Business Continuity Management (BCM) EDRP Practice Questions (Page 12)

Questions 56–60

1. 56expert · hard

   A hospital's BCM team has developed a detailed disaster recovery plan for its electronic health records (EHR) system. The plan has passed a tabletop exercise, but management is concerned about the actual recovery time. They want to conduct a more realistic test without risking patient data. The hospital has a secondary data center that can be used for testing. What is the most appropriate test to conduct?

   • AA failover test using the production EHR system without a data copy.
   • BA full simulation test that fails over the EHR system to the secondary data center using a copy of production data.
   • CA checklist review of the plan without executing any recovery steps.
   • DA parallel test that runs the EHR system simultaneously in both data centers with live data.
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   A logistics company's BCM policy states that 'the company will maintain business continuity plans for all critical functions.' However, the policy does not define what 'critical' means or who approves the plans. The BCM program is struggling to prioritize resources. What is the most important missing component of the BCM policy?

   • AA list of all possible threats and their likelihood ratings.
   • BA detailed budget for all recovery resources.
   • CCriteria for determining criticality and a defined approval authority for plans.
   • DA communication plan for notifying employees during a disruption.
   Reveal Solution Discussion Select an answer first
4. 58expert · hard

   A retail chain has implemented a BCM program, but employee participation in exercises is low, and business units do not consistently update their plans. The BCM program manager has limited authority and cannot mandate participation. What is the most effective way to increase engagement and embed BCM into the organization?

   • AOutsource the BCM program to a third party to ensure compliance.
   • BSecure executive sponsorship to communicate the importance of BCM and hold business unit leaders accountable for plan maintenance.
   • COffer financial incentives to employees who participate in exercises.
   • DMake BCM participation voluntary and rely on employee goodwill.
   Reveal Solution Discussion Select an answer first
5. 59expert · hard

   A healthcare organization has completed the implementation phase of its BCM lifecycle. The BCPs are documented, and staff have been trained. The organization is now planning its first exercise. Management is concerned about the cost and potential disruption of a full-scale test. What is the most appropriate next step in the BCM lifecycle?

   • AConduct a tabletop exercise to validate the plans and identify gaps before committing to a full-scale test.
   • BSkip testing and move to maintenance because the plans have been implemented.
   • CConduct a full-scale test only if the budget allows, otherwise defer testing indefinitely.
   • DProceed directly to a full-scale simulation to get the most realistic results.
   Reveal Solution Discussion Select an answer first
6. 60foundation · easy

   What is a key activity in embedding BCM into an organization's culture?

   • AKeeping BCM documentation confidential from most employees
   • BProviding regular awareness training and exercises to all employees
   • CConducting BCM activities only during an actual crisis
   • DLimiting BCM involvement to the IT department
   Reveal Solution Discussion Select an answer first