Question 1

What does the "O" in OPDCA stand for and what does it represent?

Accepted Answer

The "O" in OPDCA stands for "Observe," which is the first step in the OPDCA cycle. OPDCA is an iterative management process that stands for Observe, Plan, Do, Check, Act. It is an extension of the PDCA cycle, which was popularized by Dr. W. Edwards Deming and is used for continuous improvement in organizations.

The OPDCA cycle begins with "Observe," which represents the phase where you gather data and insights about the current situation or problem. During this stage, you observe the processes, operations, or issues at hand to understand the existing conditions without bias or preconceived notions. This step is crucial as it provides the factual basis for making informed decisions in the subsequent stages of the cycle.

After observing, the cycle continues with the following steps:

- Plan: Develop a plan to address the issues identified during the observation phase. This includes setting objectives, devising strategies, and outlining the resources needed to implement the plan.
- Do: Execute the plan on a small scale to test its effectiveness.
- Check: Evaluate the results of the test implementation against the objectives set in the planning phase to determine if the desired outcomes were achieved.
- Act: If the plan was successful, standardize the new process and implement it on a larger scale. If the plan was not successful, use the insights gained to modify the plan and go through the cycle again.

The OPDCA cycle is a tool for continuous improvement that encourages a systematic approach to problem-solving and process optimization. By starting with observation, it ensures that decisions and actions are grounded in reality and that the subsequent steps in the cycle are based on accurate and relevant information.

Question 2

Organization Resilience (OR) Management System is terminology from which standard?
A) ISO 22301
B) ASIS SPC.1-2009
C) NFPA 1600 -2010
D) Both ISO and ASIS

Accepted Answer

ASIS SPC.1-2009 is a standard that specifically addresses Organizational Resilience (OR) Management Systems.

Question 3

NFPA 1600-2010 is the most business friendly of the three standards discussed in the text.

Accepted Answer

NFPA 1600-2010 is recognized for its comprehensive approach to disaster/emergency management and business continuity programs, but it is not specifically noted as the most business-friendly compared to other standards discussed, which might include ISO 22301 or others focusing more directly on business needs and applicability.

Question 4

All clauses of ISO 22301 and the ASIS standard carry equal weight in mandated requirements.

Accepted Answer

ISO 22301 and the ASIS standard for business continuity management have different focuses and structures, meaning not all clauses carry equal weight in terms of mandated requirements. ISO 22301 is structured around a plan-do-check-act (PDCA) model, emphasizing a continuous improvement process, while ASIS standards may prioritize specific security measures and management practices differently.

Question 5

The ISO 22301 standard tells us how to develop a Business Continuity Management System.

Accepted Answer

The answer of The ISO 22301 standard tells us how...

Question 6

The correction of deficiencies identified during an audit or exercise belong to which portion of the Deming Wheel :
A) Plan
B) Do
C) Check
D) Act

Accepted Answer

The correction of deficiencies is part of the "Act" portion of the Deming Wheel, which involves implementing solutions and continuously improving processes based on the results of the audit or exercise.

Question 7

All processes start with an input that serves as the driver for the planning phase as long as the input is derived from an output.

Accepted Answer

This statement is not clear and does not make logical sense. It is ambiguous and can be interpreted in different ways, so it is false.

Question 8

PDCA is used in ISO 22301 and the ASIS SPC.1-2009 standards but not in NFPA 1600 - 2010.

Accepted Answer

PDCA (Plan-Do-Check-Act) is a model that is used across various standards, including NFPA 1600 - 2010, for implementing and managing programs, including business continuity and emergency management programs.

Question 9

Devising Business Continuity strategies is part of which ISO 22301 clause?
A) Clause 6 (Planning)
B) Clause 7 (Support)
C) Clause 8 (Operation)
D) Clause 10 (Act)

Accepted Answer

Clause 8 (Operation) of ISO 22301 focuses on the execution of plans and processes that relate to business continuity, which includes devising business continuity strategies.

Question 10

The Context of the Organization is predominantly understood through:
A) Process mapping
B) The organization's mission statement
C) Risk Assessment and Business Impact analysis
D) PDCA

Accepted Answer

The answer of The Context of the Organization is predominantly...

Question 11

Although PDCA can be used for both strategic and tactical issues, a separate PDCA cycle cannot be embedded in a PDCA cycle.

Accepted Answer

A PDCA cycle can be used for both strategic and tactical issues, and it can also be embedded in another PDCA cycle as a sub-cycle, making it a recursive process.

Question 12

NFPA 1600-2010 is an ANSI Standard.

