GAQM CBCP-002 Exam With Confidence Using Practice Dumps

A formal “disaster” can only be declared by the firm owners or by the IT Department Manager. This is false because a formal “disaster” can be declared by any authorized person who has the responsibility and authority to activate the business continuity and disaster recovery plan. The authorized person may vary depending on the type, scope, and severity of the disaster, but it should be clearly defined in the plan who can declare a disaster and under what circumstances. The authorized person should also communicate the declaration of a disaster to all relevant stakeholders, such as employees, customers, suppliers, partners, regulators, media, or the public. Verified References:

Continuity planning with external stakeholders, such as key suppliers, is essential to ensure the uninterrupted flow of information, materials, products, and services during disruptions. The type of continuity planning determines the nature of the relationship and coordination with these suppliers:

Multilateral: This involves multiple parties (e.g., an organization and several suppliers or partners) working together in a coordinated plan. While multilateral planning can enhance collaboration across a broad network, it is complex and not specifically tailored to strengthening individual supplier relationships, which is the focus of this question.

Bilateral: This refers to a two-party agreement or plan between the organization and a specific supplier. Bilateral continuity planning fosters a direct, functioning relationship with key suppliers, enabling mutual understanding, aligned recovery strategies, and stronger assurances of continuous supply. It is the most effective approach for building robust, one-on-one supplier relationships, as it allows for tailored coordination and commitments.

Unilateral: This is a one-sided plan where the organization develops its continuity strategy without direct supplier involvement. While it may address internal resilience, it does not enhance the functioning relationship with suppliers or provide assurances of their continuity, making it inadequate for this purpose.

The correct answer isB. Bilateral, as it directly enhances the relationship with key suppliers through mutual planning and coordination, ensuring a continuous supply chain. This aligns with Business Continuity Professional practices that emphasize collaboration with critical external dependencies.

References:

DRI International Professional Practices for Business Continuity Management (2023), Section 4: Business Impact Analysis and Risk Assessment – Highlights the importance of engaging key suppliers in continuity planning.

ISO 22301:2019, Clause 8.2.3 – Emphasizes identifying and managing dependencies, including suppliers, through coordinated planning.

Tolerating risk is where no action is taken to mitigate or reduce a risk. This is true because tolerating risk is one of the possible strategies for managing risk. Tolerating risk means accepting or retaining a risk without taking any further action to reduce it, either because the risk level is acceptable or because the cost or effort of reducing it is not justified. Tolerating risk may be appropriate for low-priority or low-impact risks that do not pose a significant threat to the organization’s objectives. Verified References: