[UPDATED 2026] Read CBCI Study Guide Cover to Cover as Literally
100% Real & Accurate CBCI Questions and Answers with Free and Fast Updates
BCI CBCI Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 87
The role of a spokesperson for an organization during an incident includes:
- A. Advising top management on lines to take
- B. Supporting the operational team in developing communications for social media
- C. Representing the organization at post-incident reviews with regulators
- D. Representing the organization at press conferences
Answer: D
Explanation:
Within PP5 (Enabling Solutions), communications arrangements are enabled through defined roles, procedures, and coordination mechanisms so messaging is timely, accurate, and controlled during an incident. A designated spokesperson is a core crisis-communications role because they provide the public-facing "voice" of the organization and personify the response to external audiences. The CDC's Crisis & Emergency Risk Communication guidance describes the designated spokesperson as critical in a crisis and emphasizes that the spokesperson embodies the organization's response for various audiences.
That aligns directly with option C: representing the organization at press conferences (and similar media interactions). Option A can be performed by communications advisors, but it is not the defining duty of the spokesperson role itself. Option B (writing social media for operational teams) is typically handled by communications staff under the communications lead, not necessarily the spokesperson. Option D (regulator post-incident reviews) is usually led by accountable executives, legal/compliance, and incident owners; the spokesperson may support, but it is not the primary spokesperson duty described in crisis-communications guidance.
NEW QUESTION # 88
Which of the following is NOT an activity that is undertaken as part of the governance of the Business Continuity Management System (BCMS)?
- A. Ensuring that the BCMS meets any related regulatory requirements
- B. Supporting continual improvement to the BCMS
- C. Carrying out specific operational activities relevant to BCMS priorities
- D. Monitoring and evaluating the performance of the BCMS
Answer: C
NEW QUESTION # 89
When carrying out the Business Impact Analysis (BIA) process, the Business Continuity professional should use a consistent approach to determine priorities of products, services, and activities. Which of the following is a method that could be used?
- A. A risk assessment matrix
- B. Pre-defined impact thresholds
- C. A standardized risk rating table
- D. A gap analysis
Answer: B
Explanation:
The CBCI 7.0 course details that using pre-defined impact thresholds is an effective and consistent method for prioritizing products, services, and activities during a BIA. These thresholds establish clear criteria for impact levels across various categories, such as financial loss, reputational damage, and regulatory consequences. By applying standardized thresholds, organizations can objectively assess and compare the criticality of different business functions, ensuring that prioritization aligns with organizational risk appetite and strategic objectives. This approach promotes consistency, transparency, and repeatability in BIA processes. While risk matrices and gap analyses are useful tools in risk management, pre-defined impact thresholds directly guide priority-setting within BIAs.
NEW QUESTION # 90
Which of the following would NOT be included in plans at all levels?
- A. Risk assessments for each possible scenario
- B. Guidance for escalation
- C. Procedures for standing down the teams when the incident has been resolved
- D. Purpose, scope, assumptions and objectives of the plan
Answer: A
Explanation:
Plans at different levels (strategic, tactical, operational) typically share common foundational elements: a clear purpose and scope, key assumptions, and objectives (C), so users understand when and how to apply the plan. They also usually include escalation guidance (A) so issues are raised to the right level quickly, and stand-down/transition procedures (D) so teams can safely return to normal operations and capture learning after resolution. These elements support coordinated response across the response structure.
However, risk assessments for each possible scenario (B) would not be included "at all levels" of plans. Risk assessment is a distinct analysis activity, and while plans may reference key threats or assumptions, they are generally not built as scenario-by-scenario risk assessment catalogues-especially not across every plan level. The BCI distinguishes BIA (impact over time) and Risk Assessment (risks to prioritised activities) as analysis techniques; plans then enable execution of the chosen solutions and response arrangements.
So, risk assessments may inform plans, but they are not a universal content component at every plan level. Therefore B is correct.
