Practice Test Geeks(CRP) Certified Resilience Professional Practice Test
← All CRP Flashcard Decks

Risk Assessment & Business Impact Analysis Flashcards

7 cards from real CRP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Risk Assessment & Business Impact Analysis flashcards as text

  1. Which BIA metric measures the point in time to which data must be recovered after a disruption?

    Answer: Recovery Point Objective (RPO)

    RPO defines the maximum acceptable age of data that can be recovered, establishing the data backup frequency requirement.

  2. During a BIA workshop, a department head claims their function is 'Tier 1 critical' but cannot quantify financial impact. What should the BC analyst do?

    Answer: Probe for operational dependencies and downstream impacts to substantiate the claim

    A skilled BIA analyst uses dependency mapping and downstream impact analysis when direct financial figures are unavailable.

  3. What is the primary purpose of a risk register in a resilience program?

    Answer: Centrally track identified risks, their likelihood, impact, and assigned owners

    A risk register is the authoritative repository that consolidates all identified risks with their attributes and ownership.

  4. A company's payroll function has an MTD of 72 hours. Its RTO is set at 48 hours and WRT is 18 hours. Is this configuration valid?

    Answer: Yes, because RTO + WRT (66 hours) is within the 72-hour MTD

    A valid recovery configuration requires that RTO + WRT does not exceed MTD, which 48 + 18 = 66 hours satisfies.

  5. Which risk treatment option involves contracting a third-party vendor to manage a specific IT function, thereby shifting responsibility for uptime?

    Answer: Risk transfer

    Outsourcing shifts operational and contractual liability to the vendor, which is a form of risk transfer.

  6. In quantitative risk analysis, which formula correctly expresses Annual Loss Expectancy (ALE)?

    Answer: ALE = Single Loss Expectancy (SLE) × Annualized Rate of Occurrence (ARO)

    ALE is calculated by multiplying SLE (the cost of a single event) by ARO (expected frequency per year).

  7. A BIA identifies that a regulatory reporting function must resume within 4 hours to avoid fines. This 4-hour window represents which BIA output?

    Answer: Recovery Time Objective

    RTO is the targeted duration within which a process must be restored to avoid unacceptable consequences such as regulatory fines.