DRI DRI Training, Awareness & Human Factors 2 — Questions and Answers
Question 1: What is a 'tabletop exercise' primarily designed to test in a BC/DR program?
- Decision-making processes and plan logic without activating physical resources (Correct answer)
- The speed of technical system recovery under real conditions
- Employee physical fitness for emergency evacuations
- Vendor response times during an actual disruption
Correct answer: Decision-making processes and plan logic without activating physical resources
Tabletop exercises test decision-making processes, communication flows, and plan logic by walking through scenarios in a discussion format without deploying actual resources or systems.
Question 2: Why is psychological safety important in post-incident reviews and BC training exercises?
- It encourages honest reporting of errors and near-misses, leading to genuine plan improvements (Correct answer)
- It ensures employees are not held legally liable for decisions made during an incident
- It prevents employees from feeling stressed during actual disasters
- It protects the organization from negative publicity following an incident
Correct answer: It encourages honest reporting of errors and near-misses, leading to genuine plan improvements
Psychological safety in post-incident reviews allows team members to honestly discuss what went wrong without fear of blame, enabling the organization to identify real gaps and improve its BC plans.
Question 3: What is the benefit of including cross-functional teams in BC training exercises?
- It reveals interdependencies between departments and improves coordination during a real incident (Correct answer)
- It reduces the cost of training by combining multiple department sessions
- It allows the BC team to evaluate which departments are least prepared
- It satisfies regulatory requirements for multi-department participation
Correct answer: It reveals interdependencies between departments and improves coordination during a real incident
Cross-functional training exercises surface the dependencies between departments that may not be apparent in individual team training, improving overall coordination during an actual disruption.
Question 4: Which of the following is a key indicator that a BC training program is effective?
- Employees can correctly describe their specific recovery roles without referencing the plan (Correct answer)
- The BC plan document has been read by all employees at least once
- Training sessions are completed within the budgeted time and cost
- Senior management has approved the training curriculum
Correct answer: Employees can correctly describe their specific recovery roles without referencing the plan
An effective BC training program results in employees internalizing their roles so well that they can act correctly under pressure without needing to consult documentation during an incident.
Question 5: How should BC training content be updated to remain relevant?
- After each exercise, audit, significant organizational change, or incident to reflect lessons learned (Correct answer)
- Only when the regulatory environment changes and new requirements are issued
- Every five years as part of a comprehensive BC program review
- Whenever a new BC team member joins who needs updated materials
Correct answer: After each exercise, audit, significant organizational change, or incident to reflect lessons learned
BC training content must be continuously updated after exercises, audits, organizational changes, and incidents to ensure it reflects current processes, personnel, and lessons learned.
Question 6: What is the purpose of 'call tree drills' in a BC/DR training program?
- To verify that notification chains function correctly and key personnel can be reached when needed (Correct answer)
- To test the organization's phone system hardware under load
- To practice automated mass notification system configuration
- To determine which employees can be reached outside business hours
Correct answer: To verify that notification chains function correctly and key personnel can be reached when needed
Call tree drills verify that the notification chain works end-to-end, that contact information is current, and that all key personnel can be successfully reached during an incident.
What is a 'tabletop exercise' primarily designed to test in a BC/DR program?