Lesson 1 BCLE 2000 Questions and
Correct Detailed Answers
Program management - Answer: The process of managing programs mapped to business objectives
that improve organizational performance.
Risk - Answer: A possible event that could cause harm or loss or affect the ability to achieve
objectives. A risk is measured by the probability of a threat, the vulnerability of the asset to that
threat, and the impact it could have if it occurred.
Business impact - Answer: The effect, acceptable or unacceptable, of an event on an organization.
The types of business impact are usually described as financial and non-financial and are further
divided into specific types
of impact.
Awareness - Answer: To create an understanding of basic business continuity issues and limitations.
This will enable staff to recognize threats and respond accordingly.
Critical function/processes - Answer: A critical function is a service, process, or business activity or a
collection of such, normally performed by a unit that must continue at a sufficient level without
interruption or restart within given timeframes after a disruption to the service.
Business continuity - Answer: An ongoing process to ensure that the necessary steps are taken to
identify the impact of potential losses and maintain viable recovery strategies, recovery plans, and
continuity of services.
Disaster recovery - Answer: The technical aspect of business continuity. The collection of resources
and activities to re-establish information technology services (including components such as
infrastructure, telecommunications, systems, applications and data) at an alternate site following a
disruption of IT services. Disaster recovery includes subsequent resumption and restoration of those
operations at a more permanent site.
Risk assessment - Answer: Process of identifying the risks to an organization, assessing the critical
functions necessary for an organization to continue business operations, defining the controls in
place to reduce organization exposure and evaluating the cost for such controls. Risk analysis often
involves an evaluation of the probabilities of a particular event.
Correct Detailed Answers
Program management - Answer: The process of managing programs mapped to business objectives
that improve organizational performance.
Risk - Answer: A possible event that could cause harm or loss or affect the ability to achieve
objectives. A risk is measured by the probability of a threat, the vulnerability of the asset to that
threat, and the impact it could have if it occurred.
Business impact - Answer: The effect, acceptable or unacceptable, of an event on an organization.
The types of business impact are usually described as financial and non-financial and are further
divided into specific types
of impact.
Awareness - Answer: To create an understanding of basic business continuity issues and limitations.
This will enable staff to recognize threats and respond accordingly.
Critical function/processes - Answer: A critical function is a service, process, or business activity or a
collection of such, normally performed by a unit that must continue at a sufficient level without
interruption or restart within given timeframes after a disruption to the service.
Business continuity - Answer: An ongoing process to ensure that the necessary steps are taken to
identify the impact of potential losses and maintain viable recovery strategies, recovery plans, and
continuity of services.
Disaster recovery - Answer: The technical aspect of business continuity. The collection of resources
and activities to re-establish information technology services (including components such as
infrastructure, telecommunications, systems, applications and data) at an alternate site following a
disruption of IT services. Disaster recovery includes subsequent resumption and restoration of those
operations at a more permanent site.
Risk assessment - Answer: Process of identifying the risks to an organization, assessing the critical
functions necessary for an organization to continue business operations, defining the controls in
place to reduce organization exposure and evaluating the cost for such controls. Risk analysis often
involves an evaluation of the probabilities of a particular event.