CORES Incident Management & Business Continuity Planning 4

Question 1

A company invokes its BCP but finds that the designated alternate work site lacks sufficient network bandwidth. This failure MOST likely reflects a gap in:

Accepted Answer

Testing and maintenance of the BCP

Answer

Regular testing and maintenance would have identified the bandwidth deficiency and enabled remediation before an actual invocation was required.

Question 2

The NIST SP 800-34 framework for contingency planning recommends which sequence for plan development?

Accepted Answer

Develop policy → BIA → identify controls → create plan → train → test → maintain

Answer

NIST SP 800-34 prescribes a structured seven-step process beginning with policy establishment, followed by BIA, control identification, plan development, training, testing, and maintenance.

Question 3

Which of the following BEST describes a 'tabletop exercise' in the context of BCP testing?

Accepted Answer

A discussion-based simulation where participants walk through a scenario without activating systems

Answer

Tabletop exercises are facilitated discussions that test decision-making and plan logic without operational disruption, making them low-cost and easy to schedule.

Question 4

Under the Incident Command System (ICS), the 'Operations Section' is responsible for:

Accepted Answer

Directing all tactical activities to achieve incident objectives

Answer

The Operations Section executes the tactical response activities as directed by the Incident Action Plan to achieve the incident's operational objectives.

Question 5

A third-party vendor that provides a critical outsourced process suffers a major outage. The FIRST action a risk manager should take is:

Accepted Answer

Activate the vendor-related contingency procedures in the BCP

Answer

The BCP should include third-party dependency scenarios, and activating those pre-planned procedures is the fastest way to mitigate impact on the firm's operations.

(CORES) Certified Operational Risk Executive Specialist Practice Test

(CORES) Certified Operational Risk Executive Specialist Practice Test

CORES Incident Management & Business Continuity Planning 4