NEW QUESTION # 91
When developing a system to measure Business Continuity culture, it is important to take into account:
- A. The need to present the outcomes in a positive way for top management and stakeholders
- B. How to ensure that all personnel are required to respond to the process
- C. The aims of the activity and how the information will be collected and assessed
- D. The way that the outcomes will inform the design of Business Continuity solutions
Answer: C
Explanation:
According to the CBCI 7.0 course, the primary consideration when developing a system to measure Business Continuity culture is to clearly define the objectives of the measurement activity and establish robust methods for collecting and analyzing relevant data. This includes deciding what aspects of culture to assess (e.g., awareness, attitudes, behaviours), selecting appropriate tools (surveys, interviews, observation), and determining assessment frequency. Accurate data collection and analysis provide meaningful insights that drive improvements and validate cultural initiatives. Presentation style and participation mandates are important but secondary to the integrity and clarity of the measurement process itself.
NEW QUESTION # 92
Strategies to resume business operations following a disruption are based on the outcomes of the:
- A. Analysis of Maximum Tolerable Period of Disruption (MTPD) and Recovery Time Objectives (RTO)
- B. Negotiations with stakeholders regarding their minimum requirements in a disruption
- C. Governance structures established for the Business Continuity Management System (BCMS)
- D. Collaborations generated by the organization's Business Continuity culture
Answer: A
Explanation:
The CBCI 7.0 course clarifies thatstrategies for resuming operationsare developed primarily based on the analysis of the Maximum Tolerable Period of Disruption (MTPD) and the Recovery Time Objectives (RTO).
The MTPD defines the maximum duration an activity can be disrupted before causing intolerable impact, while the RTO sets the target time to restore that activity. These recovery parameters provide clear, measurable goals for strategy development, ensuring continuity efforts focus on minimizing downtime and impact. Although stakeholder input and organizational culture influence strategy implementation, the technical parameters of MTPD and RTO form the foundational basis for solutions.
Reference:CBCI 7.0 Study Guide, Module 3: Recovery Objectives, pages 56-59.
NEW QUESTION # 93
In order to ensure that priority is given to activities with the shortest Recovery Time Objectives (RTOs), strategies can:
- A. Include relevant extracts from the Business Impact Analysis (BIA)
- B. Include a risk assessment to identify the best treatment option
- C. Identify workarounds for all activities other than those with short RTOs
- D. Highlight activities with short RTOs by categorising strategies by timeframe
Answer: D
Explanation:
The CBCI 7.0 course highlights that categorizing strategies by timeframe is an effective method to ensure focus on activities with short RTOs. This approach visually and operationally segments recovery strategies, allowing the organization to prioritize resources and actions that address the most time-critical functions first. Including BIA extracts supports understanding but is insufficient on its own. Risk assessments inform treatment choices but do not inherently prioritize by RTO. Workarounds for non-priority activities are useful but are a secondary measure after prioritization. Categorizing by recovery time frames aligns operational focus with impact tolerances.
NEW QUESTION # 94
Which of the following is a step that would be taken by the Business Continuity professional to support the process to advance an organization from embedding to embracing Business Continuity?
- A. Gaining an understanding of the organization's culture
- B. Including funding in the Business Continuity budget to hire a consulting firm to run Business Continuity as a project
- C. Assigning Business Continuity roles and responsibilities across the organization's hierarchy
- D. Development and adoption of a Business Continuity policy to protect the organization from disruptions
Answer: A
Explanation:
The CBCI 7.0 course identifies gaining an understanding of the organization's culture as a foundational step in moving from merely embedding Business Continuity practices to fully embracing them. Cultural insights enable targeted interventions that align Business Continuity with existing values, beliefs, and behaviours, enhancing engagement and ownership. Policies and role assignments are important but less effective without cultural alignment. Outsourcing continuity as a project risks detachment from organizational realities. Understanding culture guides effective communication, training, and leadership strategies that foster a pervasive continuity mindset.
NEW QUESTION # 95
Which of the following solutions in the context of building and work environment resources would support a strategy of relocating operations to another work area belonging to the organization should an incident occur?
