Testing, Exercising, and Maintenance of BCP Flashcards
6 cards from real DRI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Testing, Exercising, and Maintenance of BCP flashcards as text
What is a 'functional exercise' in the context of business continuity testing?
Answer: An exercise that activates and tests specific plan elements or functions in isolation, more operationally realistic than a tabletop but less comprehensive than a full-scale exercise
A functional exercise tests specific plan functions or components in isolation—activating notification systems, deploying to the alternate facility, failing over specific applications—providing operational realism for the tested functions without full-scale activation complexity.
How should an organization handle a situation where an exercise reveals a critical gap that cannot be immediately remediated?
Answer: Document the gap in the exercise report, assess the risk it represents, develop an interim mitigation, assign a remediation owner, and track to resolution
Gaps that cannot be immediately fixed require: documented risk assessment, interim mitigations to reduce exposure, specific ownership for remediation, and active tracking until resolved—not program stoppage, scope reduction, or premature stakeholder notification.
What is the role of 'exercise evaluators' in a full-scale business continuity exercise?
Answer: To objectively observe and document participant performance against expected actions defined in the exercise design, providing unbiased assessment findings
Exercise evaluators objectively observe and document participant performance—what participants did versus what the plan requires them to do—providing unbiased, evidence-based findings that form the foundation of the post-exercise report and improvement actions.
In BCP testing, what does 'parallel testing' involve?
Answer: Running recovery systems in parallel with production to validate they function correctly before relying on them in an actual disaster
Parallel testing activates recovery systems and runs them simultaneously alongside production systems, validating that recovery capabilities function correctly under realistic conditions without taking the risk of fully cutting over to the untested recovery environment.
What is the MOST important document produced after a business continuity exercise?
Answer: The corrective action plan assigning specific improvements to owners with deadlines
The corrective action plan—assigning specific improvement actions to named owners with target completion dates—is the most important post-exercise document because it converts findings into actual program improvements; without it, exercises produce no lasting benefit.
What distinguishes an 'unannounced drill' from a 'scheduled exercise' in business continuity testing?
Answer: Unannounced drills test whether real-world responsiveness matches plan assumptions without the preparation advantage of advance notice
Unannounced drills test actual readiness by eliminating the preparation advantage of advance notice—they reveal whether response capabilities are genuinely available and functional on a random basis, not just when personnel have had time to prepare.