Applied Methods and Techniques Flashcards

Which document guides an organization's continued operation of essential functions after a disruptive event?

Answer: Business continuity plan

A business continuity plan keeps critical functions running during and after a disruption.

In a business impact analysis (BIA), what does the recovery time objective (RTO) represent?

Answer: The target time within which a process must be restored after a disruption

RTO is the target duration for restoring a business function after a disruption.

Which structure, widely used in the US, provides a standardized, scalable command structure for managing incidents?

Answer: Incident Command System (ICS)

ICS, part of NIMS, gives incidents of any size a standardized organizational structure.

In executive protection, what is the primary purpose of an advance?

Answer: To survey venues and routes beforehand to identify threats, safe havens, and medical resources

Advance work assesses locations and routes ahead of time so risks and contingencies are planned for.

Which threat assessment approach focuses on observable pre-attack behaviors rather than demographic profiles?

Answer: Behavioral threat assessment

Behavioral threat assessment looks at concerning behaviors and pathway-to-violence indicators instead of profiles.

After a major security incident, which activity best supports continuous improvement of the program?

Answer: Conducting an after-action review to identify lessons learned and corrective actions

After-action reviews capture what worked and what failed, then turn the lessons into corrective actions.

What is the main purpose of tabletop exercises in crisis management?

Answer: To walk key personnel through a simulated scenario and test plans, roles, and decision-making in a low-stress setting

Tabletop exercises are discussion-based simulations that validate plans and clarify roles without deploying resources.