- A. Re-purpose work areas and facilities to enable working arrangements for organization personnel during a disruption
- B. Contract former employees and contractors to undertake work at the replacement during a disruption
- C. Advise personnel that they will have to work around the existing workstations and equipment in the alternative site as it will be an emergency situation
- D. Create a separate supply chain to support the alternative site in the case of an incident occurring
Answer: A
Explanation:
The CBCI 7.0 course outlines that a key solution to support relocation strategies involvesre-purposing existing work areas and facilitiesto accommodate essential personnel and functions during disruptions. This may involve modifying spaces, reallocating equipment, or adapting layouts to maintain operations efficiently.
Such pre-planning ensures that the organization can resume activities quickly and safely. Contracting former employees or creating separate supply chains may assist but are secondary to establishing viable physical environments. Expecting personnel to adapt to unprepared facilities risks inefficiency and morale issues.
Proactive adaptation of workspace is a cornerstone of effective relocation strategies.
Reference:CBCI 7.0 Study Guide, Module 5: Solutions Design, pages 90-92.
NEW QUESTION # 96
As part of the preparation for responding to an incident, plans should be in place to enable the response team to meet. Which of the following is NOT correct in relation to arrangements for meeting facilities?
- A. Meetings must always take place in a physical rather than virtual location
- B. Meeting arrangements should be stated in plans that are made available to all team members
- C. A continuously available and stable power supply should be available to meeting locations
- D. At least two meeting locations should be stated with the team leader deciding which to use at the time of the incident
Answer: A
Explanation:
The CBCI 7.0 course explains that flexibility in meeting arrangements is critical for effective response.
Requiring meetings to always occur physically is impractical, especially in disruptions impacting facilities or when personnel are remote. Virtual meeting capabilities have become essential, allowing teams to convene despite physical constraints. Plans should specify multiple meeting options (physical and virtual) and include contingencies like stable power and connectivity. Stating arrangements and empowering leaders to select locations supports responsiveness and operational continuity.
Reference:CBCI 7.0 Study Guide, Module 2: Response Planning, pages 79-81.
NEW QUESTION # 97
In which of the following situations would an organization conduct a Business Impact Analysis (BIA) at a high level and then use the outcomes to develop more detailed BIAs and to clarify the scope of the Business Continuity Management System (BCMS)?
- A. Where there is a lack of top management support for Business Continuity (BC)
- B. Where the organization is experiencing rapid growth
- C. Where the organization has been through structural changes since the previous BIA
- D. Where the organization is conducting an initial BIA
Answer: D
Explanation:
When an organization is doing its first BIA, it is common (and practical) to start at a high level-typically with products and services-so leadership can confirm what matters most, validate boundaries, and use that prioritisation to guide deeper analysis. This approach helps the organization clarify BCMS scope and avoid spending time creating detailed activity/process BIAs for areas that turn out not to be priority or even in-scope. This aligns with PP3 Analysis thinking: BIA outputs are used to set priorities and requirements that then drive later stages and deeper work.
Option D (structural changes since the previous BIA) would likely trigger a review and update, but the "high level then drill down to clarify scope" pattern is most strongly associated with an initial BIA where the organization is still establishing understanding and scoping boundaries. Rapid growth (A) can trigger refresh, but it doesn't inherently imply the "start high-level then build detailed BIAs" sequence. Lack of top management support (C) is a governance/culture issue, not a BIA sequencing rationale. Therefore, B is the best match.
NEW QUESTION # 98
Which of the following could the Business Continuity professional use to explain how embracing Business Continuity could add value to the organization?
- A. It will enable senior managers to delegate their responsibilities to team members as personnel will be willing to take on additional accountabilities leaving senior managers free to develop new products and services
- B. It increases competitive advantage by increasing the ability of the organization to remain operational in the face of a disruption
- C. It will increase health and safety standards in the organization by reducing stress levels as personnel do not need to be concerned during disruptions
- D. It will resolve all conflicts between personnel and departments in the organization as personnel will re- focus their priorities to shared Business Continuity activities
Answer: B
Explanation:
The CBCI 7.0 course stresses thatembracing Business Continuity adds value primarily by enhancing organizational resilience, which translates into a competitive advantage. Being able to maintain operations during disruptions preserves customer confidence, safeguards revenue, and protects reputation. While improved health and safety and conflict resolution are indirect benefits, they are not the primary value drivers.
