BCM BCM Program Governance & Compliance 2 — Questions and Answers
Question 1: What is the purpose of a BCM program scope statement?
- To list all vendors
- To define which business units, locations, and processes are covered by the BCM program (Correct answer)
- To document recovery time objectives
- To describe the IT infrastructure
Correct answer: To define which business units, locations, and processes are covered by the BCM program
A scope statement clearly defines the boundaries of the BCM program, including which units, locations, and processes it covers.
Question 2: Which BCM lifecycle phase involves reviewing program performance and identifying improvements?
- Initiation
- Embedding and management
- Ongoing program management and review (Correct answer)
- Implementation
Correct answer: Ongoing program management and review
Ongoing program management and review is the phase where BCM performance is assessed, lessons learned are incorporated, and continuous improvement occurs.
Question 3: What is a 'BCM program charter'?
- A technical recovery runbook
- A formal document authorizing the BCM program and defining its mandate, resources, and leadership (Correct answer)
- A list of emergency contacts
- A network diagram
Correct answer: A formal document authorizing the BCM program and defining its mandate, resources, and leadership
A BCM program charter formally authorizes the program, defines its mandate, allocates resources, and establishes leadership authority.
Question 4: Under ISO 22301, what must top management demonstrate regarding BCM?
- Only IT leadership commitment is required
- Leadership and commitment by integrating BCM into organizational strategy and ensuring resources (Correct answer)
- Annual report submissions to regulators
- Outsourcing BCM to a third party
Correct answer: Leadership and commitment by integrating BCM into organizational strategy and ensuring resources
ISO 22301 requires top management to demonstrate leadership and commitment by embedding BCM into organizational strategy and ensuring adequate resources.
Question 5: What is the significance of 'interested parties' in ISO 22301 BCM planning?
- They are only external regulators
- They include any stakeholders whose needs and expectations must be understood to define BCM scope and requirements (Correct answer)
- They refer exclusively to customers
- They are optional considerations
Correct answer: They include any stakeholders whose needs and expectations must be understood to define BCM scope and requirements
Interested parties under ISO 22301 include any stakeholders—internal or external—whose needs and expectations must be understood to effectively scope and implement the BCMS.
Question 6: Which document type in a BCM program provides step-by-step operational instructions for executing specific recovery tasks?
- BCM policy
- BCM strategy document
- Recovery procedure or work instruction (Correct answer)
- Program charter
Correct answer: Recovery procedure or work instruction
Recovery procedures or work instructions provide detailed, step-by-step operational guidance for executing specific tasks during a disruption.
BCM BCM Program Governance & Compliance 2
What is the purpose of a BCM program scope statement?