Which of the following is a benefit of conducting an exercise?

A primary benefit of conducting a business continuity exercise is to rehearse and validate the capabilities of the response teams. Exercises provide a practical, simulated environment for personnel to practice their assigned roles and responsibilities as defined in the business continuity plan. This confirms their familiarity with procedures, communication protocols, and decision-making authority in a crisis. By doing so, exercises build individual and team competence, confidence, and muscle memory, which are crucial for an effective response during an actual incident.

A. This is a broader objective better addressed through a management review or an audit of the entire Business Continuity Management System (BCMS).

C. Understanding the Business Impact Analysis (BIA) is a prerequisite for developing plans; an exercise validates the resulting plans, not the BIA itself.

D. This describes a compliance audit, which formally assesses the BCMS against standards and regulations, a distinct activity from an exercise that tests operational effectiveness.

1. Business Continuity Institute (BCI)

Good Practice Guidelines (GPG)

2018 Edition.

Section 10.3.2

"Exercise objectives

" lists key objectives for an exercise programme

including: "Practise the roles and responsibilities of the individuals in the teams" and "Build teamwork in the teams that will have to manage an incident." This directly supports option B.

Section 10.2.2

"Exercises and Audits

" explicitly distinguishes between the two activities: "An exercise is not an audit... An audit is a systematic and documented process for obtaining evidence and evaluating it objectively to determine the extent to which the BCMS policy and objectives are fulfilled." This reasoning invalidates option D.

2. ISO 22301:2019

Security and resilience — Business continuity management systems — Requirements.

Clause 8.5

"Exercise programme

" states that an organization shall establish an exercise programme to "validate the effectiveness of its business continuity strategies and solutions" and "evaluate its business continuity capabilities and the competence of personnel with assigned business continuity responsibilities." This reinforces that confirming personnel familiarity (competence) with their roles is a core purpose.

3. Finch

J. (2017). Business Continuity Management: Preparing for the Worst. Kogan Page.

In the chapter on exercising and testing

the text emphasizes that exercises are crucial for "ensuring that all personnel involved in the plan are aware of their roles and responsibilities" and for "building confidence among the team members." This aligns with the rationale for selecting option B. (Note: While a book

it is a widely cited academic and professional text in the BCM domain).