BCI Advanced Professional Practice 3 — Questions and Answers
Question 1: Which element is MOST important when designing a BC exercise that tests organizational decision-making under pressure?
- Providing participants with detailed scripts to follow
- Injecting realistic injects that force unscripted decisions by key stakeholders (Correct answer)
- Limiting participation to the BC team only
- Using only tabletop format to reduce cost
Correct answer: Injecting realistic injects that force unscripted decisions by key stakeholders
Realistic, unscripted injects reveal decision-making gaps that scripted exercises cannot expose, providing more actionable insights.
Question 2: In the context of BCI standards, what does 'Maximum Tolerable Period of Disruption' (MTPD) represent?
- The time in which IT systems must be restored to prevent data loss
- The maximum duration an organization can survive the loss of a critical activity before viability is threatened (Correct answer)
- The RTO plus the Recovery Point Objective combined
- The time allowed for staff to evacuate a building safely
Correct answer: The maximum duration an organization can survive the loss of a critical activity before viability is threatened
MTPD defines the outer limit of disruption tolerance — beyond this point, the organization's survival or strategic objectives are fundamentally compromised.
Question 3: When a BC program is first implemented in a large organization, which stakeholder group typically presents the GREATEST challenge to engagement?
- External auditors
- Senior leadership who see BC as a cost center with no visible benefit (Correct answer)
- Junior staff unfamiliar with emergency procedures
- Regulatory bodies requiring compliance documentation
Correct answer: Senior leadership who see BC as a cost center with no visible benefit
Senior leaders who perceive BC as overhead rather than value-add often withhold resources and sponsorship, making their buy-in the most critical and challenging to secure.
Question 4: A BC professional is asked to validate that a plan is 'fit for purpose.' Which assessment method provides the highest level of confidence?
- Document review by an internal auditor
- Live, full-scale exercise involving actual system failovers and staff activation (Correct answer)
- Peer review by another BC team member
- Checklist completion by the plan owner
Correct answer: Live, full-scale exercise involving actual system failovers and staff activation
A full-scale exercise that activates real resources under realistic conditions provides the strongest evidence that plans will work when needed.
Question 5: Under ISO 22301, which clause directly requires organizations to evaluate BC performance and the effectiveness of the BCMS?
- Clause 6 – Planning
- Clause 9 – Performance Evaluation (Correct answer)
- Clause 7 – Support
- Clause 8 – Operation
Correct answer: Clause 9 – Performance Evaluation
ISO 22301 Clause 9 covers monitoring, measurement, analysis, evaluation, internal audit, and management review — all components of performance evaluation.
Question 6: A BC practitioner is advising on a merger. Which BC consideration is MOST often overlooked during due diligence?
- Reviewing the target company's IT asset inventory
- Assessing the compatibility of each entity's BC plans and recovery capabilities (Correct answer)
- Confirming the target's financial audits are current
- Verifying property insurance coverage of acquired assets
Correct answer: Assessing the compatibility of each entity's BC plans and recovery capabilities
Incompatible BC plans and recovery capabilities can create hidden resilience gaps that only surface after integration, making this a critical but often skipped due diligence item.
Question 7: Which concept describes the minimum level of service an organization must maintain to satisfy its legal, regulatory, and reputational obligations during a disruption?
- Minimum Business Continuity Objective (MBCO) (Correct answer)
- Recovery Point Objective (RPO)
- Maximum Tolerable Period of Disruption (MTPD)
- Business Impact Analysis (BIA) threshold
Correct answer: Minimum Business Continuity Objective (MBCO)
MBCO defines the baseline service level that must be sustained during a disruption to meet the organization's essential obligations.
BCI Advanced Professional Practice 3
Which element is MOST important when designing a BC exercise that tests organizational decision-making under pressure?