Strategic Planning & Crisis Management Flashcards

A CRO identifies that the organization's risk culture is misaligned with its stated risk appetite. Which intervention is most effective for closing this gap?

Answer: Implement incentive structures and tone-from-the-top messaging that reinforce desired risk behaviors

Aligning risk culture requires behavioral change driven by leadership modeling and incentive systems that reward risk-aware decision-making.

During crisis triage, a CRO must prioritize which operations to restore first. What tool is specifically designed to inform this prioritization?

Answer: Business Impact Analysis (BIA)

A Business Impact Analysis quantifies the consequences of disruption to each process over time, directly informing recovery prioritization decisions.

Which type of risk most directly threatens the validity of an organization's long-term strategic plan?

Answer: Strategic risk

Strategic risk refers to threats that undermine the organization's ability to achieve its long-term objectives, directly invalidating the strategic plan.

A global manufacturer activates its crisis management plan after a major facility fire. The incident commander's first priority should be:

Answer: Ensuring life safety and stabilizing the immediate situation

Life safety is the universal first priority in any crisis response, preceding all other operational, financial, or communication actions.

What is the key distinction between a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP)?

Answer: BCP focuses on maintaining critical business operations during disruption; DRP focuses on restoring IT systems and infrastructure

BCP addresses how the business continues operating during disruption, while DRP specifically addresses the technical recovery of IT systems and infrastructure.

A CRO is asked to evaluate the organization's strategic resilience. Which metric best reflects this capability?

Answer: Speed of strategic pivot following a major external shock

Strategic resilience is best measured by how quickly and effectively an organization can adapt its strategy in response to significant disruptions or environmental changes.

In enterprise risk management, 'emerging risks' are best described as:

Answer: Newly identified or evolving risks whose full impact and likelihood are still uncertain

Emerging risks are characterized by uncertainty about their development, making early identification and monitoring critical for strategic planning.