Mixed Deck — All BCI Topics Flashcards

Why should incident response teams be trained regularly?

Answer: To ensure preparedness and effectiveness during crises

Regular training for incident response teams is vital to keep their skills sharp and ensure they are familiar with protocols and procedures. It helps them practice their roles, identify potential gaps, and build confidence, leading to a more coordinated and effective response when a real crisis occurs. This preparedness significantly reduces the impact and duration of incidents.

When conducting a BIA, 'interdependency mapping' is used to:

Answer: Identify upstream and downstream dependencies that could amplify disruption impact

Interdependency mapping reveals how a disruption to one process can cascade to affect other connected processes.

What is the role of technology in crisis management?

Answer: To facilitate communication and operational coordination

Technology plays a crucial role in crisis management by providing tools for rapid and reliable communication among team members, stakeholders, and emergency services. It also supports operational coordination through data sharing, real-time monitoring, and resource allocation. This enables faster decision-making and a more efficient response to incidents.

According to BCI principles, what is the primary purpose of post-incident reviews in building organizational resilience?

Answer: To capture lessons learned, identify gaps in BC plans, and drive improvements before the next disruption occurs

Post-incident reviews convert real disruption experience into improvements that strengthen future resilience.

What is the key difference between a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP)?

Answer: BCPs address overall business continuity while DRPs focus specifically on restoring IT infrastructure

A BCP covers all critical business functions and processes, whereas a DRP is specifically focused on recovering IT systems and data.

What is the value of active listening in BCI professional practice?

Answer: It ensures accurate understanding and demonstrates respect for the speaker

Active listening in BCI practice ensures accurate understanding, builds trust, and demonstrates respect, leading to better professional outcomes.

How does embedding BC into organizational culture differ from maintaining a BC program?

Answer: Cultural embedding means BC thinking is applied intuitively by all staff in daily decisions, whereas a program is a formal structured process managed by a team

When BC is embedded in culture, resilience becomes automatic and instinctive rather than a reactive compliance exercise.

What does RPO (Recovery Point Objective) measure in the context of a BIA?

Answer: The maximum tolerable data loss measured in time

RPO defines the maximum tolerable amount of data loss measured in time, indicating how far back data must be recoverable after a disruption.

How does the BCI define 'organizational resilience'?

Answer: The ability of an organization to anticipate, prepare for, respond to, and adapt to incremental change and sudden disruptions in order to survive and prosper

BCI's definition of organizational resilience encompasses adaptive capacity across all dimensions, not just recovery speed.

Which legal concept holds a parent company responsible for the BC failures of its subsidiaries when those failures cause third-party harm?

Answer: Vicarious liability

Vicarious liability can make a parent company legally responsible for the acts or omissions of entities under its control.

Which term refers to the maximum amount of time a business function can be unavailable before unacceptable consequences occur?

Answer: Maximum Tolerable Period of Disruption (MTPD)

The Maximum Tolerable Period of Disruption (MTPD) is the absolute maximum time a function can be disrupted before consequences become unacceptable to the organization.

The EU's Network and Information Security (NIS2) Directive requires entities to report significant incidents within how many hours of detection?

Answer: 24 hours

NIS2 requires an early warning notification to the relevant authority within 24 hours of becoming aware of a significant incident.

What is a critical consideration when responding to a natural disaster?

Answer: Prioritizing safety, evacuation, and coordination with emergency services

When responding to a natural disaster, the immediate and paramount concern is the safety of individuals. This involves swift evacuation procedures and close coordination with local emergency services to ensure effective rescue and aid efforts. These actions are critical for saving lives and minimizing human suffering before focusing on property or financial recovery.

What is the relationship between Business Continuity Management (BCM) and organizational resilience according to BCI?

Answer: BCM is one component of organizational resilience, which also includes risk management, crisis management, and other disciplines

The BCI positions BCM as a key discipline within the broader organizational resilience framework alongside other complementary practices.

What is the primary risk of relying solely on a reciprocal agreement as a recovery site strategy?

Answer: Both organizations may be simultaneously affected by a regional disaster

Reciprocal agreements between nearby organizations carry the risk that a single regional event (flood, power outage) could disable both parties simultaneously.

How do BCI professionals establish measurable quality objectives?

Answer: Defining specific, measurable, achievable, relevant, and time-bound targets

Quality objectives in BCI practice follow SMART criteria to ensure they can be tracked, achieved, and meaningfully evaluated.

What is 'inventory buffering' as a supply chain BC strategy?

Answer: Maintaining strategic safety stock of critical materials to sustain operations during a supplier disruption

Safety stock provides a time buffer that allows the organization to continue operating while alternative sourcing is activated.

What is 'scenario-based testing' in the context of business continuity?

Answer: Designing exercises around realistic, plausible disruption events to validate plan effectiveness

Scenario-based testing uses realistic disruption storylines to evaluate whether plans, people, and resources respond effectively.

Which recovery plan element defines the specific people authorized to declare a disaster and activate the BC plan?

Answer: Invocation authority

Invocation authority identifies who has the power to formally declare an incident and trigger activation of the BC plan, preventing unauthorized or premature activation.

What is the most effective communication approach for BCI professionals?

Answer: Adapting communication style to the audience while maintaining accuracy

Effective BCI professionals adapt their communication style to the audience's needs and knowledge level while ensuring accuracy and completeness.