Business Continuity Management (BCM) EDRP Practice Questions (Page 13)

Questions 61–62

1. 61expert · hard

   A large insurance company is establishing a BCM program. The board has approved the policy, but there is no clear ownership for the program across business units. Each department has its own continuity plans that are not aligned with the corporate strategy. The company wants to ensure consistent governance and accountability. Which governance model should be adopted?

   • AAllow each business unit to continue managing its own plans independently
   • BAssign BCM ownership to the IT department because most plans involve technology
   • CCreate a BCM committee that meets only when an incident occurs
   • DEstablish a centralized BCM office with a program director who owns the program, supported by business unit coordinators who align local plans with corporate policy
   Reveal Solution Discussion Select an answer first
2. 62expert · hard

   A government agency's BCM program has been stable for several years. The annual test revealed that the recovery procedure for a critical application is outdated because the application was upgraded six months ago. The BCM team updated the procedure, but the next annual test is not for another year. The agency's policy requires that all critical plans be tested annually. What is the most appropriate action?

   • AWait for the next annual test to validate the update to avoid extra costs.
   • BUpdate the plan and mark the annual test as satisfied because the procedure was reviewed.
   • CConduct an interim test of the updated procedure before the next annual test.
   • DChange the policy to allow testing every two years for critical plans.
   Reveal Solution Discussion Select an answer first