CRA Business Continuity and Resilience Planning 2 — Questions and Answers
Question 1: How is organizational resilience best defined in a risk management context?
- The ability to completely prevent all business disruptions
- The capacity to anticipate, absorb, and adapt to disruptions while maintaining core functions (Correct answer)
- The total financial reserves held for emergency expenditures
- The number of redundant backup systems deployed
Correct answer: The capacity to anticipate, absorb, and adapt to disruptions while maintaining core functions
Organizational resilience is the ability to anticipate threats, withstand shocks, and adapt and recover while continuing to deliver core objectives.
Question 2: What is ISO 22301 the international standard for?
- Information security management systems
- Business continuity management systems (Correct answer)
- Environmental and sustainability management
- Product and service quality management systems
Correct answer: Business continuity management systems
ISO 22301 is the international standard specifying requirements for a Business Continuity Management System (BCMS) to protect against and recover from disruptions.
Question 3: What is the primary purpose of a tabletop exercise in business continuity testing?
- To physically test evacuation and emergency egress procedures
- To discuss and walk through responses to hypothetical scenarios in a low-stress environment (Correct answer)
- To audit financial records and controls for accuracy
- To onboard new employees to standard operating procedures
Correct answer: To discuss and walk through responses to hypothetical scenarios in a low-stress environment
Tabletop exercises allow teams to verbally walk through their response to simulated crisis scenarios, identifying plan gaps without operational disruption.
Question 4: What is a 'hot site' in the context of disaster recovery?
- A data center with elevated cooling requirements
- A fully operational backup facility ready for immediate takeover if the primary site fails (Correct answer)
- A site used exclusively for long-term data archival storage
- A temporary leased office location for displaced employees
Correct answer: A fully operational backup facility ready for immediate takeover if the primary site fails
A hot site is a fully equipped and operational backup facility that can immediately assume operations if the primary site becomes unavailable.
Question 5: What does supply chain resilience mean in an enterprise risk context?
- The ability to continuously source lower-cost supplier alternatives
- The capacity to maintain operations when key supply chain disruptions occur (Correct answer)
- The monitoring of supplier financial statements for solvency risk only
- The complete elimination of all single-source supplier dependencies
Correct answer: The capacity to maintain operations when key supply chain disruptions occur
Supply chain resilience involves identifying vulnerabilities and implementing strategies to maintain operations when key suppliers, logistics, or inputs are disrupted.
Question 6: What is the primary goal of a pandemic plan within a business continuity framework?
- To reduce overall organizational healthcare expenses
- To ensure business operations can continue when a large portion of the workforce is unavailable (Correct answer)
- To establish organizational stockpiles of medical supplies
- To create procedures for permanent office closures
Correct answer: To ensure business operations can continue when a large portion of the workforce is unavailable
A pandemic plan addresses how the organization maintains critical operations when large numbers of employees are unable to work due to widespread illness.
CRA Business Continuity and Resilience Planning 2
How is organizational resilience best defined in a risk management context?