BCI Risk Assessment & Impact Analysis 3

Question 1

Which of the following best describes a 'threat' in the context of BCI risk assessment methodology?

Accepted Answer

A potential cause of an unwanted incident that may harm the organization

Answer

A threat is any potential event or action that could negatively impact the organization's ability to deliver its objectives.

Question 2

The BIA process typically begins with identifying:

Accepted Answer

Critical business activities and the resources required to perform them

Answer

The BIA starts by identifying which activities are critical to the organization and mapping what resources they require.

Question 3

A qualitative risk assessment matrix typically plots risks according to:

Accepted Answer

Likelihood and impact using descriptive scales such as High/Medium/Low

Answer

Qualitative matrices use descriptive rating scales rather than precise numerical values to position risks.

Question 4

Which scenario best illustrates a 'loss of access' disruption scenario used in BIA?

Accepted Answer

A building evacuation prevents staff from reaching their workstations for several days

Answer

Loss of access scenarios specifically address situations where physical entry to premises or resources is denied.

Question 5

In the BCI framework, 'vulnerability' in risk assessment refers to:

Accepted Answer

A weakness in an asset or control that could be exploited by a threat

Answer

Vulnerability is an inherent weakness that makes an organization susceptible to harm from a threat source.

(BCI) Business Continuity Institute Certification Practice Test