BCI Risk Assessment & Impact Analysis 2

Question 1

Which technique uses a structured 'what-if' approach to systematically identify potential failure modes in a business continuity context?

Accepted Answer

HAZOP (Hazard and Operability Study)

Answer

HAZOP systematically examines processes using guide words to identify deviations that could cause disruptions.

Question 2

In a Business Impact Analysis, what does the term 'single point of failure' refer to?

Accepted Answer

A component whose failure causes the entire system or process to stop functioning

Answer

A single point of failure is any non-redundant element whose failure would halt the entire dependent system or process.

Question 3

The BCI Good Practice Guidelines recommend that BIA data should be validated by:

Accepted Answer

Senior management and process owners, not just IT

Answer

BIA outputs must be validated by process owners and senior management to ensure accuracy and business relevance.

Question 4

Which risk treatment option involves accepting the potential consequences of a risk without taking mitigating action?

Accepted Answer

Risk retention

Answer

Risk retention (or acceptance) means the organization consciously decides to absorb the impact if the risk materializes.

Question 5

When conducting a BIA, 'interdependency mapping' is used to:

Accepted Answer

Identify upstream and downstream dependencies that could amplify disruption impact

Answer

Interdependency mapping reveals how a disruption to one process can cascade to affect other connected processes.

(BCI) Business Continuity Institute Certification Practice Test