Delegating responsibilities effectively supports continuity but does not capture the strategic benefit.
Communicating resilience as a competitive edge helps secure leadership buy-in and resource allocation for continuity initiatives.
Reference:CBCI 7.0 Study Guide, Module 4: Business Continuity Culture and Value, pages 66-69.
NEW QUESTION # 99
Recording and counting the number of hours spent by personnel in participating in Business Continuity (BC) training is a way for the BC professional to measure the:
- A. Reduction in risks related to Business Continuity (BC)
- B. Effectiveness of the People and Culture department
- C. Amount of knowledge and understanding that individuals have gained through their study
- D. Business continuity culture in an organization
Answer: D
Explanation:
Counting training hours is a participation/engagement metric. It tells you whether people are showing up and investing time in BC learning and awareness activities, which is one indicator (among many) of the organization's BC culture-i.e., whether BC is being taken seriously and embedded into normal organizational behaviour. GPG 7.0's shift toward Embracing Business Continuity highlights improving culture through awareness and engagement across the organization, rather than relying only on compliance enforcement.
Importantly, training hours do not directly measure learning outcomes (B). Someone can spend hours in training without gaining (or retaining) the required understanding; you would need assessments, exercises, observation of behaviour, or performance evidence to confirm learning. Similarly, training hours do not prove risk reduction (D); reduced risk is typically evidenced through improved controls, fewer single points of failure, better recovery performance, and validated capability.
Therefore, the best interpretation is that training hours are a proxy measure supporting evaluation of BC culture/engagement, making A the correct answer.
NEW QUESTION # 100
Which of the following is a factor to be taken into consideration when developing and using risk assessments?
- A. The time that has elapsed since the last assessment of risks in order to maintain its currency
- B. Risk assessments are primarily produced as information for regulators and auditors to provide evidence that the organization is monitoring and managing risks
- C. Risk assessments will need to work undertaken during the Business Impact Analysis (BIA) to determine the products, services, and activities that need to be
- D. Risk assessments are based on estimations of the likelihood and consequences of a risk occurring
Answer: D
Explanation:
The CBCI 7.0 course explains that risk assessments fundamentally rely on evaluating the likelihood of risk occurrence and the consequences if they materialize. This probabilistic approach enables prioritization and treatment planning. Although risk assessments inform BIAs and regulatory compliance, their primary purpose is to analyze potential risks in terms of impact and probability to guide effective continuity strategies. Currency (timeliness) is important but secondary to the quality of likelihood and consequence evaluations, which form the basis of all risk decisions.
NEW QUESTION # 101
Which of the following is an outcome of a situation where top management embraces Business Continuity (BC)?
- A. Business continuity training and awareness initiatives are promoted across the organization
- B. The Business Continuity Management System (BCMS) is independent from organizational objectives
- C. Reviews of BC performance are carried out if time permits and follow-up actions are phased in slowly to minimise disruption to existing priorities
- D. Personnel do not embrace Business Continuity (BC)
Answer: A
Explanation:
CBCI 7.0 expects visible leadership commitment because BCMS success depends on senior sponsorship, resourcing, and consistent messaging. When top management embraces BC, they actively support awareness, training, and engagement so BC becomes understood beyond the small group formally involved in the BCMS. The BCI's PP2 guidance highlights that embracing business continuity is a process of education and awareness-reminding staff what is at stake and who depends on the organization's products and services. Leaders who embrace BC amplify this through promoting awareness and training across the workforce.
Option A contradicts good practice: a BCMS should be aligned to organizational purpose and objectives, not independent. Option C is the opposite of the expected outcome. Option D describes weak governance-reviews only "if time permits" and slow follow-up-whereas leadership embrace typically strengthens governance cadence and improvement discipline. Therefore, B is the correct outcome.
NEW QUESTION # 102
When establishing governance for a Business Continuity Management System (BCMS), which of the following will be responsible for developing and communicating the Business Continuity policy and for promoting a Business Continuity culture by leading by example?
