Which of the following statements best describes the relationship between Business Continuity strategies and solutions?
Options:
A.
Strategies align to the direction set out in the Business Continuity policy whilst solutions address the outlined objectives in the Business Continuity Management System (BCMS)
B.
Strategies are based on the outcomes of the Business Impact Analysis (BIA) whereas solutions are based on the outcomes of the risk assessment
C.
Strategies are high-level approaches for meeting the organization's Business Continuity requirements whereas solutions detail how the strategies will be implemented
D.
Strategies focus on the methods and procedures for business as usual activities whereas solutions focus on the treatments and actions to minimize risks
According to CBCI 7.0, strategies represent the high-level approaches that define how the organization will maintain or recover critical operations, aligned with Business Continuity requirements identified through BIAs and risk assessments. Solutions, on the other hand, are the specific, detailed methods and resources deployed to implement these strategies effectively. Strategies set the direction, while solutions translate these into practical capabilities such as alternate site arrangements, backup systems, or communication plans. Distinguishing strategies from solutions clarifies planning and execution responsibilities within the BCMS.
The timeframe within the Maximum Tolerable Period of Disruption (MTPD) during which a product, service or activity must be suspended to avoid adverse impacts on customers
B.
The timeframe within the Maximum Tolerable Period of Disruption (MTPD) for resuming disrupted activities at a specified minimum acceptable capacity
C.
The period of time following a disruption during which a product, service or activity must be suspended while resources are recovered and operating standards are re-established
D.
The point at which all products, services and activities must be fully resumed following a disruption
The BCI GPG 7.0 (Lite) explicitly defines Recovery Time Objective (RTO) as: “The time frame within the MTPD for resuming disrupted activities at a specified minimum acceptable capacity.” This matches option B exactly and aligns with ISO-aligned BC terminology used in CBCI 7.0. The key elements are:
Time-based target (how quickly),
Within the MTPD (before impacts become unacceptable), and
Minimum acceptable capacity (not necessarily full restoration—often a Minimum Business Continuity Objective level first). Option A incorrectly frames RTO as a “suspension” period; RTO is a resumption target. Option C is closer to a general “downtime” description but still misses the formal link to MTPD and specified minimum capacity. Option D describes full recovery/return to normal, which is usually a later target than the RTO (many organizations resume at a minimum level first, then restore fully).
