Review questions

1. Which of the following statements is false regarding risk assessment and BIA?
   1. BIA helps us identify the RPO, RTO, and MTD for critical assets.
   2. Risk assessment helps us identify risk mitigation plans.
   3. A successful business continuity plan needs BIA.
   4. BIA and risk assessment are the same.
2. Which of the following is backward-looking in relation to BIA?
   1. RPO
   2. RTO
   3. MTD
   4. SSO
3. Which of the following helps identify the time for which a critical asset can remain unavailable without significantly impairing the business?
   1. RPO
   2. RTO
   3. MTD
   4. SSO
4. The risk after implementing controls is called ___.
   1. Current risk
   2. Residual risk
   3. Inherent risk
   4. Total risk
5. The risk after implementing controls in a real-time scenario against threats is called ___.
   1. Residual risk
   2. Inherent risk
   3. Current risk
   4. Total risk