Question No 1

Analysing information about how an organization has responded to incidents, including engagement with those impacted and its approach to responsibility, can provide insight into the organization's

Choose the Choices:

Question No 2

Which of the following is a way to ensure that personnel remain committed to Business Continuity and to protecting the organization from the effects of disruption?

Choose the Choices:

Holding annual assessments of Business Continuity knowledge and understanding and setting minimum pass standards which personnel must meet

Making it a disciplinary offence for personnel to miss relevant Business Continuity meetings and training events

Including Business Continuity as part of the introduction to meetings and events in order to strengthen and maintain the relationship between personnel and the organization

Providing updates on Business Continuity activities via the intranet which personnel can find and read if they are interested

Question No 3

One of the steps in the risk management process is to establish the risk treatment required. The purpose of risk treatment is to

Choose the Choices:

Ensure that a named person within the organization takes responsibility for the monitoring and management of the risk

Calculate a risk score based on the combination of the likelihood of the risk occurring and the consequences of this happening

Mitigate each risk identified by reducing the likelihood of the risk occurring or by lowering the impact of disruption

Ensure that regular updates on the current status of the risk are presented to top management

Question No 4

Which of the following is correct in relation to simulation exercises?

Choose the Choices:

Simulation exercises involve only key participants rather than all personnel that could be involved in a real incident

Simulation exercises are always discussion - based

Participants are provided with the full detail of the scenario prior to the exercise commencing, including any information and materials on issues that will arise during the scenario so they can be fully prepared

There are no time constraints as the exercise is not running in real time so participants can take time to discuss issues that arise and alternative ways to address them

Question No 5

The organization's requirements for information and data resources should be considered as part of the Activity Business Impact Analysis (BIA). Which of the following is correct in relation to the Recovery Point Objective (RPO)?

Choose the Choices:

All data users and activities have the same requirements; so only limited consultation is required to determine the RPO

The RPO should comply with data protection requirements

The RPO is the point to which information must be restored to enable all priority activities to operate on resumption

The RPO establishes the amount of time that IT services can be disrupted before the organization is impacted

Practice BCI CBCI Exam Questions

Question No 1

Question No 2

Question No 3

Question No 4

Question No 5

CBCI Exam Features

CBCI PDF Dumps