โ† All GRC Flashcard Decks

Business Continuity and Resilience Flashcards

7 cards from real GRC practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Business Continuity and Resilience flashcards as text
  1. Which metric defines the maximum acceptable amount of data loss measured in time during a disaster?

    Answer: Recovery Point Objective (RPO)

    RPO specifies the point in time to which data must be restored, defining the maximum tolerable data loss window.

  2. A company activates its BCP after a hurricane destroys its primary data center. Which phase of the BCP lifecycle is this?

    Answer: Plan activation and execution

    Plan activation and execution is the phase where the BCP is invoked in response to an actual disruption event.

  3. What is the primary purpose of a tabletop exercise in business continuity?

    Answer: To discuss and walk through scenario responses without live systems

    Tabletop exercises are discussion-based sessions where team members talk through their responses to a hypothetical scenario.

  4. Which BCP component addresses how an organization will communicate with employees, customers, and stakeholders during a crisis?

    Answer: Crisis communication plan

    The crisis communication plan defines messaging, channels, and responsibilities for notifying all relevant parties during a disruption.

  5. A firm's BIA reveals that its order-processing system must be restored within 4 hours. This figure represents the:

    Answer: RTO

    RTO is the target duration within which a system must be restored after a disruption to avoid unacceptable consequences.

  6. Which type of alternate site provides fully operational infrastructure with real-time data replication and can be activated within minutes?

    Answer: Hot site

    A hot site is a fully equipped and mirrored facility that can take over operations almost immediately after a failure.

  7. During a BCP review, a team identifies a supplier whose failure would halt production for 30 days. This represents which type of risk?

    Answer: Single point of failure in the supply chain

    A single critical supplier with no backup represents a supply chain single point of failure that can cause extended disruptions.