BCI Cheat Sheet 2026

The 30 highest-yield BCI facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the primary purpose of a Maximum Tolerable Period of Disruption (MTPD)? → To define the absolute time limit beyond which business viability is threatened
2. In a parallel test, what distinguishes it from a full interruption test? → Recovery systems run simultaneously while production stays online
3. Which method is commonly used for root cause analysis in BCI quality management? → The Five Whys technique or fishbone diagram for systematic investigation
4. How should the success of a crisis management plan be evaluated? → By minimizing damage, restoring functions, and ensuring safety
5. Which of the following represents a key quality criterion for BIA data? → The data must be current, accurate, and validated by relevant stakeholders
6. What should be included in a post-crisis review of the recovery plan? → Evaluating effectiveness and incorporating lessons learned
7. In recovery plan documentation, what is an 'Action Card'? → A concise, role-specific task list for use during an incident
8. What is a critical consideration when responding to a natural disaster? → Prioritizing safety, evacuation, and coordination with emergency services
9. Which risk treatment option involves accepting the potential consequences of a risk without taking mitigating action? → Risk retention
10. In recovery plan testing, what is a 'dry run'? → A rehearsal where teams perform actual recovery procedures without a live incident
11. How do BCI professionals establish measurable quality objectives? → Defining specific, measurable, achievable, relevant, and time-bound targets
12. When implementing advanced professional practice practices, what should BCI professionals prioritize? → Alignment with professional standards, stakeholder needs, and organizational goals
13. How do BCI professionals effectively transfer training knowledge to workplace practice? → Through supervised practice, mentoring, and progressive independence with feedback
14. What should be included in a recovery strategy? → Outlining actions, resources, and recovery timelines
15. In BC plan maintenance, what triggers an 'unscheduled review' outside the normal annual cycle? → A significant organizational change, incident, or major exercise finding
16. Which component of a recovery plan specifically addresses how the organization will communicate with customers and the media during a disruption? → Crisis communication plan
17. In risk assessment, 'inherent risk' differs from 'residual risk' in that inherent risk is: → The risk level before any controls are applied
18. What is the primary purpose of a post-exercise report (PER) after a BC test? → To document lessons learned and improvement actions
19. Which BCI Good Practice Guidelines (GPG) practice area specifically covers exercising and testing? → PP4 – Exercising and Testing
20. Which factor most critically determines the appropriate recovery site tier (hot/warm/cold) for a business process? → The process's RTO and RPO requirements
21. What is the role of a business continuity management team? → To develop, implement, and test the business continuity plan
22. What is the purpose of a risk matrix in risk assessment? → To categorize risks by severity and likelihood
23. What is a key principle of advanced professional practice in Business Continuity Institute Certification practice? → Applying structured methodologies based on evidence and best practices
24. What is the first step in creating a recovery plan? → Conducting a Business Impact Analysis
25. Which test type involves moving actual production workloads to the recovery site for a defined period? → Full interruption test
26. What is the benefit of interdisciplinary collaboration in Business Continuity Institute Certification practice? → It brings diverse expertise and perspectives that improve outcomes
27. What is the primary risk of relying solely on a reciprocal agreement as a recovery site strategy? → Both organizations may be simultaneously affected by a regional disaster
28. What is the required relationship between Recovery Time Objective (RTO) and Maximum Tolerable Period of Disruption (MTPD)? → RTO must be less than or equal to MTPD
29. What is the role of stakeholders during crisis management? → To be informed and support decision-making during the crisis
30. What role does data analytics play in Business Continuity Institute Certification decision-making? → It supports evidence-based decisions by identifying patterns and trends in data