Question 1

The formation of a Steering Committee is required by ISO 22301, ASIS, and NFPA 1600.

Accepted Answer

ISO 22301 requires the establishment of a Business Continuity Management System (BCMS) including leadership roles, but it does not specifically mandate the formation of a Steering Committee. ASIS and NFPA 1600 also focus on comprehensive emergency management and business continuity practices without explicitly requiring a Steering Committee. Organizations may choose to form such a committee for effective governance, but it is not a strict requirement by these standards.

Question 2

Which type of chart is a primary method to document roles and responsibilities?

Accepted Answer

The RACI matrix (Responsible, Accountable, Consulted, Informed) is a primary method to document roles and responsibilities. It clarifies who is responsible for completing certain tasks, who is accountable for the outcome, who needs to be consulted or informed, and who is not involved. This tool helps to avoid confusion and make each team member aware of their responsibilities. Gantt charts are used to plan and track project progress, Heat Maps are used to display data with color-coding, and R&R charts are not a commonly used project management tool.

Question 3

Who is best suited to develop the business continuity team plans?

Accepted Answer

The Working Group is typically best suited to develop the business continuity team plans as they consist of individuals with specific knowledge and expertise related to the operational aspects of the organization.

Question 4

The statement that top management demonstrates leadership by motivating and empowering persons to effectively fulfill their responsibilities for business continuity management is a recommended practice.

Accepted Answer

The answer of The statement that top management demonstrates leadership...

Question 5

The exercise program and after action reports are required documents under ISO22301.

Accepted Answer

ISO 22301, which specifies requirements for setting up and managing an effective Business Continuity Management System (BCMS), requires organizations to conduct exercises and tests to evaluate the effectiveness of their business continuity procedures and to maintain records of these activities and their outcomes, which includes exercise programs and after action reports.

Question 6

A reference in a policy statement to the applicable standard is not acceptable.

Accepted Answer

A reference to the applicable standard in a policy statement is acceptable and desirable as it provides clarity and guidance to employees or stakeholders regarding the expected behavior or procedure.

Question 7

The manager should concentrate less on the document control system itself and more on the sufficiency of the creation and maintenance of documents to ensure the success of the Business Continuity Management System.

Accepted Answer

The statement suggests that the manager should prioritize the creation and maintenance of documents over the document control system itself to ensure the success of the Business Continuity Management System.

Question 8

The scope should only list what is covered by the Business Continuity Management System.

Accepted Answer

The scope of a Business Continuity Management System (BCMS) should define both what is included and what is excluded to ensure clarity and focus on the areas of the business that are covered by the BCMS.

Question 9

According to the standards, the Business Continuity Manager must have no other duties.

Accepted Answer

While it is recommended that the Business Continuity Manager have a singular focus on business continuity management, it is not always feasible for this to be the only duty. However, the BCM role should be given appropriate priority and resources to effectively carry out their responsibilities.

Question 10

The color green on a heat map generally signifies that the task is complete.

Accepted Answer

The color green on a heat map usually signifies a higher level of activity or engagement, while completion is usually indicated by a different color such as blue or grey. However, this may vary depending on the specific design or context of the heat map.

Question 11

The manager must identify risk to the organization. What risk must the manager also identify?

Accepted Answer

The answer of The manager must identify risk to the...

Question 12

The Business Continuity Policy statement should:

Accepted Answer

The Business Continuity Policy statement should not only mandate the elements of comprehensive emergency management but also affirm protection of life, property, and the environment. Moreover, it should direct workers to ensure the effectiveness and continual improvement of the program. Therefore, all of the above choices are the best.

Question 13

Which of the following is a true statement?

Accepted Answer

All members of an organization must be aware of their responsibilities under the Business Continuity Management System, even if they are not assigned to a specific task. This ensures that everyone is prepared to respond appropriately in the event of an incident. Option B is incorrect as individual competence must be documented, and Option C is incorrect as awareness cannot be assumed based on participation in a BCP from another organization. Option D is also incorrect as the level of competence may vary depending on the role and responsibilities of each member.

Question 14

People within the organization who are resistant to implementing the requirements of the Business Continuity Management System are often:

Accepted Answer

Resistance to implementing the requirements of the Business Continuity Management System often indicates a poor business continuity culture within the organization. This may be due to a lack of understanding of the importance of business continuity or a general lack of commitment to the organization's overall goals and objectives. It is important to address this resistance and work towards creating a culture that values and prioritizes business continuity.

Question 15

The color blue when used in a heat map usually represents:

Accepted Answer

The answer of The color blue when used in a...

Question 16

The direction of a Business Continuity Management System is a project of sufficient complexity to warrant the use of a project management plan such as a Gantt Chart.

Accepted Answer

The answer of The direction of a Business Continuity Management...

Question 17

What is most important for the steering committee to have?

Accepted Answer

The charter outlines the objectives, roles and responsibilities of the steering committee, so it is critical for the committee to have one. While incentives and rewards may encourage participation, they are not crucial for the committee to function effectively. Copies of team plans may be useful for reference, but they are not as essential as the charter. Professional certification such as CBCP is also helpful, but not necessary for the steering committee to have.

Question 18

A SMART objective or corrective action is one that is:

Accepted Answer

The SMART acronym typically stands for Specific, Measurable, Achievable, Relevant, and Timely. Option D is the closest to this widely recognized definition. Option A includes "simple" and omits "relevant," while option B substitutes "manageable" for "measurable" and option C substitutes "actionable" for "achievable."

Question 19

The manager must identify external and internal issues within the scope of the management system that could affect the organization's ability to accomplish the goals and objectives of the Business Continuity Management System.

Accepted Answer

This statement is true. As part of the business continuity management system, the manager must identify both external and internal issues that could impact the organization's ability to achieve its goals and objectives. This is a key step in preparing for and mitigating potential disruptions or crises.

Question 20

A Statement of Applicability is required by:

Accepted Answer

The answer of A Statement of Applicability is required by:
...

Quiz 3: Building a Business Continuity Capability