先試後買

A. Developing Business Continuity (BC) strategies

B. Exercising the Business Continuity (BC) plans

C. Updating Business Continuity (BC) policy

D. Developing Business Continuity (BC) plans

A. It provides assurance to interested parties that the organization is in control of the situation.

B. It provides vital information to those who have been impacted.

C. It enables the organization to take advantage of increased public interest to identify new business opportunities.

D. It positions the organization as the central source of information.

A. Confirmation that personnel are familiar with their roles, and authority in response to an incident

B. Confirmation of how well Business Continuity is incorporated into the tasks pertaining to the Business Continuity Management System (BCMS)

C. Increased understanding of the requirements set out in the Activities Business Impact Analysis (BIA)

D. Validation of the Business Continuity Management System (BCMS) against standards, regulations and legislation

A. A hot debrief should be conducted within one month after the conclusion of an exercise

B. One-on-one interviews with all exercise participants should be conducted within one month following the exercise

C. Only senior level exercise participants should provide opinions during the debrief

D. Surveys are especially effective if an exercise and its participants are spread out over multiple locations

A. Make recommendations on alternative ways of meeting recovery time objectives (RTOs)

B. Confirm that the organization is fully prepared to respond to incidents

C. Assess the performance of the members of top management team in relation to Business Continuity

D. Provide independent assurance on a set of Business Continuity processes and controls

A. The organization's health and safety risk assessments are recorded as required

B. The organization maintains full compliance with legal and regulatory requirements

C. The organization's Business Continuity operational plans are kept up to date

D. Business Continuity is part of the organization's strategic planning and is reviewed regularly

A. Customers and suppliers that are familiar with the way the organization works and can make recommendations from an external perspective

B. Only Business Continuity professionals and any available administrative support

C. Multi-disciplinary experts who are familiar with the operation of the organization

D. Only top management

A. To indicate that all information should be treated as real during the exercise

B. To ensure that the information is not treated as a real message

C. To ensure that the information is treated as confidential

D. To indicate that the message has been approved by the exercise facilitator

A. Involving stakeholders will reduce the workload and responsibilities of the Business Continuity Professional as administrative activities can be delegated to other staff

B. Engagement of stakeholders will reduce the potential for conflict at later stages of the programme

C. Early collaboration with colleagues will engage them in the process and secure support for the ongoing development and implementation of the BCMS

D. Existing policies and procedures may be relevant to the BCMS so early identification will reduce the risk for duplication of work

A. Is optional and may be omitted

B. Is conducted prior to the Product and Services BIA

C. Identifies resource requirements and interdependencies

D. Excludes processes that have been outsourced

A. Reduction in risks related to Business Continuity (BC)

B. Amount of knowledge and understanding that individuals have gained through their study

C. Business continuity culture in an organization

D. Effectiveness of the People and Culture department

A. Strategies focus on the methods and procedures for business as usual activities whereas solutions focus on the treatments and actions to minimize risks

B. Strategies are high-level approaches for meeting the organization's Business Continuity requirements whereas solutions detail how the strategies will be implemented

C. Strategies align to the direction set out in the Business Continuity policy whilst solutions address the outlined objectives in the Business Continuity Management System (BCMS)

D. Strategies are based on the outcomes of the Business Impact Analysis (BIA) whereas solutions are based on the outcomes of the risk assessment