Testing & Exercise Programs Flashcards

What is the PRIMARY risk of conducting a full-scale exercise without adequate prior tabletop or functional exercises?

Answer: Participants may create real operational disruptions due to untested procedures

Skipping lower-complexity exercises means fundamental procedure gaps are not identified before real resources are deployed, risking actual operational disruption.

Which document formally captures the objectives, scope, schedule, and roles for a planned exercise?

Answer: Exercise Plan (ExPlan)

The Exercise Plan (ExPlan) is the governing document that defines exercise objectives, scope, logistics, roles, and schedule for participants and controllers.

A business continuity professional discovers that the same corrective action from last year's exercise is still open. What does this MOST likely indicate?

Answer: The exercise program lacks effective tracking and accountability mechanisms

Persistently open corrective actions indicate a breakdown in the accountability and tracking mechanisms of the exercise improvement process.

During a continuity exercise, participants realize the alternate site lacks necessary vendor access credentials. This is an example of what type of finding?

Answer: Plan gap

Missing vendor credentials at an alternate site is a plan gap — a deficiency in the documented recovery procedures or resource inventories.

What is the MAIN benefit of incorporating realistic 'noise' (irrelevant information) into exercise scenario injects?

Answer: It tests participants' ability to prioritize and filter information under pressure

Real incidents involve information overload; including irrelevant data in injects tests whether participants can identify and act on critical information.

Which of the following BEST describes the 'evaluate-improve-exercise' cycle in a mature resilience program?

Answer: A continuous loop where exercise findings drive plan improvements that are validated in future exercises

A mature program treats exercises as an ongoing feedback loop: findings drive improvements, and subsequent exercises validate that improvements are effective.

When scheduling a continuity exercise, which factor is MOST critical to coordinate with IT to avoid unintended consequences?

Answer: Planned system maintenance windows and patch cycles

Overlapping an exercise with planned IT maintenance or patching can create ambiguous results or unintended production impacts that compromise exercise validity.