Appearance
← CISM syllabus chapters

Domain 4 · Objective reference 4A3 · Chapter 26 of 35

Sustain essential activity during disruption

About 5 minutes · Detailed public baseline effective 2022; the replacement exam starts 3 November 2026 and its exact revised topic/task mapping remains unverified

Session only. Enable saving or download a backup from this course’s hub.

Completion is self-reported and does not certify understanding.

See it · Try it · Recall it

Picture the topic

Remember this: Continuity keeps the business working during disruption.

CISM · 4A3Milestone timeline
Milestone timelineMilestones show conceptual order. Spacing does not represent measured duration; real plans include dependencies and iteration. Priority: Choose essential activities and minimum service. Workaround: Prepare alternate people facilities and processes. Exercise: Test whether the workaround sustains the activity1Priority2Workaround3ExerciseMilestones, not elapsed time
Milestones show conceptual order. Spacing does not represent measured duration; real plans include dependencies and iteration.
Visual preferences

Reduced-motion preferences are respected. Highlights guide attention; they do not represent measured traffic or elapsed time.

Explore the anchors

Choose essential activities and minimum service.

Concept matching activity

Match this task or description to its concept:

Prepare alternate people facilities and processes.

Choose a concept before checking the explanation.

Recovery timeline sandbox

Illustrative targets: service RTO 4 hours, data RPO 2 hours. Restoration and validation are sequential in this exercise. Change the durations and backup age.

Service ready after 5h: RTO missed. Data age 4h: RPO missed.

The bars show task duration on a fixed 16-hour scale. A restore can meet RTO and miss RPO. Real acceptance also checks integrity, dependencies and business functionality.

A quick way to study this topic
  1. Hide the explanation and redraw these three anchors from memory.
  2. Explain the difference between the anchors in your own words.
  3. Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
  4. Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.

Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.

What this chapter explains

Management concept and decision mechanism

A continuity plan describes how priority business activity continues within agreed tolerances when normal resources are unavailable. It can involve alternate staff, locations, suppliers, communications or manual procedures. It is broader than restoring technology. Identify activation criteria, authority, capacity limits, dependencies and the conditions for returning to normal work. Workarounds must still protect information, approvals and reconciliation. Exercise whether staff can actually perform the process and whether it meets the required service level rather than relying on a document’s approval date.

Build a recovery priority worksheet

For each important activity, record the business owner, consequences of interruption over time, minimum acceptable service, dependencies, recovery objectives, and available workarounds. Identify the people, premises, information, suppliers, and technology needed to operate. Check that a workaround remains feasible during the same disruption that affects the primary service.

Consider an order-processing service whose temporary manual process can support only a fraction of normal demand. The owner should establish when that reduced capability becomes unacceptable. Then compare the required recovery time with demonstrated restoration capability and escalate any gap. Restore dependencies in a sequence that supports the business activity, rather than simply choosing the server that is easiest to restart.

Keep the maximum tolerable period of disruption distinct from a recovery time target. A recovery target should leave room for validation and restoration of the wider activity. Data-loss objectives also need to reflect how missing transactions will be reconciled; a restored database can be technically available while orders remain inconsistent.

Worked example

A manual order process maintains essential service during a system outage, with controlled records and a defined reconciliation into the recovered application.

Check your understanding

What risk can a manual continuity workaround introduce?

Show explanation

Uncontrolled access, duplicate or missing transactions, weak approval and poor reconciliation can create integrity and confidentiality issues.

Source and study boundary

Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.