DRII BCLE 2000 - ABCP/CBCP Questions and Answers Graded A+

DRII BCLE 2000 - ABCP/CBCP Questions and Answers Graded A+ Which item is similar to a BC policy statement and who signs it? pg6 Whose role is to: Define Objectives, structure, policies, and charter for the BC program Steering Committee Whose role is to: Provide guidance and oversight for the BC program Steering Committee Whose role is to Provide the resources necessary to support the BC program Steering Committee Whose role is to: Provide input and approval of BC projects, scope, and time frames Steering Committee Whose roles is to: Assign key functional personnel to require roles. Leadership: Department heads should assign staff based on their job description to match the functional area, i.e. SMEs What are the Subject Area Objectives for Program Initiation and Management? 1. *Establish the need* for a BC program 2. *Obtain support and funding* for the BC program 3. *Build the organizational framework to support* the BC program 4. Introduce *key concepts* such as *program mgmt, risk awareness, identification of critical functions/processes, recovery strategies, training and awareness, and exercising/testing* List the Professional Practices sequentially. 1. Program *Initiation and Management* 2. *Risk Assessment* 3. Business Impact Analysis ( *BIA* ) 4. BC *Strategies* 5. *Incident Response* 6. Plan *Development and Implementation* 7. Awareness and Training Programs 8. BC *Plan Exercise, Assessment, and Maintenance* 9. *Crisis Communication* 10. Coordination with *External Agencies* " *Establish the need* for a BC program" is part of what Professional Practices Role Program Initiation and Mgmt " *Obtain support and funding* for the BC program" is part of what Professional Practices Role Program Initiation and Mgmt " *Build the organizational framework to support* the BC program" is part of what Professional Practices Role Program Initiation and Mgmt What are important concepts for Establishing the Need for a BC Program? 1. The BC program should be *funded by leadership* 2. Leadership *may not support* the BC program if they *do not see value in it* 3. Gaining *leadership commitment* should be accomplished *before any other BC task* What is RTO (recovery time objective)? The *time goal for the restoration and recovery of functions or resources* based on the *acceptable down time and acceptable level of performance* in case of a disruption of operations What is (RPO) Recovery point objective? The *point to which information used by an activity must be restored* to enable the activity to operate on resumption. Can also be referred to as " *maximum data loss* " What is a Business Impact Analysis (BIA) A method of *identifying the effects of failing to perform a function* or requirement Name two key elements in a Scope - should initially consider the whole entity - this section would include exclusions "Lead the steering committee in driving the implementation of objectives, program structure, and critical success factors" is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* "Develop of utilize existing policies, standards, and procedure for the business continuity program " is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* "State the purpose of and obtain resources needed " is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* " *Identify teams to support BC program implementation* " is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* "Monitor the status of the ongoing budget impact " is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* "Develop project plans for cor components, such as the risk assessment and BIA. Outline an tasks required to support the approved critical success factors" is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* "Oversee the ongoing effectiveness of the BC program" is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* "Report to leadership on the status of the BC program on a regular basis" is part of what Program Initiation and Mgmt Role Build the BC Framework and Coordinate/ *manage program implementation* What are regulation? Are created by a governmental/industry bodies, subject to audit, and can result in fines or being shut down What are standards? Are voluntary, non-punitive, reference regulations, use conformity assessments (1st, 2nd, 3rd), and are in constant flux What are key items the Steering Committee is responsible for? - Project plan development (can delegate) - Implementation of objectives, program structure, and critical resource factors (can delegate) - Provide needed resources What are the BC responsibilities for Program Initiation and Mgmt? - Obtain leadership support - Gather info relevant to the BC program - Organize and manage BC program --- Define the program objectives --- Assess the program risk --- Plan the program in detail - Tracks and reports program progress - Manages change "Identify risks that can adversely affect an entity's resources or image" is part of what subject area objective? Risk Assessment "Assess risks to determine the potential impacts to the entity, enabling the entity to determine the most effective use of resources to reduce these potential impacts" is part of what subject area objective? Risk Assessment What are the roles of BC professional for a Risk Assessment? 1. Work with leadership and any internal and/or external risk management or enterprise risk management groups to gain agreement on a standardized risk assessment methodology 2. Identify, develop and implement information-gathering activities across the entity to identify risks 3. Determine the probability and impact of the identified risks 4. Identify and evaluate the effectiveness of any controls and safeguards that are currently in place 5. Identify resilience strategies to reduce the entitys risks and/or control for or mitigate the potential impact of the risk 6. Document and present the risk and vulnerability assessment and recommendations to leadership for approval 7. Upon receiving approval from leadership, develop the entity's risk appetite and threshold to use as a basis for the ongoing management of a sustainable risk assessment process What are two key parts of Identifying and Evaluating the Effectiveness of Controls and Safeguards in Place? - Identify and evaluate the effectiveness of any controls and safeguards that are currently in place for internal and external groups upon which the entity is dependent in order to conduct its operations - Identify and evaluate the effectiveness of controls employed to reduce the impact of exposures What does resilience mean? The adaptive capacity of an organization in a complex and changing environment What is an important part of "Identifying Resilience Strategies for Risk and/or Voluntary Mitigation"? Recommend any changes needed to reduce the impact of identified risks Whats the difference between a sole source provider and a single source provider? Sole source - the only source option available Single source - the one source your business has chosen to use