GRC Business Continuity and Resilience 4

Question 1

A GRC analyst is assessing which business functions to prioritize in recovery. Which tool best supports this decision?

Accepted Answer

Business Impact Analysis (BIA)

Answer

The BIA identifies critical business functions, their dependencies, and the impact of disruption, directly informing recovery prioritization.

Question 2

What term describes the maximum time a business process can be disrupted before the impact becomes unacceptable?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

MTD (also called MTPD — Maximum Tolerable Period of Disruption) defines the absolute maximum time a process can be unavailable before causing irreversible harm.

Question 3

During a parallel test, IT successfully restored systems at the alternate site while production remained online. What is the main limitation of this test?

Accepted Answer

It does not verify that staff can actually shift to the alternate site under real conditions

Answer

A parallel test validates technical recovery but does not prove the organization can fully operate from the alternate site since production is still running.

Question 4

Which BCP element ensures that third-party vendors critical to operations also maintain adequate continuity plans?

Accepted Answer

Vendor risk management and supply chain continuity requirements

Answer

Vendor risk management provisions in BCP require suppliers and critical third parties to demonstrate their own business continuity capabilities.

Question 5

A firm experiences a ransomware attack that encrypts all production data. Which BCP/DRP control would be most immediately useful?

Accepted Answer

Clean, tested, and isolated data backups

Answer

Isolated and regularly tested backups allow data restoration without paying ransom, making them the primary recovery control for ransomware incidents.

(GRC) Governance, Risk, and Compliance Certification Practice Test

(GRC) Governance, Risk, and Compliance Certification Practice Test

GRC Business Continuity and Resilience 4