they are properly  controlled.
E= valuate the organization's implementation of risk management
C= ISA has the knowledge of methods and approaches for designing and improving busin= ess processes (e.g. e-Business, B2B, BPR)
C= ISA has the knowledge of business process controls (e.g. management, automated and manual controls)
C= ISA has the knowledge of business process performance indicators (e.g. balanced scorecard, key performance indicators (KPI))
C= ISA has the knowledge of business project organization, management and control practices
C= ISA has the knowledge of project progress monitoring and reporting mechanisms
C= ISA has the knowledge of project success criteria and pitfalls
C= ISA has the knowledge of corporate governance risk and control frameworks
FalseTF
= Do not evaluate the efficiency and effectiveness of information systems in supporting business processes, through techniques such as benchmarking, b= est practice analysis, or business process reengineering (BPR), to ensure optimization of business results.
= Do not evaluate the design and implementation of programmed and manual controls = to ensure that identified risks to business processes are at an acceptable level.
D= o not evaluate business process change projects to ensure that they are properly organized, staffed, managed, and controlled.
D= o not evaluate the organization's implementation of risk management and governa= nce.
Do not evaluate business systems=
Ensure that risks are managed
E= nsure that risks are managed in accordance with the organization's business objectiv= es.
D= o not evaluate the efficiency of information systems in supporting business processes
D= o not evaluate the effectiveness of techniques such as benchmarking
D= o not evaluate the effectiveness of techniques such as best practice analysis
D= o not evaluate the effectiveness of techniques such as business process reengineering (BPR)
D= o not evaluate the effectiveness of techniques to ensure optimization of busine= ss results.
Do not evaluate the design of pr= ogrammed controls
D= o not evaluate the implementation of programmed controls
D= o not evaluate the programmed and manual controls to ensure that identified ris= ks to business processes
D= o not evaluate business process change projects to ensure that they are properly organized
D= o not evaluate business process change projects to ensure that they are properly staffed
D= o not evaluate business process change projects to ensure that they are properly managed
D= o not evaluate business process change projects to ensure that they are properly  controlled.
D= o not evaluate the organization's implementation of risk management
C= ISA does not have the knowledge of project progress monitoring and reporting mechanisms
C= ISA does not have the knowledge of project success criteria and pitfalls
C= ISA does not have the knowledge of corporate governance risk and control framework= s
E= valuate the efficiency and effectiveness of information systems in supporting business processes, through techniques such as: benchmarking, best practice analysis best practice analysis to ensure optimization of bu= siness results.
Evaluate the design and implemen= tation of: programmed controls manual controlsd risks to business processes<= /td>
E= valuate business process change projects to ensure that they are properly: staffed managed controlled
C= ISA has the knowledge of methods and approaches for designing and improving business processes such as: e-Business B2B BPR
C= ISA has the knowledge of business process controls e.g.: management automated controls manual controls
CISA has the knowledge of: business process performance indicators<= /span> balanced scorecard key performance indicators (= KPI)
CISA has the knowledge of: business project organization management control practices
C= ISA does not have the knowledge of methods and approaches for designing and improving business processes such as: e-Business B2B BPR
C= ISA does not have the knowledge of methods and approaches for designing and improving business processes such as: e-Business B2B BPR
C= ISA does not have the knowledge of business process controls e.g.: management automated controls manual controls
CISA does not have the knowledge= of: business process performance indicators<= /span> balanced scorecard key performance indicators (= KPI)
CISA does not have the knowledge= of: business project organization management control practices
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/sheet009.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"
7. The IS Audit Process
=
(Process Area, Approximately 10% of exam)
Conduct IS audits in accordance with generally accepte= d IS audit standards and guidelines to ensure that the organization's informat= ion technology and business systems are adequately controlled, monitored, and assessed. Tasks and Knowledge Statements
= 7.1 Develop and/or implement a risk-based IS audit strategy and objectives in compliance with generally accepted audit standards to ensure that the organization's information technology and business processes are adequate= ly controlled, monitored, and assessed, and are aligned with the organizatio= n's business objectives.
=
7= .2 Plan specific audits to ensure that the IS audit strategy and objectives are achieved.
=
7= .3 Obtain sufficient, reliable, relevant, and useful evidence to achieve the audit objectives.
=
7= .4 Analyze information gathered to identify reportable conditions and reach conclusi= ons.
=
= 7.5 Review the work performed to provide reasonable assurance that objectives have b= een achieved.
