CRP Cheat Sheet 2026

The 30 highest-yield CRP facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. During technology recovery, which document should be consulted first to determine the sequence in which systems must be brought back online? → System dependency map
2. A resilience practitioner recommends 'behavioral activation' to a client experiencing stress-related withdrawal. This intervention primarily targets: → Avoidance behaviors that maintain low mood and stress
3. How should Certified Resilience Professional professionals approach quality improvement? → Through systematic evaluation of outcomes and implementation of evidence-based changes
4. When should a strategic plan be revised? → When significant changes in the internal or external environment require adaptation
5. In a resilience heatmap, a red-coded process with high criticality and low resilience maturity should receive which treatment? → Immediate prioritization for resilience investment
6. What is the recommended approach when an exercise reveals a critical gap in the recovery plan? → Document the gap, assign ownership, and track corrective action to closure
7. What role does a 'technical recovery team' play during a declared disaster? → Executing the step-by-step technical procedures to restore IT systems and services
8. What is a key strategy for improving organizational resilience? → Invest in employee training and adaptive systems.
9. Which exercise design principle states that scenarios should be grounded in realistic threats relevant to the organization's actual risk profile? → Threat relevance
10. Which document defines the incident objectives, strategies, and tactics for each operational period? → Incident Action Plan (IAP)
11. What does a 'walk-through drill' specifically test in an emergency response program? → Whether personnel can physically execute their assigned emergency roles step by step
12. Which NIST publication provides the framework most commonly used for cybersecurity risk management in US critical infrastructure? → NIST Cybersecurity Framework (CSF)
13. In exercise program design, what does the term 'inject' refer to? → A piece of information or event introduced during an exercise to drive participant actions
14. Which technique specifically targets the physiological stress response by activating the vagus nerve? → Diaphragmatic breathing
15. What is the importance of stakeholder engagement in strategic planning? → It ensures buy-in, incorporates diverse perspectives, and improves plan quality
16. In resilience frameworks, 'psychological detachment' from work during non-work hours is important primarily because it: → Allows physiological and psychological recovery from work stress
17. When measuring community resilience, which indicator set is most widely used by US federal agencies? → BRIC (Baseline Resilience Indicators for Communities)
18. In the Homeland Security Exercise and Evaluation Program (HSEEP) framework, what is a 'capability target'? → The specific measurable outcome an exercise is designed to test
19. What is the role of feedback in resilience measurement? → Feedback provides insights into strategy effectiveness and areas for improvement.
20. Which cloud deployment model provides the greatest flexibility for technology recovery by allowing workloads to shift between private and public environments? → Hybrid cloud
21. Which leading indicator would most reliably predict future resilience performance before a disruption occurs? → Percentage of staff completing resilience training
22. The Emergency Operations Center (EOC) primary function during an incident is to: → Provide strategic coordination and resource support to on-scene responders
23. What is a 'fourth-party risk' in supply chain resilience terminology? → Risk from a vendor's vendor's vendor (beyond Tier 3)
24. In CRP practice, 'strategic resilience' differs from 'operational resilience' in that it focuses on: → The organization's ability to adapt its business model to long-term environmental changes
25. A BIA conducted three years ago is being used to set recovery priorities for a new cloud migration project. What is the PRIMARY concern? → Business processes may have changed significantly, making the BIA inaccurate
26. In ISO 22316 (Organizational Resilience), which element is described as the foundation for all other resilience attributes? → Shared purpose and values
27. Which of the following BEST represents a leading indicator for resilience program health? → Percentage of plans tested and updated within the required cycle
28. What is the significance of time management in stress reduction? → Time management helps reduce stress and increase efficiency.
29. A 'dark site' in crisis communication refers to: → A pre-built website activated when a crisis occurs
30. When a recovery strategy requires personnel to operate from home during a disaster, which element is MOST critical to address in planning? → Secure remote access to critical systems and data