Business Continuity Planning and Documentation Flashcards
6 cards from real DRI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Business Continuity Planning and Documentation flashcards as text
What is the PRIMARY purpose of a Business Continuity Plan (BCP)?
Answer: To provide documented procedures and information enabling an organization to respond to and recover from a disruptive incident
A BCP provides the documented procedures, information, roles, and resources enabling an organization to respond to and recover from disruptions—the primary purpose is enabling continuity and recovery, not prevention or risk transfer.
Which document defines who is responsible for invoking the Business Continuity Plan and under what circumstances?
Answer: The BCP activation and escalation procedures
The BCP activation and escalation procedures define who has authority to declare an incident, under what conditions the plan is activated, and the escalation path if primary decision-makers are unavailable.
A BCP component that documents the alternate procedures for performing critical business functions manually or with limited technology is called:
Answer: A workaround procedure or manual fallback procedure
Workaround procedures (also called manual fallback procedures) document how critical business functions can be performed using manual or alternative methods when normal systems, tools, or processes are unavailable.
Which of the following is a characteristic of a GOOD Business Continuity Plan document?
Answer: Concise, actionable checklists with clear roles and contact information
Good BCPs are concise, actionable documents written for the personnel who will execute them during a crisis—checklists, clear role assignments, and readily accessible contact information are more valuable than comprehensive technical detail or strategic narrative.
How often should a Business Continuity Plan be reviewed and updated, according to DRI best practices?
Answer: At least annually and after significant changes to the business, systems, or threat environment
DRI best practices require BCP review at least annually and following significant organizational changes—new systems, reorganizations, facility changes, acquisitions, or changes in the threat environment—to keep plans current and effective.
What is the purpose of version control in BCP documentation?
Answer: To ensure all plan holders are working from the current, authorized version and to maintain an audit trail of changes
Version control ensures all plan holders are using the current authorized version and maintains an audit trail of what the plan said at any given time—critical for avoiding the scenario where responders use outdated procedures during an incident.