5.1 Facilitate Development of Contingency Plans ISSMP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A retail company is creating a contingency plan for a warehouse fire. The plan must assign specific roles for evacuation, data backup, and customer notification. The company has a small staff, and some employees have multiple responsibilities. The plan must be clear about who is in charge during the incident. Which action best ensures clear accountability?

   • AAssign a single incident commander and document backup designees for each critical role.
   • BCreate a detailed role matrix that lists every possible task and assigns it to a specific person.
   • CRely on the most senior employee present to take charge without pre-assigned roles.
   • DLet employees decide their own roles during the incident based on availability.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is an example of a third-party dependency that should be considered in contingency planning?

   • AThe organization's executive team
   • BThe organization's own data center
   • CA cloud service provider hosting critical applications
   • DThe organization's internal HR department
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A multinational corporation is developing a resiliency plan. The company operates in several countries, including some with strict data residency laws. The company's BIA identifies that its customer relationship management (CRM) system is critical. The company is considering using a cloud provider that has data centers in multiple regions. Which factor is most important to consider when selecting the cloud provider?

   • AThe provider's cost compared to other cloud providers.
   • BThe provider's ability to store data in the specific regions required by law.
   • CThe provider's brand reputation.
   • DThe provider's global network performance.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A utility company is developing a contingency plan for a regional power outage. The plan must coordinate with local emergency services, the city government, and a neighboring utility that can provide mutual aid. The company's crisis communications team wants to issue public statements, but the city government insists on approving all public communications. Which action best ensures alignment among stakeholders?

   • ALet the city government handle all public communications to avoid conflicts.
   • BEstablish a joint communications protocol that defines roles, approval processes, and message coordination.
   • CIssue public statements without city approval to ensure timely information flow.
   • DDelay all public communications until the outage is resolved.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   When analyzing the impact of a contingency plan on organizational priorities, which of the following should be considered?

   • AThe plan's effect on the organization's brand colors
   • BThe plan's impact on the CEO's salary
   • CThe plan's impact on employee vacation schedules
   • DHow the plan may shift focus to critical functions during a disruption
   Reveal Solution Discussion Select an answer first