Business Continuity Planning and Documentation Flashcards
6 cards from real DRI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Business Continuity Planning and Documentation flashcards as text
What distinguishes a 'Business Continuity Plan (BCP)' from a 'Disaster Recovery Plan (DRP)'?
Answer: A BCP covers the recovery of business functions and operations; a DRP focuses specifically on the recovery of IT systems and technology infrastructure
A BCP addresses the continuation and recovery of business functions, processes, and operations, while a DRP specifically addresses the recovery of IT infrastructure, systems, and data. The DRP is a technical component that supports the broader BCP.
A BCP testing program should include which types of exercises in a progressive sequence?
Answer: Tabletop exercises, functional exercises, and full-scale simulations
A progressive exercise program moves from low-cost, low-disruption tabletop exercises (discussion-based) through functional exercises (testing specific components) to full-scale simulations (activating actual recovery capabilities), with complexity and realism increasing at each level.
What is meant by 'minimum business continuity objective (MBCO)' in a Business Continuity Plan?
Answer: The minimum level of products or services that must be maintained or resumed during a disruption to achieve business objectives
The Minimum Business Continuity Objective (MBCO) defines the minimum level of products or services—not full capacity, but the essential minimum—that must be maintained or restored to meet the organization's obligations during a disruption.
How should 'lessons learned' from a BCP exercise be incorporated into the BCM program?
Answer: Findings should be assigned to specific owners, tracked to resolution, and verified through subsequent testing
Lessons learned require systematic follow-through: each finding should be assigned to a specific owner with a deadline, tracked through a corrective action process, and verified through a subsequent exercise or test to confirm the gap has been closed.
What is the appropriate response when a BCP exercise reveals that the plan's activation timeline is unrealistic?
Answer: Revise the plan to reflect a realistic activation timeline based on exercise findings, then retest
When exercise findings reveal plan deficiencies, the correct response is to revise the plan to address the identified gap and then retest to confirm the revision is effective—exercises exist to identify and fix problems, not to confirm theoretical perfection.
Which document in a comprehensive BCM program typically provides the highest-level framework, defining scope, policy, and governance?
Answer: The Business Continuity Management Policy
The Business Continuity Management Policy is the highest-level BCM document, providing the governance framework—scope, objectives, roles and responsibilities, accountability, and commitment from executive leadership—that all other BCM documents operate within.