Deck 10: Continuous Improvement

Question 1

The assessment of risk is not part of the change management process.

Answer 1

False

Question 2

Performance Metrics must be:

A) Actionable
B) Qualitative only
C) Accepted from vendors
D) Should not be designed by the Steering Committee

Answer 2

A

Question 3

A documented post-incident analysis is required every time the plan is activated (invoked).

Answer 3

True

Question 4

The Business Continuity Manager is an important member of the audit team.

Question 5

"Planned intervals" according to ISO 22301:

A) Is defined as annually
B) Is defined as 3-5 years
C) Is at the discretion of the Steering Committee
D) Is not defined by the standard

Question 6

When interviewing someone during a root cause analysis where culpability may be an issue, the team should:

A) Interview the person first
B) Interview the person last
C) Order of interview is not important
D) Defer the interview to the Human Resources Department

Question 7

A RACI chart is a useful tool to manage complex corrective actions.

Question 8

Which is not a framework for developing metrics?

A) Balanced Scorecard
B) Learning and Growth
C) Program Logic
D) Cascading Functions

Question 9

What is most important to accurate results from a Five Whys analysis?

A) Problem statement
B) Properly crafted Why statements
C) Asking enough Why questions
D) The manner in which the questions are asked

Question 10

Overdue corrective actions should only be reported to top management if the responsible individual refuses to take action

Question 11

Cascading functions are always mapped from the top down.

Question 12

One or more of the standards require the maintenance of an audit program.

Question 13

A balanced Scorecard is an example of an un-actionable metric.

Question 14

An Extent of Condition is a type of Root Cause Analysis.

Question 15

Who is required under one or more of the standards to review the Business Continuity Management System at planned intervals?

A) Business Continuity Manager
B) Customers and interested parties
C) "Third Party" (external) auditor
D) Top Management

Question 16

RACI stands for :

A) Reasonable, Accurate, Consulted, Informed
B) Responsible, Accurate, Confirmed, Informed
C) Responsible, Achievable, Consulted, Informed
D) Responsible, Accountable, Consulted, Informed

Question 17

A nonconformity is any of the standard's requirements that were not met.

Question 18

SMART stands for:

A) Specific, Meaningful, Accurate, Responsible, Timely
B) Specific, Measurable, Accurate, Reasonable, Timely
C) Specific, Meaningful, Achievable, Reasonable, Timely
D) Specific, Measurable, Accountable, Reasonable, Timely

Question 19

The Information Technology department intends to change the process that all employees are now required to log onto the system each day with a password. What type of change management process should they use to introduce the change?

A) Process Change Management
B) Organizational Change Management
C) Emergency Change
D) Change Agent

Question 20

Under one or more of the standards, Root Cause Analysis tools do not include:

A) Failure Mode Effects Analysis
B) Human Performance Improvement
C) Bayesian Analysis
D) ? HYPERLINK "http://en.wikipedia.org/wiki/Retrospective_cohort_study" \o "Retrospective cohort study" ?Retrospective Cohort Study

Question 21

What is an effectiveness review and how is it conducted?

Question 22

What is the purpose of metrics and how should they be used?

Question 23

Why should the Purchasing / Procurement personnel be trained or tasked with reporting change?

Question 24

List at least five conditions that should trigger updates or changes to the Business Continuity Management System:

Question 25

Describe the duties of the Change Facilitator: