Quiz Module #2 Module #2 What is the relationship between business continuity and organizational resilience?(one selection) A - Business continuity is an integral discipline of organizational resilience. B - Business continuity is a minor part of organizational resilience. C - Business continuity is distinct from organizational resilience D - Business continuity is the same thing as organizational resilience. How is resilience a competitive advantage? A - Because resilience means outlasting your competitors. B - Because resilience is an excellent marketing tool. C - Because resilience is an excellent way to retain staff. D - Resilience cannot be considered a competitive advantage. What is business continuity's role in holistic resilience efforts? A - Business continuity is the main discipline within organizational resilience B - Business continuity must be part of an integrated approach. C - Business continuity is a minor part of organizational resilience. D - Business continuity does not have that many synergies with organizational resilience. What is the basic international standard for business continuity? A - ISO 9001 B - ISO 31000 C - ISO 27001 D - ISO 22301 How is business continuity different than risk management? A - Business continuity does not consider the probability of disruptive events B - Business continuity focuses more on probability than on the nature of the disruptive event. C - It’s a trick question, they are largely similar. D - Business continuity is more important for resilience than risk management Why must analyses be objective? A - To ensure that the results are correct B - To ensure that the results are reliable C - To ensure that results are shareable D - To ensure that results are defensible to auditors What does "critical" mean in a business continuity context? A - Critical means important B - Critical means urgent C - Critical means irreplaceable D - Critical means unimportant What is the importance of the policy and programme management phase? A - Clarifying roles and responsibilities B - Assigning adequate resources to the programme C - Setting up a shared methodology D - All of the answer choices What is the difference between a policy and a programme? A - It’s a trick question, they are largely similar. B - A policy is a subsection of a programme C - The policy illustrates why; the programme illustrates how business continuity is implemented in the organization D - The policy illustrates how; the programme illustrates why business continuity is implemented in the organization What are the benefits of embedding business continuity? A - Ensuring that everyone is speaking a common operational language B - Developing 360° awareness of staff’s BCMS roles C - Embedding business continuity in daily activities D - All of the answer choices How often should embedding initiatives be conducted in your organization? A - Once a year B - Once every two years C - It's a trick question: as often as it is appropriate D - Once every five years What is the purpose of the analysis phase? A - Identifying the organization's critical processes B - Identifying the organization's recovery priorities C - The organization's continuity resource requirements D - All of the answer choices What is an RTO? A - A recovery target objective B - A rapid time objective C - A recovery time objective D - A rigid timeframe obligation Which of these is an acceptable way to perform a BIA analysis? A - Thinking about the probability of dirsuptions B - Thinking about active continuity strategies and tactics C - It's a trick question: none of these are appropriate D - Thinking about impacts of disruptions in non-peak periods Which of the following is a good quality for a BIA to have? A - "It strives to be as objective as possible " B - It is an efficiency evaluation for every process C - It allows for the unique perspective of each process owner D - It determines which processes are most important What's the purpose of the design phase? A - Ensure that recovery priorities are met B - Ensure that threats and vulnerabilities are mitigated C - Ensure that resource requirements are deployable D - All of the answer choices If I have a scenario independent plan, that means... A - I never have to think about the causes of incidents/disruptions B - I am prepared for only some types of incidents, not others C - I am prepared for the consequences of any kind of incident/disruption D - I am prepared for everything and can standby further business continuity efforts What is the main point of a BCP? A - Prevent incidents B - Help the organization meet its recovery priorities C - Protect the organization from losing technological assets D - Set the organization’s recovery priorities If my organization achieves a perfect score on a business continuity exercise… A - It’s an indeterminate result: it may mean that we can do no more or that the exercise was ineffective B - It’s a bad result: it means our exercise was a total failure C - It’s a great result: it means we can do nothing more D - It’s a great result: it means that our organization has achieved perfect resilience Ready to send GO BACK to module #2
