DRI Testing, Exercising, and Maintenance of BCP

Question 1

What is the PRIMARY objective of a Business Continuity Plan exercise program?

Accepted Answer

To validate that plans are effective, identify gaps, train personnel, and drive continuous improvement

Answer

To demonstrate compliance with regulatory requirements

Answer

To produce documentation for the board of directors

Answer

To qualify for reduced insurance premiums

Question 2

A 'tabletop exercise' differs from a 'full-scale exercise' primarily in that:

Accepted Answer

Tabletop exercises are discussion-based with no actual resource activation; full-scale exercises involve actual activation of recovery capabilities and real resources

Answer

Tabletop exercises are conducted by external consultants; full-scale exercises are conducted internally

Answer

Tabletop exercises are limited to executive participants; full-scale exercises involve all employees

Answer

Tabletop exercises assess plans; full-scale exercises only assess personnel performance

Question 3

What is 'exercise inject' in business continuity exercises?

Accepted Answer

A piece of information, complication, or development introduced during an exercise to add realism, test decision-making, and prevent overly linear scenarios

Answer

A software tool that automatically introduces simulated failures into IT systems

Answer

The process of inserting new scenarios into an existing exercise program

Answer

A regulatory document certifying that an exercise was properly conducted

Question 4

Which element of the business continuity plan maintenance process ensures that changes to the organization are reflected in updated plans?

Accepted Answer

A change management process that triggers plan reviews when significant organizational changes occur

Answer

Annual external audit of all business continuity documentation

Answer

Quarterly review meetings with all plan holders

Answer

Continuous monitoring of regulatory changes that may affect plan requirements

Question 5

What is an 'exercise master scenario events list (MSEL)' and why is it a critical planning tool?

Accepted Answer

A chronological timeline of all planned scenario events, injects, and expected participant actions used to control exercise flow

Answer

A list of all previous exercises conducted by the organization and their outcomes

Answer

A master list of all business scenarios that have been exercised across the program's history

Answer

A regulatory submission documenting planned exercise activities

Question 6

According to DRI professional practices, which type of exercise should be conducted before a full-scale exercise for an organization developing its first BC program?

Accepted Answer

A tabletop exercise to validate plan logic and train participants before committing to a full-scale activation

Answer

A regulatory compliance exercise to satisfy mandatory requirements first

Answer

A surprise drill to test response without warning

Answer

A third-party audit exercise conducted by external consultants