Exam CISM topic 1 question 334 discussion

I think JD is only read when you are applying the job.

Hoping every employee reads job descriptions every morning before getting to work.

Best should be through documentation and training. A. Staff turn over, how to prevent B. Discourage never works D. Funny to have in everyone's JD (bcp communication). C. Looks the closest

While both A and D are correct in their own way, I'd say D is more correct just because in CISM books the importance of job descriptions for establishing accountability is emphasized.

Its has to be A. Just because you put it in the job description does not mean people will read or follow it. I'm not sure how many of you read your "job description" everyday or how many of you actually do roles outside of your job description, I know I do. A is correct on that you are practicing it and therefore they will know what their role and function in regards to the BCP. Practice makes "perfect".

To ensure accountability and that they follow communication the next time

A: Perform tabletop testing with appropriate employees. Tabletop testing involves simulating various scenarios and situations that may occur during a business continuity event. By doing so, you can identify weaknesses and gaps in the communication plan and provide employees with an opportunity to practice their roles and responsibilities in a controlled environment. This helps ensure that employees are familiar with the plan and know how to respond effectively in a real crisis.

Sorry I reiterate that D may not be correct as Many employees from different departments participate in BCP activity; also some employee hired long back. How come JD support this communication?

BCP employs external party as well. But, the question mentioned that employees; hence D may be correct

A. Perform tabletop testing with appropriate employees

Incorporating BCP communication expectations in job descriptions (option D) is important for setting clear expectations and responsibilities. However, it may not be sufficient on its own to prevent a recurrence of employees not fully following the communications plan. Tabletop testing provides a more comprehensive approach to identify and address the communication gaps.

Tabletop exercises are only held among team members, in this case that would be the DR team members which does not include all the staff. To have a table top with all employees that were non compliant in a huge organization might not be feasible and they still need to address the issue. Option B and C are incorrect so the only one left that also has the ability to address the question by holding users accountable is Option D.

The BEST way to prevent a recurrence of employees not fully following the communications plan during a business continuity event is to perform tabletop testing with appropriate employees. Tabletop exercises are designed to simulate a disaster or business interruption scenario, and they provide an opportunity to test communication and response procedures, identify weaknesses, and improve the BCP. By conducting tabletop testing, the organization can identify areas that need improvement and address them before the next event occurs. Reprimanding employees may not address the root cause of the problem and could create a negative culture of blame, while enhancing external communication instructions in the BCP and incorporating BCP communication expectations in job descriptions may help but may not be as effective as testing the plan in a realistic scenario.

The correct Answer is (D) as this will ensure that those employees are held accountable for following the communication plan. Rationale: (A) Performing a tabletop doesn't mean they have to follow the instructions at all and this is what was called out as a problem (B) Reprimanding employees may discourage employee from participating (C) Enhancing the communication doesn't mean they will be followed.

A is my answer, training the employees means better results in the future

D is correct

test is appropriate.