Accepted Answer

NFPA 1600-2010 is an ANSI Standard. ANSI stands for the American National Standards Institute, which is a non-profit organization that oversees the development of voluntary consensus standards for products, services, processes, systems, and personnel in the United States. NFPA 1600 is one of the standards developed by ANSI and is a guide for disaster/emergency management and business continuity programs.

Question 13

PDCA is best applied to the Business Continuity Management System by:
A) Applying it to process inputs to arrive at outputs
B) Arranging the final documented plan elements according to the PDCA format
C) Introducing statistical process control to the Management System
D) All of the above

Accepted Answer

PDCA is a continuous improvement cycle consisting of four stages: Plan, Do, Check, and Act. Applying it to process inputs helps to identify areas of improvement in the Business Continuity Management System. Arranging the final documented plan elements according to the PDCA format and introducing statistical process control are not necessarily directly related to applying the PDCA cycle to the system.

Question 14

"May" means something within the standards that is recommended and not mandated.

Accepted Answer

The answer of "May" means something within the standards that...

Question 15

ASIS defines "Plan" in terms of managing risk, improving security, incident preparedness, response, continuity and recovery.

Accepted Answer

ASIS does define "Plan" in those terms as part of its overall approach to security management.

Question 16

Which of the following is not an example of a type of process?
A) Resource Management
B) Realization Process
C) Measurement and Analysis
D) None of the above

Accepted Answer

All the choices (Resource Management, Realization Process, and Measurement and Analysis) are examples of types of processes, therefore, D (None of the above) is not a correct answer.

Question 17

A "Normative Reference" is:
A) An assumption
B) A term or a concept that is commonly known
C) A reference that balances an opposing opinion
D) A document used to gain better understanding

Accepted Answer

A normative reference is a document that is used to gain a better understanding of a specific subject, regulatory requirement, or technical standard. This document can be a guideline, specification, standard, or code that provides instructions, recommendations, or best practices. It is not an assumption, a common term or concept, or a reference that balances an opposing opinion.

Question 18

Operational Planning and Control is part of ISO 22301's Clause 6.

Accepted Answer

Operational Planning and Control is part of ISO 14001's Clause 8, not ISO 22301. ISO 22301 focuses on the requirements for a Business Continuity Management System (BCMS).

Question 19

Employees who work in teams that allow for rapid decision making and a better view of the end product are likely working in what type of management system?
A) Horizontal Management
B) Vertical Management
C) The most common type of modern management system
D) A large, complex corporation with many departments and products

Accepted Answer

Horizontal Management promotes collaboration and decision-making through a flat organizational structure, where teams have greater autonomy and responsibility for their work. This allows for faster decision-making and a better understanding of the end product.

Question 20

Which is not true:
A) ISO standards are developed by technical committees of subject matter experts
B) The three standards discussed in the text are consensus standards
C) Representatives of governmental entities can participate on the technical committee
D) ANSI oversees the development of standards in the United States and Canada

Accepted Answer

ANSI oversees the development of standards in the United States, but not in Canada. In Canada, the standards are overseen by the Standards Council of Canada (SCC).

Quiz 2: Understanding the Standards

What does the "O" in OPDCA stand for and what does it represent?

Organization Resilience (OR) Management System is terminology from which standard?

NFPA 1600-2010 is the most business friendly of the three standards discussed in the text.

All clauses of ISO 22301 and the ASIS standard carry equal weight in mandated requirements.

The ISO 22301 standard tells us how to develop a Business Continuity Management System.

The correction of deficiencies identified during an audit or exercise belong to which portion of the Deming Wheel :

All processes start with an input that serves as the driver for the planning phase as long as the input is derived from an output.

PDCA is used in ISO 22301 and the ASIS SPC.1-2009 standards but not in NFPA 1600 - 2010.

Devising Business Continuity strategies is part of which ISO 22301 clause?

The Context of the Organization is predominantly understood through:

Although PDCA can be used for both strategic and tactical issues, a separate PDCA cycle cannot be embedded in a PDCA cycle.

NFPA 1600-2010 is an ANSI Standard.

PDCA is best applied to the Business Continuity Management System by:

"May" means something within the standards that is recommended and not mandated.

ASIS defines "Plan" in terms of managing risk, improving security, incident preparedness, response, continuity and recovery.

Which of the following is not an example of a type of process?

A "Normative Reference" is:

Operational Planning and Control is part of ISO 22301's Clause 6.

Employees who work in teams that allow for rapid decision making and a better view of the end product are likely working in what type of management system?

Which is not true: