BCM Program Governance & Compliance Flashcards
6 cards from real BCM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 BCM Program Governance & Compliance flashcards as text
Which international standard provides the most widely recognized framework for Business Continuity Management Systems?
Answer: ISO 22301
ISO 22301 is the international standard specifically designed for Business Continuity Management Systems.
What is the primary role of a BCM governance committee?
Answer: Providing oversight, policy direction, and accountability for BCM activities
A BCM governance committee provides strategic oversight, sets policy direction, and ensures organizational accountability for the BCM program.
Which regulatory requirement most commonly drives US financial institutions to maintain formal BCM programs?
Answer: FFIEC IT Examination Handbooks
The FFIEC IT Examination Handbooks provide comprehensive BCM guidance and compliance expectations for US financial institutions.
What does a BCM policy statement primarily define?
Answer: Organizational commitment, scope, objectives, and roles for the BCM program
A BCM policy statement defines the organization's commitment, scope, objectives, and high-level roles and responsibilities for the program.
In the context of BCM compliance audits, what is a 'gap analysis'?
Answer: A comparison of current BCM practices against a target standard to identify deficiencies
A gap analysis compares the organization's current BCM state against a target standard or framework to identify areas requiring improvement.
Which concept ensures that BCM responsibilities are clearly assigned and no single person controls all aspects of a critical BCM process?
Answer: Segregation of duties
Segregation of duties ensures that no single individual controls all aspects of a critical process, reducing risk and ensuring accountability.