Which of the following is the first step in the process for developing recovery strategies and solutions?

• A. Carrying out a gap analysis to determine needs
• B. Training personnel to carry out strategy determination activities
• C. Developing a Business Continuity policy
• D. Consulting relevant stakeholders on draft designs and proposals

When developing solutions for people strategies, solutions to recover activities with a short Recovery Time Objective (RTO) requiring redeployment of personnel should be supported by:

• A. Links to social media so the organization can run an extensive recruitment campaign both inside and outside the organization if a disruptive event occurs
• B. Recruitment of additional personnel so that the organization always has access to surplus staff in case of an incident occurring
• C. The development of training material including all relevant information and procedures so that this can be made available when required
• D. Induction and training by an operational manager at the time when the disruption is underway so that individuals can build understanding and confidence prior to commencing the allocated tasks

Why is a risk assessment usually conducted after a Business Impact Analysis (BIA) as part of the analysis stage?

• A. Conducting the risk assessment after the BIA has identified priorities enables the risk assessment to maximise investment in risk treatments where they are most needed
• B. Conducting a BIA ties up personnel on this project; so resources are not available to conduct the risk assessment until after personnel are released from the BIA project
• C. Risk assessments are not required until after the organization's business plan has been updated to confirm any changes in plans as a result of the BIA
• D. A risk assessment is not required until Business Continuity solutions based on the outcomes of the BIA have been developed for review

Which of the following explains the purpose of strategies and solutions in the context of Business Continuity (BC)?

• A. To ensure that the professionals involved in developing the strategy have appropriate levels of expertise
• B. To enable the organization to resume business operations within the approved continuity requirements
• C. To check how well the organization has carried out exercises to manage information restoration during a disruption
• D. To ensure that the organization's current procedures have sufficient clarity and accessibility to be effective during a disruption

Which of the following approaches can be used by the Business Continuity (BC) professional as part of a gap analysis to identify whether an organization's existing recovery capabilities meet the required Recovery Time Objectives (RTO)?

• A. Consideration of the health and safety risk assessments undertaken in the workplace
• B. Review of past exercises, tests and responses to actual disruptions that have taken place
• C. Competitor analysis to determine whether there are lessons that can be learned from alternative models
• D. Horizon scanning to assess any issues that may need to be taken on board in establishing comprehensive arrangements