CRA Business Continuity and Resilience Planning 1 — Questions and Answers
Question 1: What is the primary purpose of a Business Impact Analysis (BIA)?
- To conduct a financial statement audit
- To identify critical business functions and quantify the impact of their disruption (Correct answer)
- To evaluate the effectiveness of marketing campaigns
- To assess employee job satisfaction levels
Correct answer: To identify critical business functions and quantify the impact of their disruption
A BIA identifies which business processes are critical, quantifies disruption impacts, and informs recovery time and point objectives.
Question 2: What does Recovery Time Objective (RTO) define in business continuity planning?
- The total budget allocated for recovery operations
- The maximum acceptable time to restore a business function after a disruption (Correct answer)
- The minimum number of staff required for recovery operations
- The maximum allowable distance to a backup facility
Correct answer: The maximum acceptable time to restore a business function after a disruption
RTO is the maximum tolerable downtime for a critical business function, defining how quickly it must be restored to avoid unacceptable consequences.
Question 3: What does Recovery Point Objective (RPO) represent in business continuity?
- The ceiling on total recovery spending
- The maximum acceptable amount of data loss measured in time (Correct answer)
- The minimum number of data backup copies required
- The geographic location of the primary recovery facility
Correct answer: The maximum acceptable amount of data loss measured in time
RPO defines the maximum tolerable data loss, representing how far back in time data can be restored from backups in a recovery scenario.
Question 4: What is the primary purpose of a Business Continuity Plan (BCP)?
- To eliminate all possible risks to the organization
- To ensure critical business functions can continue during and after a disruption (Correct answer)
- To provide documentation required for insurance claims
- To record and archive all past disruption incidents
Correct answer: To ensure critical business functions can continue during and after a disruption
A BCP provides documented procedures enabling an organization to maintain or quickly resume critical functions during a disruption.
Question 5: What is the primary responsibility of a Crisis Management Team (CMT)?
- To market products and services during a business crisis
- To direct and coordinate the organization's strategic response to a major incident (Correct answer)
- To process all insurance claims resulting from a crisis
- To manage media subscription renewals during incidents
Correct answer: To direct and coordinate the organization's strategic response to a major incident
The Crisis Management Team coordinates the overall organizational response to a crisis, making strategic decisions to protect people, assets, and reputation.
Question 6: What is the key distinction between business continuity and disaster recovery?
- They are identical disciplines with different names
- Business continuity addresses maintaining all operations broadly; disaster recovery focuses specifically on restoring IT systems (Correct answer)
- Disaster recovery has broader scope than business continuity
- Business continuity only applies to regulated financial firms
Correct answer: Business continuity addresses maintaining all operations broadly; disaster recovery focuses specifically on restoring IT systems
Business continuity encompasses maintaining all critical business functions during a disruption, while disaster recovery specifically addresses restoring IT systems and data.
CRA Business Continuity and Resilience Planning 1
What is the primary purpose of a Business Impact Analysis (BIA)?