DRII CBCP UPDATED 2026 EXAM SCRIPT QUESTIONS AND
SOLUTIONS RATED A+
✔✔What is the sixth professional practice for Business Continuity Management? -
✔✔Plan development and implementation
✔✔What is the seventh professional practice for Business Continuity Management? -
✔✔Awareness and training programs
✔✔What is the eighth professional practice for Business Continuity Management? -
✔✔Business continuity plan exercise, assessment, and maintenance
✔✔What is the ninth professional practice for Business Continuity Management? -
✔✔Crisis communications
✔✔What is the tenth professional practice for Business Continuity Management? -
✔✔Coordination with external agencies
✔✔To establish the need for a business continuity program you must: - ✔✔Reference
legal and regulatory requirements, reference relevant standards, show the benefits of
the program within the context of the organization's mission.
✔✔Leadership is accountable and liable to know: - ✔✔Their legal responsibilities
including: applicable laws, regulations, and contractual and employment agreements.
✔✔What must you present to leadership to establish the need for business continuity
management? - ✔✔Legal and regulatory requirements
✔✔In which professional practice would you identify teams that will support the
business continuity program implementation? - ✔✔Program initiation and management
✔✔What is the role of the business continuity steering committee? - ✔✔To implement
objectives, program structure, and critical success factors.
✔✔Is program management a part of the steering committees role? - ✔✔Yes, they help
manage the business continuity program.
✔✔In which of the three elements of a business continuity plan would you put
exclusions? - ✔✔In the scope.
✔✔Who is legally responsible for the business continuity program and outcomes? -
✔✔The CEO and leadership.
, ✔✔What information should be presented to leadership about the need for business
continuity? - ✔✔Legal and regulatory requirements.
✔✔Which team is responsible for defining the objectives, structure, policies, and charter
for the business continuity program? - ✔✔The steering committee.
✔✔What is the most critical element to the success of the business continuity planning
effort? - ✔✔Leadership commitment.
✔✔Which team provides resources and support to the business continuity program? -
✔✔The steering committee.
✔✔The most important role for the business continuity professional in performing a risk
assessment is? - ✔✔To determine the probability and impact of the identified risks.
✔✔To collect data for risk assessments and BIA's one must use a combination of what
methods? - ✔✔Forms and questionnaires, interviews and meetings.
✔✔How often should a risk assessment be conducted? - ✔✔Annually or as significant
changes occur
✔✔The three most important sources of risk are? - ✔✔Natural phenomena,
technological exposure, human acts
✔✔Risk Appetite - ✔✔The amount of risk that an organization is prepared to accept,
tolerate, or be exposed to at any point in time.
✔✔The purpose of identifying and evaluating the effectiveness of existing controls is? -
✔✔To mitigate impact exposures
✔✔Evaluating the effectiveness of controls involves? - ✔✔Identifying the existing
controls that are in place
✔✔Implementing controls and procedures ________? - ✔✔Minimizes risk
✔✔Necessary changes in order to reduce the impact of identified risks include: -
✔✔Changes to physical protection and changes to cyber security and information
technology.
✔✔Resilience - ✔✔The adaptive capacity of an organization in a complex and changing
environment
SOLUTIONS RATED A+
✔✔What is the sixth professional practice for Business Continuity Management? -
✔✔Plan development and implementation
✔✔What is the seventh professional practice for Business Continuity Management? -
✔✔Awareness and training programs
✔✔What is the eighth professional practice for Business Continuity Management? -
✔✔Business continuity plan exercise, assessment, and maintenance
✔✔What is the ninth professional practice for Business Continuity Management? -
✔✔Crisis communications
✔✔What is the tenth professional practice for Business Continuity Management? -
✔✔Coordination with external agencies
✔✔To establish the need for a business continuity program you must: - ✔✔Reference
legal and regulatory requirements, reference relevant standards, show the benefits of
the program within the context of the organization's mission.
✔✔Leadership is accountable and liable to know: - ✔✔Their legal responsibilities
including: applicable laws, regulations, and contractual and employment agreements.
✔✔What must you present to leadership to establish the need for business continuity
management? - ✔✔Legal and regulatory requirements
✔✔In which professional practice would you identify teams that will support the
business continuity program implementation? - ✔✔Program initiation and management
✔✔What is the role of the business continuity steering committee? - ✔✔To implement
objectives, program structure, and critical success factors.
✔✔Is program management a part of the steering committees role? - ✔✔Yes, they help
manage the business continuity program.
✔✔In which of the three elements of a business continuity plan would you put
exclusions? - ✔✔In the scope.
✔✔Who is legally responsible for the business continuity program and outcomes? -
✔✔The CEO and leadership.
, ✔✔What information should be presented to leadership about the need for business
continuity? - ✔✔Legal and regulatory requirements.
✔✔Which team is responsible for defining the objectives, structure, policies, and charter
for the business continuity program? - ✔✔The steering committee.
✔✔What is the most critical element to the success of the business continuity planning
effort? - ✔✔Leadership commitment.
✔✔Which team provides resources and support to the business continuity program? -
✔✔The steering committee.
✔✔The most important role for the business continuity professional in performing a risk
assessment is? - ✔✔To determine the probability and impact of the identified risks.
✔✔To collect data for risk assessments and BIA's one must use a combination of what
methods? - ✔✔Forms and questionnaires, interviews and meetings.
✔✔How often should a risk assessment be conducted? - ✔✔Annually or as significant
changes occur
✔✔The three most important sources of risk are? - ✔✔Natural phenomena,
technological exposure, human acts
✔✔Risk Appetite - ✔✔The amount of risk that an organization is prepared to accept,
tolerate, or be exposed to at any point in time.
✔✔The purpose of identifying and evaluating the effectiveness of existing controls is? -
✔✔To mitigate impact exposures
✔✔Evaluating the effectiveness of controls involves? - ✔✔Identifying the existing
controls that are in place
✔✔Implementing controls and procedures ________? - ✔✔Minimizes risk
✔✔Necessary changes in order to reduce the impact of identified risks include: -
✔✔Changes to physical protection and changes to cyber security and information
technology.
✔✔Resilience - ✔✔The adaptive capacity of an organization in a complex and changing
environment
