Testing, Exercising, and Maintenance of BCP Flashcards
6 cards from real DRI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Testing, Exercising, and Maintenance of BCP flashcards as text
What is 'exercise program design' and what elements should it include?
Answer: A multi-year exercise calendar with progressive complexity, covering all critical plan elements, aligning with regulatory requirements, and building organizational capability
Exercise program design encompasses the multi-year strategy for building organizational resilience capability—a progressive calendar with increasing complexity, coverage of all critical plan elements, regulatory alignment, and capability-building objectives.
What is the 'Hotwash' (immediate debrief) in exercise methodology and when is it conducted?
Answer: An immediate, informal debrief conducted right after an exercise ends while observations and reactions are fresh
A Hotwash is an immediate informal debrief conducted at the conclusion of an exercise—while observations, reactions, and experiences are fresh—to capture immediate impressions, identify key themes, and acknowledge participant contributions before participants disperse.
What is 'exercise scenario development' and why must scenarios be carefully constructed?
Answer: The design of realistic, plausible incident scenarios that achieve defined exercise objectives, challenge participants appropriately, and avoid compromising production systems
Exercise scenario development creates realistic, plausible scenarios that are carefully calibrated to achieve defined learning objectives, challenge participants at the appropriate level, and avoid scenarios so extreme they are not credible or so specific they create legal exposure.
What is 'capability assessment' in business continuity program evaluation?
Answer: A structured evaluation of the organization's current business continuity capabilities against defined maturity standards to identify gaps and prioritize improvements
Capability assessment evaluates the organization's current business continuity capabilities against defined maturity standards or competency frameworks, identifying gaps between current and target states to prioritize program investments and improvements.
According to DRI professional practices, what is the recommended minimum frequency for conducting a full-scale business continuity exercise?
Answer: At least annually, with additional exercises following significant changes or incidents
DRI professional practices recommend that organizations conduct exercises at least annually at each level of the exercise program, with additional exercises triggered by significant organizational changes, incidents, or lessons learned—annual being the minimum acceptable frequency.
What is 'program audit' in business continuity management and how does it differ from an exercise?
Answer: An audit objectively evaluates whether the BCM program conforms to policy, standards, and requirements; an exercise tests whether plans work under simulated conditions
Audits evaluate program conformance to defined standards and requirements through evidence examination; exercises test operational effectiveness under simulated conditions. Both are essential; neither substitutes for the other.