APP APP Business Continuity and Emergency Planning 1 — Questions and Answers
Question 1: What is the primary goal of a Business Continuity Plan (BCP) from an asset protection perspective?
- To ensure critical business functions continue during and after a disruption, preserving asset value (Correct answer)
- To maximize short-term profits during an emergency
- To eliminate the need for insurance coverage
- To replace the company's legal structure in a crisis
Correct answer: To ensure critical business functions continue during and after a disruption, preserving asset value
A BCP is designed to maintain critical operations during disruptions, directly preserving the going-concern value of business assets and preventing financial losses.
Question 2: Which BCP component identifies the minimum resources required for a business to resume critical operations after a disaster?
- Minimum Business Continuity Objective (MBCO) (Correct answer)
- Recovery Time Objective (RTO)
- Maximum Tolerable Period of Disruption (MTPD)
- Business Impact Analysis (BIA)
Correct answer: Minimum Business Continuity Objective (MBCO)
The MBCO defines the minimum level of services and resources needed to satisfy stakeholder requirements and protect the business's core assets during recovery.
Question 3: A Business Impact Analysis (BIA) in asset protection planning is used to:
- Identify critical business processes and quantify the financial impact of their disruption (Correct answer)
- Calculate quarterly tax obligations
- Design the company's organizational chart
- Audit employee performance reviews
Correct answer: Identify critical business processes and quantify the financial impact of their disruption
A BIA maps essential business functions, estimates the cost of their failure over time, and helps prioritize recovery resources to protect the most valuable assets first.
Question 4: In business continuity planning, Recovery Time Objective (RTO) is defined as:
- The maximum acceptable time to restore a business function after a disruption (Correct answer)
- The annual revenue target set by management
- The time required to complete an insurance claim
- The duration of a scheduled maintenance window
Correct answer: The maximum acceptable time to restore a business function after a disruption
RTO specifies the target time within which a process must be restored after a disaster to avoid unacceptable financial or operational consequences.
Question 5: Which US federal guideline is commonly referenced as a best practice framework for private sector business continuity planning?
- NIST SP 800-34 (Correct answer)
- IRS Revenue Ruling 2004-77
- SEC Regulation D
- FINRA Rule 4370
Correct answer: NIST SP 800-34
NIST SP 800-34 provides contingency planning guidelines widely adopted by both government agencies and private sector organizations to protect information systems and assets.
Question 6: Which type of business continuity site is fully equipped with hardware, software, and data and can be operational almost immediately after a disaster?
- Hot site (Correct answer)
- Cold site
- Warm site
- Mobile recovery unit
Correct answer: Hot site
A hot site mirrors the primary operations environment and can be activated almost immediately, minimizing downtime and protecting revenue-generating assets during a crisis.
APP APP Business Continuity and Emergency Planning 1
What is the primary goal of a Business Continuity Plan (BCP) from an asset protection perspective?