Deck 3: Building a Business Continuity Capability

Question 1

The formation of a Steering Committee is required by ISO 22301, ASIS, and NFPA 1600.

Answer 1

False

Question 2

Which type of chart is a primary method to document roles and responsibilities?

A) Gantt Chart
B) RACI Matrix
C) Heat Map
D) R&R chart

Answer 2

B

Question 3

Who is best suited to develop the business continuity team plans?

A) Senior Management
B) Steering Committee
C) Working Group
D) Business Continuity Manager

Answer 3

C

Question 4

The statement that top management demonstrates leadership by motivating and empowering persons to effectively fulfill their responsibilities for business continuity management is a recommended practice.

Question 5

The exercise program and after action reports are required documents under ISO22301.

Question 6

A reference in a policy statement to the applicable standard is not acceptable.

Question 7

The manager should concentrate less on the document control system itself and more on the sufficiency of the creation and maintenance of documents to ensure the success of the Business Continuity Management System.

Question 8

The scope should only list what is covered by the Business Continuity Management System.

Question 9

According to the standards, the Business Continuity Manager must have no other duties.

Question 10

The color green on a heat map generally signifies that the task is complete.

Question 11

The manager must identify risk to the organization. What risk must the manager also identify?

A) Risk to business processes
B) Project planning risk
C) Internal risk
D) All of the above

Question 12

The Business Continuity Policy statement should:

A) Mandate the elements of Comprehensive Emergency Management
B) Affirm protection of life, property, and the environment
C) Direct workers to ensure the effectiveness and continual improvement of the program
D) All of the above

Question 13

Which of the following is a true statement?

A) A member of the organization must be aware of their responsibilities even if not assigned to a task under the Business Continuity Management System
B) Individual competence does not need to be documented
C) Awareness can be assumed if the individual participated in a Business Continuity Management System from another organization
D) The level of competence must be the same for all participating members of the management system

Question 14

People within the organization who are resistant to implementing the requirements of the Business Continuity Management System are often:

A) Smart
B) Confused by a poorly worded policy
C) Representative of a poor business continuity culture
D) Believe a different standard should be used

Question 15

The color blue when used in a heat map usually represents:

A) No progress on task
B) Some progress on task
C) Task is on target
D) Task is complete

Question 16

The direction of a Business Continuity Management System is a project of sufficient complexity to warrant the use of a project management plan such as a Gantt Chart.

Question 17

What is most important for the steering committee to have?

A) Incentives and rewards for participation
B) Copies of all team plans
C) Professional certification such as CBCP
D) Charter

Question 18

A SMART objective or corrective action is one that is:

A) Simple, Measurable, Achievable, Realistic, and Timely
B) Simple, Manageable, Achievable, Realistic, and Timely
C) Simple, Manageable, Actionable, Realistic, and Timely
D) Specific, Measurable, Achievable, Relevant, and Timely

Question 19

The manager must identify external and internal issues within the scope of the management system that could affect the organization's ability to accomplish the goals and objectives of the Business Continuity Management System.

Question 20

A Statement of Applicability is required by:

A) ASIS standard
B) ISO 22301
C) NFPA 1600
D) None of the above

Question 21

Identify risk to the implementation of the management system.

Question 22

Why or why not is the Business Continuity Management System objective "XYZ Corporation will achieve certification against ISO 22301:2012 by December 2018" a SMART objective?

Question 23

How can management demonstrate support for the program and what are the consequences of forming a Business Continuity Management System without this support?

Question 24

How might the scope of the Business Continuity Management System of a large organization differ from that of a medium size organization?

Question 25

What is the relationship between the Statement of Applicability and the Risk Assessment and Business Impact Analysis?