- A. Departmental Representatives
- B. Top Management
- C. Business Continuity Plan Owners
- D. Business Continuity Professional
Answer: B
Explanation:
Top management holds the ultimate responsibility for developing and endorsing the Business Continuity policy and fostering a culture of continuity within the organization. The CBCI 7.0 course emphasizes that leadership commitment is crucial for the BCMS's success, as top management's active involvement sets expectations, allocates resources, and leads by example. Their role extends beyond policy approval to include visible support and communication to embed Business Continuity values across all levels. Other roles such as plan owners and professionals support implementation but do not carry this overarching governance responsibility.
Reference:CBCI 7.0 Study Guide, Module 1: Governance and Leadership, pages 22-26.
NEW QUESTION # 103
Which of the following is NOT a way in which an organization can use exercise programs to ensure and validate supply chain continuity?
- A. By conducting internal exercises to assess the impact of supply chain failures
- B. By including key suppliers in an internal exercise
- C. By requiring suppliers to share evidence that recovery plans and exercise programs have been developed and implemented
- D. By including a requirement in Service Level Agreements (SLAs) for suppliers to carry out exercise activities and share the outcomes
Answer: B
Explanation:
While including key suppliers in internal exercises might seem beneficial, the CBCI 7.0 course highlights that external suppliers should be engaged in their own exercises, separate from the organization's internal exercises. Instead, validation of supply chain continuity is better achieved by requiring suppliers to develop and test their recovery plans independently and sharing outcomes. Contractual obligations such as those embedded in SLAs ensure suppliers maintain their own Business Continuity preparedness, while internal exercises focus on organizational responses to supply chain disruptions. Conducting internal exercises to assess impacts remains essential to understand dependencies and potential vulnerabilities without compromising exercise control.
Reference:CBCI 7.0 Study Guide, Module 6: Exercising and Validation, pages 130-133.
NEW QUESTION # 104
Which of the following is NOT a critical requirement for an effective response structure?
- A. A plan to exercise the escalation and response
- B. The number and type of teams required by the organization
- C. Guidance on when regulators should be notified and be included in the response
- D. A plan to communicate with internal and external interested parties
Answer: C
Explanation:
While communication plans, team structure, and exercising escalation and response are essential for an effective Business Continuity response structure, specific guidance on regulator notification, although important, is not typically considered a core structural element. The CBCI 7.0 course outlines that regulatory communications are usually integrated within communication plans but are not a standalone requirement for response structures. The focus remains on establishing clear roles, responsibilities, and communication mechanisms.
Reference:CBCI 7.0 Study Guide, Module 2: Response Structures, pages 75-78.
NEW QUESTION # 105
Which of the following is an indicator that top management is embracing Business Continuity?
- A. The organization's health and safety risk assessments are recorded as required
- B. Business Continuity is part of the organization's strategic planning and is reviewed regularly
- C. The organization maintains full compliance with legal and regulatory requirements
- D. The organization's Business Continuity operational plans are kept up to date
Answer: B
Explanation:
The CBCI 7.0 course identifiesthe integration of Business Continuity into the organization's strategic planning with regular reviewsas a clear sign of top management's commitment. Strategic incorporation ensures Business Continuity is prioritized, resourced, and aligned with long-term objectives, reflecting leadership's recognition of its importance. Regular review cycles demonstrate ongoing engagement and responsiveness to changing risks. While legal compliance, health and safety management, and operational plan maintenance are important, they may occur without active leadership endorsement. True embracement requires embedding Business Continuity in strategic decision-making and organizational culture.
Reference:CBCI 7.0 Study Guide, Module 1: Leadership and Commitment, pages 23-26.
NEW QUESTION # 106
......
Reliable Study Materials for CBCI Exam Success For Sure: https://www.actualtestsquiz.com/CBCI-test-torrent.html
Get Unlimited Access to CBCI Certification Exam Cert Guide: https://drive.google.com/open?id=1rAWgGqfOFixFQYM9Jg8DwsgfNPPlxWVg
