Important BCI CBCI Exam Questions

Answer: A

Explanation:

An effective BC policy is a high-level statement of intent and direction, formally expressed and endorsed by top management. Its effectiveness depends on visible leadership commitment---because leadership is responsible for ensuring the policy aligns with the organization's strategic direction, is communicated, resourced, and kept under review for suitability. In BCI guidance, establishing the business continuity policy specifically requires top management action, support, and commitment, with governance to maintain and improve the policy over time.

Option A best reflects this core characteristic: top management commitment and continual improvement. The other options describe items that are typically handled in plans or supporting documents (e.g., incident management plan details, budget specifics, supplier constraints, or exercise lessons learned). Those elements may inform the BCMS, but they do not define what a BC policy is. The policy sets the framework and expectations; detailed procedures, constraints, and exercise learnings are managed elsewhere within the BCMS lifecycle.

Answer: B

Explanation:

Enabling Solutions (PP5) is where agreed continuity solutions are made usable through response structures and plans---this includes defining how communications will work during disruption. Effective external communications procedures must be role-based and controlled: they should identify who is authorized to communicate, through which channels, and with what approvals---so messages are accurate, timely, and consistent. Option B reflects that good practice: naming the team/group/individual with the required responsibility, authority, and technical capability for each method (e.g., media statement, website updates, customer notifications, hotline, social media).

Option A is dangerous because it decentralizes messaging and increases the risk of conflicting or inaccurate public information. Option C is unrealistic---stakeholders often need updates during the incident (customers, suppliers, regulators, media), not after it ends. Option D removes governance and can create reputational and legal risk; crisis communications normally follow agreed principles, escalation, and approvals, with top management involved in high-impact messaging. Therefore, B is the correct procedural inclusion for communicating outside the organization during disruption

.

Answer: B

Explanation:

The BCI GPG 7.0 (Lite) explicitly defines Recovery Time Objective (RTO) as: ''The time frame within the MTPD for resuming disrupted activities at a specified minimum acceptable capacity.'' This matches option B exactly and aligns with ISO-aligned BC terminology used in CBCI 7.0. The key elements are:

Time-based target (how quickly),

Within the MTPD (before impacts become unacceptable), and

Minimum acceptable capacity (not necessarily full restoration---often a Minimum Business Continuity Objective level first).

Option A incorrectly frames RTO as a ''suspension'' period; RTO is a resumption target. Option C is closer to a general ''downtime'' description but still misses the formal link to MTPD and specified minimum capacity. Option D describes full recovery/return to normal, which is usually a later target than the RTO (many organizations resume at a minimum level first, then restore fully).

Answer: C

Explanation:

In CBCI / BCI Good Practice Guidelines (GPG) Edition 7.0, Embracing Business Continuity (PP2) is centred on strengthening business continuity culture by building genuine understanding and commitment across the organization---not just ''policy compliance.'' A practical starting point is learning how the organization thinks and behaves: its purpose, priorities, values, and the way it communicates internally and externally. Mission statements and annual reports typically explain organizational purpose, strategic intent, and leadership messaging; newsletters and corporate social media often reveal behaviours, tone, informal norms, and what the organization chooses to celebrate or emphasise. This helps the BC professional understand the ''mindset of an organization'' and where the BC culture currently sits, which is necessary before influencing and improving it.

This aligns with the GPG/ISO view of organizational culture as the shared values, attitudes, and behaviours shaping the social and psychological environment in which the organization operates.

Answer: C

Explanation:

The CBCI 7.0 course identifies gaining an understanding of the organization's culture as a foundational step in moving from merely embedding Business Continuity practices to fully embracing them. Cultural insights enable targeted interventions that align Business Continuity with existing values, beliefs, and behaviours, enhancing engagement and ownership. Policies and role assignments are important but less effective without cultural alignment. Outsourcing continuity as a project risks detachment from organizational realities. Understanding culture guides effective communication, training, and leadership strategies that foster a pervasive continuity mindset.