Quiz Module #2 27 Quiz Module 2 What is the relationship between business continuity and organizational resilience? Business continuity is an integral discipline of organizational resilience. Business continuity is a minor part of organizational resilience. Business continuity is distinct from organizational resilience. Business continuity is the same thing as organizational resilience. How is resilience a competitive advantage? Because resilience means outlasting your competitors. Because resilience is an excellent marketing tool. Because resilience is an excellent way to retain staff. Resilience cannot be considered a competitive advantage. What is the role of business continuity in holistic resilience efforts? Business continuity is the main discipline within organizational resilience. Business continuity must be part of an integrated approach. Business continuity is a minor part of organizational resilience. Business continuity does not have that many synergies with organizational resilience. What is the basic international standard for business continuity? ISO 9001 ISO 31000 ISO 27001 ISO 22301 How is business continuity different than risk management? Business continuity does not consider the probability of disruptive events. Business continuity focuses more on probability than on the nature of the disruptive event. It’s a trick question, they are largely similar. Business continuity is more important for resilience than risk management Why do analyses need to be objective? To ensure that the results are correct. To ensure that the results are reliable. To ensure that results are shareable. To ensure that results are defensible to auditors. What does “critical” mean in a business continuity context? Critical means important. Critical means urgent. Critical means irreplaceable. Critical means unimportant. What is the importance of the policy and programme management phase? Clarifying roles and responsibilities. Assigning adequate resources to the programme. Setting up a shared methodology. All of the answer choices. What is the importance of the policy and programme management phase? It’s a trick question, they are largely similar. A policy is a subsection of a programme. The policy illustrates why; the programme illustrates how business continuity is implemented in the organization. The policy illustrates how; the programme illustrates why business continuity is implemented in the organization. What are the benefits of embedding business continuity? Ensuring that everyone is speaking a common operational language. Developing 360° awareness of staff’s BCMS roles. Embedding business continuity in daily activities. All of the answer choices. How often should embedding initiatives be conducted in your organization? Once a year. Once every two years. It’s a trick question: as often as it is appropriate. Once every five years. What is the purpose of the analysis phase? Identifying the organization’s critical processes. Identifying the organization’s recovery priorities. The organization’s continuity resource requirements. All of the answer choices. What is an RTO? A recovery target objective. A rapid time objective. A recovery time objective. A rigid timeframe obligation. Which of these is an acceptable way to perform a BIA analysis? Thinking about the probability of dirsuptions. Thinking about active continuity strategies and tactics. It’s a trick question: none of these are appropriate Thinking about impacts of disruptions in non-peak periods. Which of the following is a good quality for a BIA to have? It strives to be as objective as possible. It is an efficiency evaluation for every process. It allows for the unique perspective of each process owner. It determines which processes are most important. What’s the purpose of the design phase? Ensure that recovery priorities are met. Ensure that threats and vulnerabilities are mitigated. Ensure that resource requirements are deployable. All of the answer choices. If I have a scenario independent plan, that means… I never have to think about the causes of incidents/disruptions. I am prepared for only some types of incidents, not others. I am prepared for the consequences of any kind of incident/disruption I am prepared for everything and can standby further business continuity efforts. What is the main point of a BCP? Prevent incidents. Help the organization meet its recovery priorities. Protect the organization from losing technological assets. Set the organization’s recovery priorities. If my organization achieves a perfect score on a business continuity exercise… It’s an indeterminate result: it may mean that we can do no more or that the exercise was ineffective. It’s a bad result: it means our exercise was a total failure. It’s a great result: it means we can do nothing more. It’s a great result: it means that our organization has achieved perfect resilience. Your score is GO BACK to module #2
