SSP Business Continuity & Resilience 3

Question 1

Which international standard specifically provides guidance for Business Continuity Management Systems (BCMS)?

Accepted Answer

ISO 22301

Answer

ISO 22301 is the international standard that specifies requirements for planning, implementing, maintaining, and improving a BCMS.

Question 2

A BIA reveals that a customer billing system has an RPO of 4 hours. Which backup strategy best satisfies this requirement?

Accepted Answer

Continuous data replication or backups every 2 hours

Answer

To meet a 4-hour RPO, backups must occur at intervals shorter than 4 hours, making continuous replication or 2-hour backups the appropriate strategy.

Question 3

What is the primary purpose of an Alternate Operating Facility (AOF) in a continuity of operations plan?

Accepted Answer

To provide a pre-identified location from which essential functions can be performed during a disruption

Answer

An AOF is a designated backup location where critical personnel and functions can operate when the primary facility is unavailable.

Question 4

During recovery operations, a team discovers the documented recovery procedures are outdated and incomplete. What is the root cause failure this exposes?

Accepted Answer

Failure to maintain and regularly test the BCP

Answer

Outdated procedures indicate the BCP was not regularly reviewed, updated, and tested — a core maintenance failure in the continuity program lifecycle.

Question 5

Which term describes the process of redistributing risk to a third party, such as through insurance or contractual agreements?

Accepted Answer

Risk transfer

Answer

Risk transfer shifts the financial or operational burden of a risk to another party, commonly through insurance policies or vendor contracts.

(SSP) Safety and Security Practitioner Certification Practice Test

(SSP) Safety and Security Practitioner Certification Practice Test

SSP Business Continuity & Resilience 3