Business Continuity Management (BCM) EDRP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A hospital network has developed comprehensive BCM plans, but staff turnover has been high. New employees are not aware of the plans, and existing employees rarely participate in exercises. The BCM program manager wants to embed BCM into the organization's culture. Which initiative is most likely to achieve this?

   • AMake BCM a performance objective only for managers.
   • BIncorporate BCM awareness and role-specific training into new employee onboarding and annual refresher sessions.
   • CPost the BCM plans on the intranet and rely on employees to read them.
   • DConduct a single annual exercise and require attendance from all departments.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A multinational corporation has separate BCM, IT DR, and crisis management teams. During a cyberattack, the IT DR team restored systems quickly, but the BCM team activated the business continuity plan late because they were not notified. The crisis team's public statements also contradicted the BCM plan's communication procedures. Which improvement would most effectively prevent this coordination failure?

   • AMerge the BCM and IT DR teams into one team reporting to the CISO
   • BRequire the IT DR team to handle all communication with the crisis team
   • CEstablish a joint incident command structure with predefined triggers and notification paths that activate all teams simultaneously
   • DLet each team maintain its own activation criteria and communication plans
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services firm completed a successful tabletop exercise of its business continuity plan. Six months later, the firm acquired a new subsidiary and changed its core banking platform. The BCM manager wants to ensure the plan remains valid. What should the manager do?

   • ARely on the successful tabletop exercise as proof that the plan is still valid
   • BSchedule an immediate plan review and update to reflect the organizational and technology changes, then plan a follow-up exercise
   • CArchive the old plan and write a completely new plan from scratch
   • DWait until the next annual exercise to update the plan
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A mid-sized company has a BCM plan that is well documented but rarely referenced by employees. During a minor incident, staff did not know who the incident manager was or where the plan was stored. To embed BCM into the organization's culture, which action should the company take first?

   • ARewrite the plan in a more technical format
   • BConduct regular awareness training and role-specific briefings so employees understand the plan and their responsibilities
   • CWait for a larger incident to motivate employees to learn the plan
   • DStore the plan only in the CEO's office to ensure it is secure
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital is updating its BCM program. The risk assessment has identified that a regional power outage is a high-likelihood, high-impact threat. The BIA shows that the electronic health records (EHR) system has an RTO of 4 hours. The hospital currently has a backup generator that can power the data center for 6 hours. What is the most appropriate BCM strategy decision?

   • AAcquire a second generator or a fuel contract to extend backup power beyond 6 hours, ensuring the EHR can be restored within its RTO.
   • BMove the EHR system to a cloud provider to eliminate the need for on-site power.
   • CAccept the risk because the generator already covers the 4-hour RTO.
   • DReduce the EHR RTO to 2 hours to match the generator's capability.
   Reveal Solution Discussion Select an answer first