Bcm Final

Front 1

Who should routinely check on the controls and effectiveness of information security?

Back 1

Internal auditors, or CIO

Front 2

What is the most critical step in performing an information security audit?

Back 2

Establishing a criteria

Front 3

What is the ultimate goal of systems managers in providing information security?

Back 3

To harden them

Front 4

What should systems managers do to insure that periodic software modifications don’t create information security problems?

Back 4

Change management process

Front 5

How can administrators insure that data bases are secure, available, and resilient?

Back 5

Back it up

Front 6

What kind of network can be used instead of or in conjunction with the internet, to provide better information security within an organization?

Back 6

VPN (Virtual private network)

Front 7

What is the biggest information security threat created by the use of electronic social networks such as Facebook?

Back 7

Identity theft

Front 8

When is emergency response conducted?

Back 8

When there is an emergency

Front 9

What is the term used for an extreme disaster?

Back 9

catastrophe

Front 10

During a crisis, where do emergency response teams (ERT’s) gather to execute the emergency response plan (ERP)?

Back 10

EOC (Emergency Operations Center)

Front 11

Who is overall in charge of implementing the emergency response plan?

Back 11

Incident Commander

Front 12

Who is responsible for notification and dispensing necessary information to appropriate individuals and organizations during a crisis?

Back 12

Single Point of Contact

Front 13

Which federal agency, part of the US Department of Homeland Security, is responsible for disaster mitigation and response?

Back 13

FEMA (Federal Emergency Management Agency)

Front 14

What is the name of the federal plan that establishes a national framework to coordinate federal, state, local, and non-governmental entities during crises?

Back 14

NIMS (National Incident Management System)

Front 15

How important is coordination with external agencies, if Business Continuity Management is to be successful?

Back 15

Essential

Front 16

During which of the 7 phases of emergency management should relationship building with external agencies be conducted?

Back 16

All of them

Front 17

What is often the best time for an organization to work with external agencies to improve emergency response planning?

Back 17

Immediately (ASAP)

Front 18

What is the most important benefit that response agencies gain from coordinating with private sector organizations?

Back 18

information

Front 19

To what extent should an organization’s Business Continuity Plan be compliant with the National Incident Management System?

Back 19

As much as possible

Front 20

What is the name of local volunteer groups nationwide who assist emergency management personnel before, during, and after disasters?

Back 20

Community Emergency Response Team (CERT)

Front 21

Which organization is historically the most effective NGO in assisting with disaster response and recovery operations?

Back 21

Red Cross

Front 22

What is the relationship between the business continuity plan (BCP) and the business impact analysis (BIA)?

Back 22

Integrated

Front 23

Which BCP team is responsible for the immediate reaction to a crisis?

Back 23

Emergency Response Team

Front 24

Which BCP team has overall responsibility for dealing with a major crisis?

Back 24

Crisis Management Team

Front 25

In a crisis, which department coordinates with the organization’s insurers?

Back 25

Finance Department

Front 26

During a disaster, which department maintains contact with clients and prospective customers?

Back 26

Marketing Department

Front 27

In a crisis, which department implements the use of alternate computer sites?

Back 27

Information Technology Department (IT)

Front 28

In a crisis, which department stays in contact with all employees?

Back 28

Human Resources (HR)

Front 29

Why should a crisis communication plan have a single point of contact for information provided to the media?

Back 29

Avoid confusion (conflicting reports)

Front 30

In dealing with the media, how detailed should responses be?

Back 30

Simple

Front 31

In dealing with the media, what is the role of honesty? Placing blame?

Back 31

Always be honest, NEVER place blame

Front 32

In dealing with the media, when should questions be avoided? When should “no comment” be the spokesperson’s response?

Back 32

NEVER avoid questions, NEVER use “no comment”

Front 33

When should matters be discussed “off the record”?

Back 33

NEVER

Front 34

What is the biggest problem in using electronic networks to maintain crisis communications?

Back 34

Power Goes Down

Front 35

What is the most important new electronic network tool available for use in crisis communications?

Back 35

Social Media

Front 36

What is the degree of reliability of most information received by crisis management personnel during an emergency?

Back 36

Bad

Front 37

Post-crisis analysis of data collected during a crisis can help identify what items of value?

Back 37

Trends or Patterns (Commonalities)

Front 38

Crisis management personnel use a crisis information management system to analyze the totality of the event. This enables emergency staff to maintain what kind of awareness?

Back 38

Situational Awareness

Front 39

A crisis information management system can enhance a community’s disaster preparedness by providing what kind of information before and during an emergency?

Back 39

Early Warning

Front 40

One type of recovery tool is a database that matches sources of humanitarian aid with WHAT?

Back 40

Needs

Front 41

A modern development is to collect data about a crisis by soliciting inputs from people at the scene of the disaster. What is the name of this technique?

Back 41

Crowd Sourcing

Front 42

What is the biggest challenge/potential problem with crisis information collected from unknown sources?

Back 42

Can't rely on it

Front 43

Which employees should be made aware of the organization’s business continuity management plan?

Back 43

All of them

Front 44

What is the role of senior management in achieving an organization’s goals in business continuity management?

Back 44

Provide full support

Front 45

What is the most important benefit that can result from testing and exercising a business continuity management plan?

Back 45

Finding flaws

Front 46

Which of the different types of plan exercises is the most commonly conducted?

Back 46

Tabletops

Front 47

How often should a business continuity plan exercise be conducted?

Back 47

Annually

Front 48

Normally what should an organization’s employees be told about an upcoming business continuity plan exercise?

Back 48

Know day & time

Front 49

When should an organization’s business continuity plan be updated?

Back 49

Continuously