DRII CBCP – Disaster Recovery Institute International
(DRII) – 2026/2027 Academic Year
SECTION I: PROGRAM INITIATION & MANAGEMENT
Questions 1–20
Question 1
What is the NUMBER ONE reason for establishing a Business Continuity program?
A. To comply with regulatory requirements
B. To reduce insurance premiums
C. To ensure survival of the entity
D. To improve customer satisfaction
E. To gain competitive advantage
Correct Answer: C
Rationale: The primary purpose of business continuity management is to
ensure the organization can survive a disruption and continue operating.
Organizational survival is the ultimate objective of continuity planning—all other
benefits (compliance, cost savings, reputation) are secondary to this fundamental
goal.
Question 2
Which of the following is the FIRST step in establishing a Business Continuity
Program?
A. Conducting a Business Impact Analysis
B. Developing recovery strategies
C. Obtaining senior management commitment and support
D. Writing the business continuity plan
E. Identifying critical business functions
Correct Answer: C
, Rationale: Without executive sponsorship and resources, the BCP cannot
succeed. Leadership must buy in and commit before any BC tasks take place. The
program should be funded by leadership with a budget allocated before
proceeding with technical activities.
Question 3
A Business Continuity professional is presenting to the executive team to establish
the need for a BC program. Which of the following should be presented? (Select
ALL that apply)
A. Legal and regulatory requirements
B. Relevant industry standards
C. The benefits of the program within the context of the organization's mission
D. Competitors' business continuity plans
E. The names of potential team members
Correct Answers: A, B, C
Rationale: To establish the need for a business continuity program, one must
reference legal and regulatory requirements, reference relevant standards, and
show the benefits of the program within the context of the organization's
mission.Competitors' plans (D) are not relevant to establishing internal need, and
team member names (E) are an implementation detail, not a justification.
Question 4
Who is LEGALLY responsible for the business continuity program and its
outcomes?
A. The Business Continuity Manager
B. The Steering Committee
C. The CEO and senior leadership
D. The Emergency Response Team
E. The Legal Department
Correct Answer: C
, Rationale: The CEO and leadership are legally responsible for the business
continuity program and outcomes.Leadership is accountable and liable to know
their legal responsibilities including applicable laws, regulations, and contractual
and employment agreements.
Question 5
Which of the following is a key component of Program Governance?
A. Risk assessment
B. Business impact analysis
C. Defining roles, responsibilities, and authorities
D. Developing a crisis communications plan
E. Conducting plan exercises
Correct Answer: C
Rationale: Program Governance involves defining roles, responsibilities, and
authorities, such as establishing a Steering Committee and Program Manager.The
other options are activities within other professional practices.
Question 6
What is the composition of an effective Steering Committee?
A. 3-4 members from the IT department only
B. 6-7 business leaders representing different business units
C. External consultants only
D. All employees of the organization
E. Members of the executive team only
Correct Answer: B
Rationale: A Steering Committee typically consists of 6-7 business leaders
representing different business units who will make decisions regarding business
continuity.
, Question 7
Which team is responsible for defining the objectives, structure, policies, and
charter for the business continuity program?
A. The Business Continuity planning team
B. The Steering Committee
C. The Crisis Management Team
D. The IT Recovery Team
E. The Human Resources Department
Correct Answer: B
Rationale: The steering committee is responsible for defining the objectives,
structure, policies, and charter for the business continuity program.
Question 8
What is the value of a BCM policy statement?
A. It forces middle management to comply with senior directives
B. It shows employees how to do their part in the planning process
C. It shows management's commitment to the BC planning process
D. It provides senior management a direction for future decisions
E. It replaces the need for a business continuity plan
Correct Answer: C
Rationale: The policy statement is a formal document signed by senior
management that demonstrates organizational commitment to business
continuity. It provides authority for the program, sets expectations across the
organization, and establishes the framework for all BC activities.
Question 9
What would be evidence of management support for BCM?
