Business Continuity and Resilience Flashcards
7 cards from real GRC practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Business Continuity and Resilience flashcards as text
What document formally grants authority to activate the BCP and allocate emergency resources?
Answer: Crisis management charter or emergency authority delegation
A crisis management charter or emergency authority delegation document defines who can activate the BCP and commit organizational resources.
Which BCP testing method involves actually switching operations to the alternate site to verify full functionality?
Answer: Full interruption test
A full interruption test shuts down the primary site and fully transfers operations to the DR site, providing the most realistic validation.
An organization sets its RPO at zero for financial transaction data. What technology best supports this requirement?
Answer: Synchronous real-time replication
Synchronous replication writes data to both primary and secondary locations simultaneously, ensuring zero data loss (RPO = 0).
Which element of a BIA quantifies the financial impact per hour of a critical process being unavailable?
Answer: Downtime cost analysis
Downtime cost analysis within a BIA calculates the monetary impact of unavailability per unit of time for each critical process.
A BCP plan owner discovers the contact list has not been updated in 18 months. This violates which BCP principle?
Answer: Plan maintenance and currency
BCPs must be regularly maintained and updated to remain accurate, including personnel contact information and organizational changes.
What is the key difference between business continuity planning and disaster recovery planning?
Answer: BCP addresses maintaining business operations broadly; DRP focuses on restoring IT infrastructure
BCP encompasses maintaining all critical business functions during a disruption, while DRP is the IT-specific subset focused on technology recovery.
Which standard provides internationally recognized guidance specifically for business continuity management systems?
Answer: ISO 22301
ISO 22301 is the international standard specifying requirements for planning, establishing, and implementing a Business Continuity Management System (BCMS).