=
7= .6 Communicate audit results to key stakeholders
=
7= .7 Facilitate the implementation of risk management and control practices wi= thin the organization
=
Knowledge Statements
=
= 7.01 Knowledge of ISACA Standards and Guidelines for IS Auditing and Code of Professional Ethics
=
7= .02 Knowledge of IS auditing practices and techniques
=
= 7.03 Knowledge of techniques to gather information and preserve evidence (e.g. observation, inquiry, interview, electronic media)
=
7= .04 Knowledge of control objectives and controls related to IS (e.g. preventi= ve, detective)
=
7= .05 Knowledge of IS, business, and audit risk (e.g. threats, impacts)
=
7= .06 Knowledge of risk analysis methods, principles, and criteria
=
= 7.07 Knowledge of audit planning and management techniques (e.g. financial, quality, audit organization)
=
= 7.08 Knowledge of communication techniques (e.g. reporting, presentations, facilitation, negotiation, conflict resolution)
=
7= .09 Knowledge of personnel management techniques (e.g. staffing, training)
------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/image001.png Content-Transfer-Encoding: base64 Content-Type: image/png iVBORw0KGgoAAAANSUhEUgAAAM8AAAC7BAMAAAAwHNe7AAAAMFBMVEX//5n/zADAwMDMmf//gICZ mf8AgIAAAAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAABDQtdDAAAACXRSTlP//////////wBTT3gS AAAAAWJLR0QAiAUdSAAAAARnSUZnAQAAFD7qt1UAAAAMY21QUEpDbXAwNzEyAAAAB09tt6UAAAYj SURBVHja7dxNbuM4EAVgX8Gr7L3xAbzIBQT4BEZukN7GnbSLy96Rxx6RIiX+VJGPkhxgZqKg0Uij kw/1iqZFifLBfM/x9/AD/UA/0P8H0soQGU1GPRkipe2Xfjakvw3SHtKN/7hDj9wXrYVsf8k2AIOM UaTWQOMocj/dAalVkK3GfAekRmjMovXTCzSOulWQoekLgWz5I7SuRy44+/OaWhJ4NKFmk/49kBt3 6hsgbbursh7RfOwFsXh2PAki5ngCpP2v/jgc6M/t9ua/VXtDs3KYoNts7QrpiJmhQIFFIdDkHA45 dLt1SACk43JSaCoKktqQTsrJoKkoRGpChZNBqNSECieHbtjYa0GlU0CY1IB06ZTQDQmvDul0vEnQ GyDVIc5hICdtgbjgWAgIrwbxjlTRypMTMTgWAubXCiQUxA+Ge6ukCiQ4PHQ8LiXZE9dibSZDmg+O fx3dj8eXuaTxb3vurkFIKqiEXEFLSfashnBILEiEQknj2syeu2enhCIkFsTNdfdjUpLvEQTJBRWQ LygqSU1nusnaTDyBFAvi3iYmKJQ0QwqCPnDofpxL6oW0XFAOzcm5ktQCpWszcWn5gUJLQaGkGWr3 SOPQWwYpwx8idMCh4zHLDocIryguaB4OKKSJ0MGQFlQpSYaw19E2iOiLwJkhTa6SHQeNBQ1XgibV vCC5JAlyUhuiTdCY3DAMhLzx5cnJ2fHQMFSkCCqTsyWhkPbQtX1yUhYkZsdCX0OtpAb0AkMUIEFa IC45qUks5B0hvAXiCpKaVEJ6gQZ2gohX5TykQOhriKWPGsQ4QpMaEBfeDPEFwVCUHC8FSChIaFIL YsJ7ElTOrgESkkOhpEVseMtFJ97hm9SGivA8RLtDuTRD901Q1iImvAmSk+ObhEDZBDFBckEboDS8 BvTCr5tL6IuBkvAcJCX3Ii3QLaSnNadb3GoWSiQH8QW9hMvHioXs/ZtwP1CA4vD8VeK7yJzOPORu PBpTh6IJwkMicxIh7SHtXkbDMNTDs1BRUMSMhxCdvekYFrcitIQ3QnlBKVOD5huPMjRLI5ROPznT hpTiX0ZpeA66V5gRoi1QKIn+RMlxTAtyi9saNISbIHNBPFOBlhuPwuiOw5shibHjuzkFVaFpdqVp KMjMDpALj2xBNWYP6ErJcTo9C0qk0+mJ0AAw+0DXNrMLhDA7jTpE2gpdkYGwAxSc1/HP7ydCDnkQ fV6a0ibIOe/vFnLSk6Crd34RXcaj0ab1kHMe776gSfq9DSIxNuvMUL1N7l0n3aYGQT629zm5lmSh bPcYAF0XZ4Q+PVRtE/kNHhWoPAua2xMn15Ds6ZT2kDYYRLGzJFcfEFM10xk9CEWxFZDcJg+ZaJta CX0J7cmTq0jnBFJtKGnPBF2SQ2hTL0S58yuHBMlDyTa1yoovi61MThwQZ38rJN6mJq5hr6XDQWyb ehbLRXvY5C78RN4BEeNwBfFtgiA3GpjYRKiUzuglmivvsMlxbUIhNrZ0Qq1LGGQkR0quHBDwhUEm tkpyZZtw6L0XSl+3IKTZ3GrJZW06w5ejJehygSQc6m5R2ib0Sr7hoWpyidRxE6RvcGcD4gxDmn+1 UsMJbTp33KiiNQUFCb8jZtZCU5u6biY+ViQXpA6Iye4XUpCX1BYISs63CYcM9iYuSQaHipJwqHub wbrkeqE8ux2Sk/ec7JycDD3WJPfaC5n6uf2K5Co7nfZNrrJ367EqOdMPUT9EKyAtLVzXDYX6jsHO CbVaUHUP5KN7QlUYlF5UKS+WbCkogdKLKqEkFKoXFEP5s3/Z9ay2U91MHEPZs386vkCHBKdAqHj2 z5UEQq2CGCjaXxquoe7g8FDYjTmt/vYIrgEZFKJmQRwU7y8lKLl2cNwLNtlfqhHptR1c+0kQQIIc 7NmWz5azw7MtTQl0kAedqkOPQAd6dIvEol5hB3sYjYSiCHfAx+s0R03/pjAHfmCQKLXC9yDT8Qik JuZAy+mBGKqD6X2AXa9UuqENxw/0n4YI/sSDbdByhvFkyFLgJx7sAGGfeLAVgj/xYCOkuz7xYAuk AoQ0acvwNt8DTY8zwZ94sAEahxz7iQd7Q53HD7Qe+gd5Ghw8CD1RXwAAAABJRU5ErkJggk== ------=_NextPart_01C5E60F.7FB651C0 Content-Location: file:///C:/D91C32F9/4.DisasterRecoveryandBusinessContinuity_files/filelist.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml; charset="utf-8" ------=_NextPart_01C5E60F.7FB651C0--