SSP Business Continuity & Resilience 5

Question 1

Under NIST SP 800-34, what is the correct sequence for developing a Contingency Plan?

Accepted Answer

BIA → Identify Preventive Controls → Develop Strategies → Plan Development → Training → Testing → Maintenance

Answer

NIST SP 800-34 prescribes a seven-step process beginning with the BIA, followed by preventive controls, strategy development, plan writing, training, testing, and maintenance.

Question 2

A retail company's BCP includes a workaround for processing sales transactions manually when the POS system fails. This workaround is an example of:

Accepted Answer

A manual fallback or degraded mode procedure

Answer

Manual fallback procedures allow essential operations to continue in a degraded capacity when automated systems are unavailable.

Question 3

Which stakeholder group is MOST critical to include during the initial Business Impact Analysis (BIA) interview process?

Accepted Answer

Process owners and department managers who understand operational dependencies

Answer

Process owners and department managers have direct knowledge of which functions are critical, their interdependencies, and the impact of their loss.

Question 4

An organization activates its BCP but recovery efforts are slowed because staff are unfamiliar with their assigned roles. Which program element failed?

Accepted Answer

Training and awareness program

Answer

If personnel do not know their roles during activation, the training and awareness component of the BCP program has not been adequately implemented.

Question 5

What distinguishes a 'resilience' approach from a traditional 'recovery' approach in business continuity?

Accepted Answer

Resilience builds organizational capacity to absorb disruptions and adapt, while recovery focuses on restoring previous state after failure

Answer

Resilience is a broader capability encompassing anticipation, absorption, adaptation, and transformation, whereas recovery narrowly addresses restoring prior state post-incident.

(SSP) Safety and Security Practitioner Certification Practice Test

(SSP) Safety and Security Practitioner Certification Practice Test

SSP Business Continuity & Resilience 5