Practice Test Geeks(BCM) Business Continuity Management Certification Practice Test
← All BCM Flashcard Decks

Risk and Business Impact Analysis Flashcards

7 cards from real BCM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Risk and Business Impact Analysis flashcards as text

  1. Which of the following is NOT typically identified during a Business Impact Analysis?

    Answer: Recovery strategies and solutions

    Recovery strategies are developed after the BIA findings; the BIA itself identifies impacts, dependencies, and requirements — not the solutions.

  2. A company identifies that its customer service platform depends on both the CRM database and the telephony system. This relationship is best documented as a:

    Answer: Process interdependency

    Process interdependencies map how one function relies on others, which is critical for sequencing recovery efforts in a BIA.

  3. Which risk treatment option involves transferring the financial consequences of a risk to a third party?

    Answer: Risk transfer

    Risk transfer, typically through insurance or contracts, shifts the financial burden of a risk to another party without eliminating the risk itself.

  4. An organization's BIA identifies that manual workarounds can sustain a billing function for up to 48 hours. This capability is best described as:

    Answer: Interim continuity measure

    Interim continuity measures (or workarounds) allow a function to continue operating at reduced capacity during a disruption until full recovery is achieved.

  5. During risk identification, the BCM team uses historical data, industry reports, and expert judgment. Combining these diverse inputs best reflects which principle?

    Answer: Multi-source risk intelligence

    Using multiple sources for risk identification reduces blind spots and increases the comprehensiveness of the risk register.

  6. Which BCM standard provides internationally recognized guidance on Business Impact Analysis methodology?

    Answer: ISO 22301

    ISO 22301 is the international standard for Business Continuity Management Systems and includes requirements and guidance for conducting a BIA.

  7. A risk matrix plots threats on axes of likelihood and impact. A risk with HIGH likelihood but LOW impact would typically receive which priority?

    Answer: Moderate priority with routine monitoring

    High-likelihood, low-impact risks are generally monitored and managed through routine controls rather than requiring emergency mitigation resources.