A. A steering committee that reports to the emergency response team
B. An executive sponsor who reports to damage assessment committee
C. A project plan developed solely by the business continuity planner
(DRII) – 2026/2027 Academic Year
SECTION I: PROGRAM INITIATION & MANAGEMENT
Questions 1–20
Question 1
What is the NUMBER ONE reason for establishing a Business Continuity program?
A. To comply with regulatory requirements
B. To reduce insurance premiums
C. To ensure survival of the entity
D. To improve customer satisfaction
E. To gain competitive advantage
Correct Answer: C
Rationale: The primary purpose of business continuity management is to
ensure the organization can survive a disruption and continue operating.
Organizational survival is the ultimate objective of continuity planning—all other
benefits (compliance, cost savings, reputation) are secondary to this fundamental
goal.
Question 2
Which of the following is the FIRST step in establishing a Business Continuity
Program?
A. Conducting a Business Impact Analysis
B. Developing recovery strategies
C. Obtaining senior management commitment and support
D. Writing the business continuity plan
E. Identifying critical business functions
Correct Answer: C
, Rationale: Without executive sponsorship and resources, the BCP cannot
succeed. Leadership must buy in and commit before any BC tasks take place. The
program should be funded by leadership with a budget allocated before
proceeding with technical activities.
Question 3
A Business Continuity professional is presenting to the executive team to establish
the need for a BC program. Which of the following should be presented? (Select
ALL that apply)
A. Legal and regulatory requirements
B. Relevant industry standards
C. The benefits of the program within the context of the organization's mission
D. Competitors' business continuity plans
E. The names of potential team members
Correct Answers: A, B, C
Rationale: To establish the need for a business continuity program, one must
reference legal and regulatory requirements, reference relevant standards, and
show the benefits of the program within the context of the organization's
mission.Competitors' plans (D) are not relevant to establishing internal need, and
team member names (E) are an implementation detail, not a justification.
Question 4
Who is LEGALLY responsible for the business continuity program and its
outcomes?
A. The Business Continuity Manager
B. The Steering Committee
C. The CEO and senior leadership
D. The Emergency Response Team
E. The Legal Department
Correct Answer: C
, Rationale: The CEO and leadership are legally responsible for the business
continuity program and outcomes.Leadership is accountable and liable to know
their legal responsibilities including applicable laws, regulations, and contractual
and employment agreements.
Question 5
Which of the following is a key component of Program Governance?
A. Risk assessment
B. Business impact analysis
C. Defining roles, responsibilities, and authorities
D. Developing a crisis communications plan
E. Conducting plan exercises
Correct Answer: C
Rationale: Program Governance involves defining roles, responsibilities, and
authorities, such as establishing a Steering Committee and Program Manager.The
other options are activities within other professional practices.
Question 6
What is the composition of an effective Steering Committee?
A. 3-4 members from the IT department only
B. 6-7 business leaders representing different business units
C. External consultants only
D. All employees of the organization
E. Members of the executive team only
Correct Answer: B
Rationale: A Steering Committee typically consists of 6-7 business leaders
representing different business units who will make decisions regarding business
continuity.
, Question 7
Which team is responsible for defining the objectives, structure, policies, and
charter for the business continuity program?
A. The Business Continuity planning team
B. The Steering Committee
C. The Crisis Management Team
D. The IT Recovery Team
E. The Human Resources Department
Correct Answer: B
Rationale: The steering committee is responsible for defining the objectives,
structure, policies, and charter for the business continuity program.
Question 8
What is the value of a BCM policy statement?
A. It forces middle management to comply with senior directives
B. It shows employees how to do their part in the planning process
C. It shows management's commitment to the BC planning process
D. It provides senior management a direction for future decisions
E. It replaces the need for a business continuity plan
Correct Answer: C
Rationale: The policy statement is a formal document signed by senior
management that demonstrates organizational commitment to business
continuity. It provides authority for the program, sets expectations across the
organization, and establishes the framework for all BC activities.
Question 9
What would be evidence of management support for BCM?
A. A steering committee that reports to the emergency response team
B. An executive sponsor who reports to damage assessment committee
C. A project plan developed solely by the business continuity planner
