BCM Risk and Business Impact Analysis 2

Question 1

Which BIA metric measures the maximum amount of data loss an organization can tolerate after a disruption?

Accepted Answer

Recovery Point Objective (RPO)

Answer

RPO defines the point in time to which data must be recovered, representing the maximum acceptable data loss.

Question 2

During a BIA, a process owner states that their function can tolerate no more than 4 hours of downtime before significant financial losses occur. This threshold is best described as the:

Accepted Answer

Maximum Tolerable Downtime

Answer

Maximum Tolerable Downtime (MTD) is the longest period a business function can be unavailable before the disruption causes unacceptable consequences.

Question 3

Which risk assessment technique assigns probability and impact values on a numerical scale to calculate a composite risk score?

Accepted Answer

Quantitative risk analysis

Answer

Quantitative risk analysis uses numerical values for probability and impact to calculate measurable risk scores such as Annual Loss Expectancy (ALE).

Question 4

A BIA reveals that a payroll processing system has an MTD of 72 hours. The BCM team should set the RTO:

Accepted Answer

Less than the MTD to ensure recovery before critical impact

Answer

The RTO must be set less than the MTD so that recovery occurs before the organization reaches unacceptable impact levels.

Question 5

What is the primary purpose of a threat and vulnerability assessment in the context of BCM risk analysis?

Accepted Answer

To identify potential sources of disruption and organizational weaknesses

Answer

A threat and vulnerability assessment identifies what could cause disruption (threats) and where the organization is exposed (vulnerabilities) to prioritize risk treatment.

(BCM) Business Continuity Management Certification Practice Test

(BCM) Business Continuity Management Certification Practice Test

BCM Risk and Business Impact Analysis 2