BCM BCM Program Governance & Compliance

Question 1

Which international standard provides the most widely recognized framework for Business Continuity Management Systems?

Accepted Answer

ISO 22301

Answer

ISO 9001

Answer

ISO 27001

Answer

NIST SP 800-34

Question 2

What is the primary role of a BCM governance committee?

Accepted Answer

Providing oversight, policy direction, and accountability for BCM activities

Answer

Drafting recovery procedures

Answer

Conducting BIA interviews

Answer

Managing IT disaster recovery

Question 3

Which regulatory requirement most commonly drives US financial institutions to maintain formal BCM programs?

Accepted Answer

FFIEC IT Examination Handbooks

Answer

SOX Section 404

Answer

HIPAA Security Rule

Answer

PCI-DSS Requirement 12

Question 4

What does a BCM policy statement primarily define?

Accepted Answer

Organizational commitment, scope, objectives, and roles for the BCM program

Answer

Detailed recovery procedures

Answer

System backup schedules

Answer

Vendor contact lists

Question 5

In the context of BCM compliance audits, what is a 'gap analysis'?

Accepted Answer

A comparison of current BCM practices against a target standard to identify deficiencies

Answer

A review of network vulnerabilities

Answer

An assessment of employee training completion rates

Answer

A financial impact calculation

Question 6

Which concept ensures that BCM responsibilities are clearly assigned and no single person controls all aspects of a critical BCM process?

Accepted Answer

Segregation of duties

Answer

Redundancy

Answer

Chain of command

Answer

Span of control