CBCI Course Mock Exam

Whilst the Business Continuity Management System (BCMS) is being established for the first time, the organization may need to develop and implement an interim:

• Disruption Management Plan

• Communications Management Plan

• Threat Management Plan

• Crisis Management Plan

While the Business Continuity Management System (BCMS) is being developed, it is important to coordinate and capture decisions and progress. Which of the following approaches should be applied?

• Decisions and processes should be documented, and the documents should be controlled by an allocated owner.

• Access to all documents should be provided to everyone with allocated roles in the project so that they can add their points to the documents when issues arise or when they feel this is needed.

• Ensure all staff can see and amend documents to make sure that they are fit for purpose and stay up to date.

• Assess the communication style across the organization to understand how to facilitate interactions-

When establishing a Business Continuity Management System (BCMS), engagement with stakeholders is important. Which of the following is NOT a reason for engaging with internal stakeholders?

• Existing policies and procedures may be relevant to the BCMS and early identification will reduce the potential for duplication of work.

• Early collaboration with colleagues will engage them in the process and secure support for the ongoing development and implementation of the BCMS.

• Engagement of stakeholders will reduce the potential for conflict at later stages of the program.

• Involving stakeholders will reduce the workload and responsibilities of the Business Continuity Professional as coordination and administrative activities can be allocated to other personnel.

Which of the following is an activity that would be undertaken as part of the coordination process when establishing a Business Continuity Management System (BCMS)?

• Horizon scanning

• Developing revised contracts for external experts

• Stakeholder identification, mapping and engagement

• Cost-benefit analysis

Why is it important to provide a defined scope for the Business Continuity Management System (BCMS)?

• To clarify the areas that staff do not need to be concerned about-

• To enable the top management to know what advice and guidance they can ask the project team to provide.

• To clarify the strategy for the next three years and provide staff with firm three-year objectives.

• To clarify priorities and ensure that the BCMS makes the best use of resources such as time and finance.

When determining the scope of the Business Continuity Management System (BCMS), it is important to consider all aspects of a product or a service in scope that could be affected by disruption. Which of the following would NOT be considered?

• Development requirements for proposed new products and services.

• Internal support including Information, Communication and Technology (ICT), facilities and resources.

• Regulatory requirements attached to a product or service in scope.

• The supply chain for an external supplier that is involved with a product or service within scope.

Consulting with stakeholders, conducting a cost-benefit analysis and reviewing existing information held by Risk Management are methods that may be used to define the:

• High-level governance of the Business Continuity Management System BCMS

• Initial scope of the BCMS

• Business continuity policy

• Monitoring arrangements for the BCMS

The purpose of a business continuity (BC) policy includes explaining the importance of BC to the organization as well as:

• Providing specific information on the Business Continuity Management System (BCMS) requirements and processes.

• Defining the operational roles and responsibilities of response teams.

• Describing how the specific activities within the BCMS will be carried out.

• Setting expectations for how the BCMS will be used.

Which of the following describes the relationship between the Business Continuity Policy and the Business Continuity Management System (BCMS)?

• The policy provides additional detail to enable personnel to understand the specific actions needed to implement the BCMS.

• The Business Continuity Policy is written at a level that is independent of the scope of the BCMS and sets out direction rather than actions.

• The Business Continuity Policy is a document that is confidential to top management and the organization's board of directors whereas the BCMS documents are shared with all staff.

• The Business Continuity Policy provides a detailed summary of the outcomes of a Business Impact Analysis (BIA).

The first stage in the development of an effective Business Continuity Policy is:

• Drafting a statement that outlines the overall purpose of the Business Continuity Management System (BCMS)

• Communicating the finished policy widely within the organization to secure internal support

• Agreeing and drafting definitions of the key terms to be used such as business continuity and Business Continuity Management System.

• Drafting the outline content of the policy so that it can be reviewed prior to further development.