You have been asked by senior management to lead a session during your company's annual two-day, enterprise-wide, intra-organizational training workshop.

Management has asked you to make this intra-organizational training session on the topic of risk and continuity planning.

Task:

1. What is the difference between a risk analysis (RA) and a business impact analysis (BIA)? 2. What is the difference between a disaster recovery plan (DRP) and a business continuity plan (BCP)? 3. Why is it important to have detailed backup and recovery steps within your disaster recovery plan (DRP)? 4. What is the purpose of a risk analysis? What is the purpose of a business impact analysis? Why are these an important first step in defining a BCP and DRP? 5. How does risk analysis (RA) relate to a business impact analysis for an organization?