CDRP case studies
CDRP · Put your knowledge to work in context.
This independent study page provides practice for CDRP. Its editorial learning areas include Cyber-risk identification and analysis; Risk options, shared failures and accountable facility resilience; Data-centre procedures, coordination and operational records; Capacity, airflow, energy and constrained infrastructure; Security operations, monitoring and response; Identity, access and cryptographic protection; Continuity, backup and technical recovery. The CDRP case studies are 6 cases and about 1,151 words.
1A control comparison with explicit effectiveness and uncertainty
A fictional organization estimates the value exposed by one defined incident scenario at five hundred thousand currency units and the fraction lost in one successful incident at forty percent. Its classroom model estimates an annualized incident rate of one half, and the exercise asks for expected annual loss rather than a prediction that exactly half an incident occurs each year.
206 words, about 1 min2An insured outage still has an operational owner
A fictional data-centre service adds an insurance arrangement intended to cover specified financial losses. Its risk worksheet then removes every outage scenario, including customer interruption, recovery delay and life-safety dependencies.
171 words, under 1 min3Two approved maintenance jobs remove both nominal paths
A fictional facility has two nominally redundant paths supporting an IT service. Separate maintenance requests each propose work on one path, and each worksheet assumes the other will remain available.
171 words, under 1 min4Electrical headroom is unusable because cooling is constrained
A fictional data hall has measured spare electrical headroom under its stated operating scenario. A proposed rack addition also needs cooling and floor placement, but the supplied local cooling assessment shows the intended zone is already at its qualified limit.
163 words, under 1 min5An incident review with an action that can be checked
A fictional delivery team restores service after a release encounters an undocumented database dependency. The initial meeting ends with the statement that the engineer should be more careful, but no owner, test or review date is recorded.
219 words, about 1 min6SaaS access after a role change
A fictional organization uses a managed collaboration service for internal planning documents. The provider maintains the application and underlying servers, while the organization configures users, groups and sharing settings.
221 words, about 1 min