CBCI Questions Bank

In CBCI-aligned good practice, exercise development starts by agreeing what the exercise is trying to achieve. Before designing content, logistics, injects, budget, or safety controls, you must agree the scope and objectives, define the timeline and expected outcomes, and confirm what “success” looks like. This aligns with established exercise-management guidance that frames planning around clear objectives and scope so the rest of the design remains focused and measurable.

Only after scope/objectives are set does it make sense to plan and design the exercise (budget, timings, risk assessment), then conduct it, and finally capture learning and report outcomes.

Therefore, option C is the first step; it anchors the entire exercise lifecycle and prevents “activity for activity’s sake.” A well-defined scope and objectives also ensure you involve the right participants, validate the right capabilities (plans, roles, procedures), and can evaluate performance meaningfully during debriefing and improvement planning.

Embedding Business Continuity into induction and setting objectives for personnel clearly indicates a mature Business Continuity culture. The CBCI 7.0 course details that a strong culture is characterized by widespread awareness, commitment, and integration of Business Continuity principles into everyday activities. Including continuity in induction familiarizes new staff with the organization's resilience expectations, while individual objectives reinforce personal accountability. This cultural embedding supports sustainable continuity practices and improves the likelihood of effective responses during disruptions. It reflects a proactive organizational mindset rather than isolated activities or roles.

Within CBCI 7.0 (aligned to BCI GPG 7.0), validation includes exercising and testing to confirm the BCMS performs as intended and stays effective as the organization changes. Good practice is not to “set and forget” an exercise programme; it must be kept current as threats, dependencies, operating models, staffing, suppliers, technology, and locations evolve. The BCI explicitly states that exercises should be performed at planned intervals and when there are significant changes within the organization or the context in which it operates—this directly supports the need to review the exercise programme regularly at pre-defined intervals or after significant change.

Option A is partly true (exercise objectives should reflect BIA and solutions), but it doesn’t capture the key “effective programme” control: continuous review/update. Option B can help comparison, but repeating the same framework can also create predictability and miss emerging risks. Option D may inform scenarios, yet customer concerns alone should not drive the programme. The strongest CBCI-aligned answer is C.

According to the CBCI 7.0 course, an effective response structure must incorporate clear protocols for timely notification of key suppliers and external stakeholders. This ensures coordinated response efforts and mitigates cascading impacts. Unlimited financial access is unrealistic and can lead to mismanagement. Changes to policies require governance and cannot be unilaterally made during disruptions. While performance measurement is important, notification protocols are fundamental to structured, controlled, and communicative response efforts.