Question 1

Consider an organization providing call center services to Fortune 100 companies. All the employees of the organization (excluding support staff) are involved in taking calls from customers based in 5 continents. The organization has to carry out evacuation drill. What is the most appropriate strategy to carry out the drill?

A)Carry out the drill with support staff only
B)Bring all employees in on Sunday for the drill
C)The drill should be employees in their respective working shift
D)Employees in their respective shifts must continue to work. Employees from various shifts should be called early on designated day to carry out the drill.

The drill should be employees in their respective working shift

Accepted Answer

The drills should simulate live situations. The drill is best carried out with employees in their working shifts.
Key takeaway: Appropriate planning of the exercise and involvement of all stakeholders (including customers) is necessary in crisis management. In this case, substantial planning must be done to have a live drill to avoid disruption of the call center processes. Customers want you to do this type of exercise to ensure they are protected in case of an emergency and will often work with you.

Question 2

A health care company realizes that their standard for losing no more than two hours of data in the event of a major emergency is not in compliance with federal regulations on patient data.
What should be the immediate term action for the IT management and Board members responsible for disaster management?

A)A) Focus upgrading infrastructure and prepare a new IT plan.
B)Communicate to stakeholders that the RTO (recovery time objective) is compromised.
C)Modify the RPO (recovery point objective) and work with stakeholders to assess/communicate the impact.
D)All of the above.
E)Do nothing.

Modify the RPO (recovery point objective) and work with stakeholders to assess/communicate the impact.

Accepted Answer

The case presented describes a situation where the organization's recovery point objective is not compliant with a federal regulation.
An infrastructure upgrade (Option A) is a medium/long term mitigation plan, but it does not immediately address the non-compliance issue.
RTO (Option B) is not impacted as explained in the case.
Key takeaway: The case represents a situation where planning exercise has missed a critical continuity requirement. In such cases, it is important that all stakeholders informed. Also, the plan must also be modified to capture the change.

Question 3

The business continuity planner should define the Change Control Process for BCP.

Accepted Answer

According to the Disaster Recovery Institute's Professional Practices, the business continuity planner should define the Change Control Process for BCP.
Key Takeaway: While this may seem like a daunting task, abiding by an organization's established practices for change control in projects is often the best option.

Question 4

All of the following are common results of testing and maintaining the business continuity plan except:&#10;A)Additional funding is added&#10;B)BCP Project Charter is changed&#10;C)BCP project plan is changed&#10;D)Communications management plan is changed&#10;E)All of the above are true

Accepted Answer

The BCP project charter cannot be changed based on risk management planning processes.
Key takeaway: The project charter provides a vision statement for an undertaking and justifies its existence. If you had to change the project charter every time you did a risk assessment, you'd be one frustrated person.

Question 5

Which of the following are possible stakeholders in business continuity planning choices? Select all that apply.&#10;A)Police&#10;B)Local pro sports team&#10;C)Suppliers&#10;D)Emergency responders&#10;E)None of the above

Accepted Answer

Groups and people that may be impacted or need to reacte to a disruption of normal activities are stakeholders.
Key takeaway: All stakeholders must be carefully identified for business continuity planning. Their involvement in the planning is extremely important for success of crisis management.

Deck 7: Public relations (PR) Coordination