Deck 2: Understanding the Standards

Question 1

What does the "O" in OPDCA stand for and what does it represent?

Answer 1

not answered

Question 2

Organization Resilience (OR) Management System is terminology from which standard?

A) ISO 22301
B) ASIS SPC.1-2009
C) NFPA 1600 -2010
D) Both ISO and ASIS

Answer 2

B

Question 3

NFPA 1600-2010 is the most business friendly of the three standards discussed in the text.

Answer 3

False

Question 4

All clauses of ISO 22301 and the ASIS standard carry equal weight in mandated requirements.

Question 5

The ISO 22301 standard tells us how to develop a Business Continuity Management System.

Question 6

The correction of deficiencies identified during an audit or exercise belong to which portion of the Deming Wheel :

A) Plan
B) Do
C) Check
D) Act

Question 7

All processes start with an input that serves as the driver for the planning phase as long as the input is derived from an output.

Question 8

PDCA is used in ISO 22301 and the ASIS SPC.1-2009 standards but not in NFPA 1600 - 2010.

Question 9

Devising Business Continuity strategies is part of which ISO 22301 clause?

A) Clause 6 (Planning)
B) Clause 7 (Support)
C) Clause 8 (Operation)
D) Clause 10 (Act)

Question 10

The Context of the Organization is predominantly understood through:

A) Process mapping
B) The organization's mission statement
C) Risk Assessment and Business Impact analysis
D) PDCA

Question 11

Although PDCA can be used for both strategic and tactical issues, a separate PDCA cycle cannot be embedded in a PDCA cycle.

Question 12

NFPA 1600-2010 is an ANSI Standard.

Question 13

PDCA is best applied to the Business Continuity Management System by:

A) Applying it to process inputs to arrive at outputs
B) Arranging the final documented plan elements according to the PDCA format
C) Introducing statistical process control to the Management System
D) All of the above

Question 14

"May" means something within the standards that is recommended and not mandated.

Question 15

ASIS defines "Plan" in terms of managing risk, improving security, incident preparedness, response, continuity and recovery.

Question 16

Which of the following is not an example of a type of process?

A) Resource Management
B) Realization Process
C) Measurement and Analysis
D) None of the above

Question 17

A "Normative Reference" is:

A) An assumption
B) A term or a concept that is commonly known
C) A reference that balances an opposing opinion
D) A document used to gain better understanding

Question 18

Operational Planning and Control is part of ISO 22301's Clause 6.

Question 19

Employees who work in teams that allow for rapid decision making and a better view of the end product are likely working in what type of management system?

A) Horizontal Management
B) Vertical Management
C) The most common type of modern management system
D) A large, complex corporation with many departments and products

Question 20

Which is not true:

A) ISO standards are developed by technical committees of subject matter experts
B) The three standards discussed in the text are consensus standards
C) Representatives of governmental entities can participate on the technical committee
D) ANSI oversees the development of standards in the United States and Canada

Question 21

What do the standards provide?

Question 22

Describe the process used to initiate and develop ISO and ANSI standards.

Question 23

Identify and describe what the components of the Deming Wheel mean.

Question 24

What are a business process and a process approach?