1.) Disaster Recovery is often implemented as a responsibility of the Information Systems Department in an Organization.

• What are the pros and cons of this organizational placement?
• Where should the responsibility for Business Continuity Planning be placed in an organization?
• Where does the responsibility for implementation lie in an organization?

2.) Risk Analysis requires the analysis of the criticality of each business process followed by an analysis of threats to those processes. From what sources could you collect information to help in these decisions?

3.) How does a business play a role in the BCP of its key suppliers, outsourced vendors, or its customers? If you can't get materials or sell your product your business is in trouble.