Business Continuity & Resilience Flashcards
7 cards from real SSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity & Resilience flashcards as text
Under NIST SP 800-34, what is the correct sequence for developing a Contingency Plan?
Answer: BIA → Identify Preventive Controls → Develop Strategies → Plan Development → Training → Testing → Maintenance
NIST SP 800-34 prescribes a seven-step process beginning with the BIA, followed by preventive controls, strategy development, plan writing, training, testing, and maintenance.
A retail company's BCP includes a workaround for processing sales transactions manually when the POS system fails. This workaround is an example of:
Answer: A manual fallback or degraded mode procedure
Manual fallback procedures allow essential operations to continue in a degraded capacity when automated systems are unavailable.
Which stakeholder group is MOST critical to include during the initial Business Impact Analysis (BIA) interview process?
Answer: Process owners and department managers who understand operational dependencies
Process owners and department managers have direct knowledge of which functions are critical, their interdependencies, and the impact of their loss.
An organization activates its BCP but recovery efforts are slowed because staff are unfamiliar with their assigned roles. Which program element failed?
Answer: Training and awareness program
If personnel do not know their roles during activation, the training and awareness component of the BCP program has not been adequately implemented.
What distinguishes a 'resilience' approach from a traditional 'recovery' approach in business continuity?
Answer: Resilience builds organizational capacity to absorb disruptions and adapt, while recovery focuses on restoring previous state after failure
Resilience is a broader capability encompassing anticipation, absorption, adaptation, and transformation, whereas recovery narrowly addresses restoring prior state post-incident.
A supply chain disruption prevents a manufacturer from obtaining critical components. Which BCP strategy specifically addresses this scenario?
Answer: Pre-qualifying substitute suppliers and maintaining safety stock inventory
Pre-qualifying alternate suppliers and holding safety stock are supply chain resilience strategies that mitigate the impact of a single-source disruption.
Which document type formally authorizes continuity plan activation and identifies the conditions or thresholds that trigger plan execution?
Answer: Plan Activation Criteria and Authority Matrix
The Plan Activation Criteria and Authority Matrix defines who has authority to activate the BCP and specifies the measurable thresholds that trigger activation.