Business Continuity & Resilience Flashcards
7 cards from real SSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity & Resilience flashcards as text
Which international standard specifically provides guidance for Business Continuity Management Systems (BCMS)?
Answer: ISO 22301
ISO 22301 is the international standard that specifies requirements for planning, implementing, maintaining, and improving a BCMS.
A BIA reveals that a customer billing system has an RPO of 4 hours. Which backup strategy best satisfies this requirement?
Answer: Continuous data replication or backups every 2 hours
To meet a 4-hour RPO, backups must occur at intervals shorter than 4 hours, making continuous replication or 2-hour backups the appropriate strategy.
What is the primary purpose of an Alternate Operating Facility (AOF) in a continuity of operations plan?
Answer: To provide a pre-identified location from which essential functions can be performed during a disruption
An AOF is a designated backup location where critical personnel and functions can operate when the primary facility is unavailable.
During recovery operations, a team discovers the documented recovery procedures are outdated and incomplete. What is the root cause failure this exposes?
Answer: Failure to maintain and regularly test the BCP
Outdated procedures indicate the BCP was not regularly reviewed, updated, and tested — a core maintenance failure in the continuity program lifecycle.
Which term describes the process of redistributing risk to a third party, such as through insurance or contractual agreements?
Answer: Risk transfer
Risk transfer shifts the financial or operational burden of a risk to another party, commonly through insurance policies or vendor contracts.
A security practitioner is developing a pandemic plan. Which continuity strategy is most critical to address in this scenario?
Answer: Remote work capability and workforce redundancy
Pandemics primarily affect personnel availability, making remote work capabilities and workforce redundancy the central continuity strategies.
In continuity planning, what does 'order of succession' refer to?
Answer: A pre-established hierarchy of individuals authorized to assume leadership roles if primary leaders are incapacitated
Order of succession designates who assumes authority and decision-making responsibility when key leaders are unavailable during a disruption.