BCM Testing, Training, and Exercises 2 — Questions and Answers
Question 1: Which exercise type tests the actual failover of systems and processes to an alternate site without prior notification to participants?
- Tabletop exercise
- Parallel test
- Surprise drill (Correct answer)
- Structured walk-through
Correct answer: Surprise drill
A surprise drill (unannounced exercise) tests real-world response by activating recovery procedures without advance warning to participants.
Question 2: What is the primary goal of a post-exercise hot wash?
- Update the BCP document with findings
- Immediately debrief participants to capture lessons learned while events are fresh (Correct answer)
- Assign corrective action owners
- Calculate the cost of the exercise
Correct answer: Immediately debrief participants to capture lessons learned while events are fresh
A hot wash is an immediate debrief conducted right after an exercise to capture observations and lessons learned while they are still fresh in participants' minds.
Question 3: During a functional exercise, which element distinguishes it from a full-scale exercise?
- Functional exercises use real equipment and personnel in the field
- Functional exercises test specific functions without full field deployment (Correct answer)
- Functional exercises involve only senior management
- Functional exercises require an external facilitator
Correct answer: Functional exercises test specific functions without full field deployment
Functional exercises test specific emergency management functions (e.g., communications, logistics) in a realistic but simulated environment without full field deployment of resources.
Question 4: Which metric best measures the effectiveness of a BCP training program over time?
- Number of training hours completed
- Percentage improvement in exercise scores across successive tests (Correct answer)
- Cost per trainee
- Number of employees who attended at least one session
Correct answer: Percentage improvement in exercise scores across successive tests
Tracking improvement in exercise performance scores over successive tests directly measures whether training is translating into better preparedness.
Question 5: A scenario-based tabletop exercise is BEST suited for which purpose?
- Testing technical system failover speeds
- Evaluating decision-making and communication among leadership (Correct answer)
- Measuring physical evacuation times
- Verifying backup media restoration
Correct answer: Evaluating decision-making and communication among leadership
Tabletop exercises are discussion-based and ideal for evaluating leadership decision-making, inter-departmental communication, and policy gaps without operational disruption.
Question 6: What does 'inject' mean in the context of a BCM exercise?
- Introducing a new complication or piece of information during the exercise to test participant response (Correct answer)
- Adding new personnel to the exercise mid-way
- Injecting real system commands to test failover
- Providing participants with the answer to a scenario question
Correct answer: Introducing a new complication or piece of information during the exercise to test participant response
An inject is a scripted event or message introduced during an exercise to drive the scenario forward and test how participants respond to evolving conditions.
Question 7: Which BCM standard provides guidance specifically on exercising and testing business continuity arrangements?
- ISO 22313 (Correct answer)
- ISO 27001
- NFPA 1600
- ISO 9001
Correct answer: ISO 22313
ISO 22313 provides guidance on implementing the requirements of ISO 22301, including detailed guidance on exercising and testing BCM arrangements.
BCM Testing, Training, and Exercises 2
Which exercise type tests the actual failover of systems and processes to an alternate site without prior notification to participants?