Business Continuity Flashcards
7 cards from real CCISO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity flashcards as text
During a BC plan review, a CISO discovers that critical contact information for key vendors is outdated. This represents a failure in which BCP maintenance activity?
Answer: Plan maintenance and update procedures
Keeping contact lists, vendor information, and plan details current is a fundamental BCP maintenance responsibility that must be performed on a regular schedule.
What is the primary objective of crisis communications within a Business Continuity framework?
Answer: To ensure timely, accurate information reaches all stakeholders during a disruption
Effective crisis communications ensure employees, customers, regulators, and partners receive consistent and accurate information to maintain trust and coordinate response.
A CISO is designing a BC strategy for a cloud-based SaaS application. Which recovery approach best aligns with a very low RTO requirement?
Answer: Multi-region active-active deployment with automated failover
Multi-region active-active deployments with automated failover achieve the lowest possible RTO by eliminating manual intervention and maintaining live redundant capacity.
Which of the following is an example of a preventive BC control rather than a recovery BC control?
Answer: Installing uninterruptible power supplies (UPS) to prevent power outages
A UPS is a preventive control that avoids downtime by maintaining power during outages, preventing a disruption from occurring in the first place.
An organization's BCP requires restoring operations within 4 hours but the BIA identified an MTD of 6 hours. Which statement is correct?
Answer: The RTO is within the MTD, providing an acceptable recovery buffer
When the RTO (4 hours) is less than the MTD (6 hours), the organization can restore operations before irreversible harm occurs, which is the desired BC posture.
Which BC element addresses how the organization will manage communications with media and the public during a major disruption?
Answer: Public Relations and Media Communications Plan
A Public Relations and Media Communications Plan provides pre-approved messaging, spokesperson assignments, and protocols for managing external communications during a crisis.
After restoring operations at an alternate site following a disaster, what is the final phase of the BC process?
Answer: Conducting a post-incident review and returning to normal operations
The final BCP phase involves a structured return to normal operations at the primary site, followed by a post-incident review (lessons learned) to improve the plan.