CIM Disaster Recovery & Business Continuity 5

Question 1

After a declared disaster, the incident manager activates the BCP. What is typically the FIRST operational step?

Accepted Answer

Notify and assemble the Business Continuity Team and assess the scope of impact

Answer

The first operational step upon BCP activation is mobilizing the BC team and performing an initial damage and impact assessment to guide all subsequent recovery actions.

Question 2

Which of the following best describes 'cyber resilience' in the context of incident management and business continuity?

Accepted Answer

The capacity to anticipate, withstand, recover from, and adapt to adverse cyber conditions

Answer

Cyber resilience integrates cybersecurity and business continuity principles, acknowledging that some incidents will succeed and focusing on minimizing impact and enabling rapid recovery.

Question 3

A company's RTO for its order management system is 4 hours, but testing shows actual recovery takes 7 hours. What is the most appropriate corrective action?

Accepted Answer

Invest in capabilities (automation, pre-staged resources) to reduce actual recovery time to meet the 4-hour RTO

Answer

The RTO is set by business need; when actual recovery time exceeds it, the organization must improve its recovery capabilities rather than relaxing the objective.

Question 4

What is the purpose of a 'call tree' (or notification cascade) in a business continuity plan?

Accepted Answer

To provide a structured, sequential notification process ensuring all key personnel are contacted rapidly during an incident

Answer

A call tree distributes the notification burden by having each person contact a small group, accelerating communication to all stakeholders without relying on a single point of contact.

Question 5

Which element of a BCP ensures that recovery priorities remain aligned with current business strategy as the organization evolves?

Accepted Answer

Annual BIA reviews and plan updates triggered by significant business changes

Answer

Regular BIA reviews and change-triggered plan updates ensure that recovery priorities, RTOs, and RPOs reflect the organization's current critical functions and strategic priorities.

(CIM) Certified Incident Manager Practice Test

(CIM) Certified Incident Manager Practice Test

CIM Disaster Recovery & Business Continuity 5