BCM Cheat Sheet 2026

The 30 highest-yield BCM facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Why is it important to involve business units in the Business Impact Analysis process? → To ensure proper recovery and minimize disruption.
2. What is the primary purpose of a threat and vulnerability assessment in the context of BCM risk analysis? → To identify potential sources of disruption and organizational weaknesses
3. In Business Continuity Management Certification, what role does stakeholder communication & reporting play in ensuring client/stakeholder satisfaction? → It builds trust through demonstrated competence and consistency
4. Which of the following is an essential step in the plan development phase of BCM? → Identifying and prioritizing critical business functions.
5. What does 'reshoring' mean as a supply chain resilience strategy? → Returning previously offshored production or sourcing back to the domestic market
6. What is the significance of peer review in strategic planning & goal setting for BCM professionals? → It promotes accountability, knowledge sharing, and quality improvement
7. Which metric captures how much data loss (measured in time) an organization can tolerate after a disruption? → RPO
8. Which risk assessment approach evaluates a supplier's financial stability, operational resilience, and BCM capability simultaneously? → Third-Party Risk Assessment (TPRA)
9. Which of the following best describes a key competency required for strategic planning & goal setting in BCM certification? → Critical thinking and evidence-based decision making
10. In BCM governance, what is the purpose of a 'lessons learned' process following an exercise or actual incident? → To identify gaps, improve plans and procedures, and strengthen the overall BCM program
11. Which BCM lifecycle phase involves reviewing program performance and identifying improvements? → Ongoing program management and review
12. What is the PRIMARY goal of a 'lessons learned' session held after incident response activities conclude? → To improve plans, training, and processes to strengthen future response
13. Which BIA metric measures the maximum amount of data loss an organization can tolerate after a disruption? → Recovery Point Objective (RPO)
14. What is a common challenge professionals face when applying strategic planning & goal setting principles in Business Continuity Management Certification? → Balancing theoretical knowledge with practical application
15. A risk matrix plots threats on axes of likelihood and impact. A risk with HIGH likelihood but LOW impact would typically receive which priority? → Moderate priority with routine monitoring
16. Which ISO standard specifically addresses supply chain security and resilience management systems? → ISO 28000
17. In BCM, what is the function of an 'activation threshold' in a Business Continuity Plan? → The predefined criteria or conditions that trigger formal activation of the BCP
18. What is the role of recovery strategies in crisis management? → To restore normal operations quickly while minimizing the impact.
19. In the context of BCM compliance audits, what is a 'gap analysis'? → A comparison of current BCM practices against a target standard to identify deficiencies
20. A BCM analyst calculates that a server failure has an Exposure Factor of 40% and the asset value is $500,000. What is the Single Loss Expectancy (SLE)? → $200,000
21. A BIA reveals that a payroll processing system has an MTD of 72 hours. The BCM team should set the RTO: → Less than the MTD to ensure recovery before critical impact
22. Which technology trend is most likely to impact conflict resolution & mediation in the BCM field in coming years? → Digital tools for enhanced data collection, analysis, and reporting
23. A plan that outlines how an organization will communicate with employees, customers, and media during a disruption is called a: → Crisis Communications Plan
24. When a BCM risk register is reviewed and a threat is found to have been mitigated to an acceptable level, the remaining risk is called: → Residual risk
25. What ethical consideration is most relevant to conflict resolution & mediation in BCM practice? → Maintaining confidentiality and acting in the best interest of stakeholders
26. Which factor is MOST critical when selecting a BCM exercise scenario? → Ensuring the scenario tests the plan's most critical objectives and realistic threats
27. Which regulatory requirement most commonly drives US financial institutions to maintain formal BCM programs? → FFIEC IT Examination Handbooks
28. What is the significance of peer review in stakeholder communication & reporting for BCM professionals? → It promotes accountability, knowledge sharing, and quality improvement
29. What is the role of exercises in business continuity management? → To simulate crisis scenarios and test the response effectiveness.
30. How does continuing education relate to performance metrics & kpi analysis for BCM certified professionals? → It ensures professionals stay current with evolving standards and best practices