Mixed Deck — All CRP Topics Flashcards

The CERT (Community Emergency Response Team) program in the US reflects which resilience theory principle?

Answer: Distributed community capacity enhances overall system resilience

CERT embodies the principle that building distributed capacity across community members strengthens overall resilience by reducing dependency on centralized resources.

How should a Certified Resilience Professional professional handle situations beyond their expertise?

Answer: Refer to a qualified specialist and communicate transparently with the client

Referring to qualified specialists when facing situations beyond personal expertise protects clients and upholds professional integrity.

Which metric is most useful for measuring supply chain vulnerability to disruption?

Answer: Mean Time to Recovery (MTTR) for critical suppliers

MTTR for critical suppliers quantifies how long recovery takes after a disruption, directly measuring supply chain vulnerability.

Which scenario BEST justifies choosing a managed recovery service over a self-maintained alternate site?

Answer: The organization requires a low RTO but cannot justify the capital cost of a dedicated site

Managed recovery services provide rapid recovery capabilities at a subscription cost, making them attractive when RTOs are tight but capital investment is constrained.

Which of the following best describes 'adaptive capacity' in the context of organizational resilience?

Answer: An organization's ability to adjust strategies and operations in response to change

Adaptive capacity refers to the dynamic ability to reconfigure resources, processes, and strategies when circumstances change.

A risk that has been identified, evaluated, and deliberately left in place without additional controls is said to be:

Answer: Accepted risk

Accepted risk is a documented decision to retain a risk because the cost of treatment exceeds the expected impact.

What is the primary purpose of a supplier criticality assessment in supply chain resilience planning?

Answer: To rank suppliers by their impact on critical operations if they fail

A supplier criticality assessment ranks vendors by operational impact to help prioritize resilience investments and contingency planning.

A recovery plan that specifies 'Phase 1: Life Safety; Phase 2: Damage Assessment; Phase 3: Recovery Activation' reflects which planning principle?

Answer: Sequential prioritization ensuring human safety precedes all other recovery activities

Recovery plans are structured so that human life safety always takes precedence before property protection, damage assessment, and operational recovery.

How does mindfulness contribute to stress management?

Answer: Mindfulness helps reduce stress and improves emotional regulation.

Mindfulness involves focusing on the present moment without judgment, which can significantly reduce rumination and worry, common sources of stress. By practicing mindfulness, individuals can become more aware of their thoughts and feelings, allowing them to respond to stressors more thoughtfully rather than reactively, thereby improving emotional regulation and overall stress levels.

Which financial instrument transfers catastrophic risk from an organization to capital market investors by securitizing insurance risk?

Answer: Catastrophe bond (CAT bond)

Catastrophe bonds (CAT bonds) transfer catastrophic risk to capital market investors, providing organizations with financial protection against large-scale disruptive events while spreading the risk broadly.

Which of the following audit evidence types is considered MOST reliable?

Answer: Documentary evidence directly observed and collected by the auditor

Evidence directly observed and collected by the auditor — such as records reviewed on-site — is most reliable because it is not filtered or interpreted by the auditee.

An organization uses a Traffic Light Rating (TLR) system for resilience assessments. A 'yellow' rating most appropriately triggers which response?

Answer: Targeted improvement actions within defined timelines

A yellow rating signals partial compliance or emerging risk that warrants planned corrective action within set timeframes, distinguishing it from green (acceptable) and red (urgent).

When building a resilience culture, which leadership action has the highest long-term impact?

Answer: Modeling resilient behaviors personally and visibly during real disruptions

Leaders who personally demonstrate resilient behaviors during actual disruptions send the strongest cultural signal that resilience is a real organizational value.

A company's IT recovery strategy specifies replication to a cloud provider. Which risk must be explicitly addressed in the plan?

Answer: Internet connectivity dependency and bandwidth during recovery

Cloud-based recovery depends on network connectivity; if the disaster also disrupts internet service, the cloud recovery strategy may be inaccessible.

How can deep breathing exercises help with stress management?

Answer: Deep breathing helps reduce stress and promote relaxation.

Deep breathing exercises activate the parasympathetic nervous system, which is responsible for the body's "rest and digest" response. By slowing the heart rate, lowering blood pressure, and promoting a sense of calm, deep breathing directly counteracts the physiological effects of stress. It's a quick and accessible technique for immediate stress reduction.

How should a Certified Resilience Professional professional handle situations beyond their expertise?

Answer: Refer to a qualified specialist and communicate transparently with the client

Referring to qualified specialists when facing situations beyond personal expertise protects clients and upholds professional integrity.

What role does a 'technical recovery team' play during a declared disaster?

Answer: Executing the step-by-step technical procedures to restore IT systems and services

The technical recovery team is responsible for the hands-on execution of IT restoration tasks as defined in the Technology Recovery Plan.

Which approach best ensures that workforce continuity plans remain current and accurate?

Answer: Integrating plan reviews into regular HR processes such as role changes, onboarding, and annual exercises

Embedding plan updates into routine HR events ensures workforce continuity plans automatically reflect changes in personnel, roles, and organizational structure.

ISO 22313 serves what role in relation to ISO 22301?

Answer: It provides guidance and interpretation for implementing ISO 22301

ISO 22313 is the guidance document that supports ISO 22301 by explaining its requirements and providing best practice advice for implementing a BCMS.

How should strategy implementation be monitored?

Answer: Through key performance indicators aligned with strategic objectives

KPIs aligned with strategic objectives provide ongoing, objective measurement of implementation progress, enabling timely adjustments when needed.