GAQM CBCP-002 - Certified Business Continuity Professional (CBCP)

A disaster lasting longer than seventy-two (72) hours requires implementation of a business continuity and disaster recovery plan. A business continuity and disaster recovery plan is a comprehensive document that outlines how an organization will respond to and recover from adisaster that disrupts its normal operations. It covers both the IT aspects (disaster recovery) and the business aspects (business continuity) of restoring the critical functions and processes within an acceptable time frame. A disaster lasting longer than seventy-two (72) hours is likely to have significant impacts on the organization’s performance, reputation, assets, and stakeholders, and therefore requires a coordinated and structured approach to ensure its survival and resilience. Verified References: https://www.ready.gov/business-continuity-plan https://www.csoonline.com/article/515730/business-continuity-and-disaster-recovery-planning-the-basics.html

Continuity planning with external stakeholders, such as key suppliers, is essential to ensure the uninterrupted flow of information, materials, products, and services during disruptions. The type of continuity planning determines the nature of the relationship and coordination with these suppliers:

Multilateral: This involves multiple parties (e.g., an organization and several suppliers or partners) working together in a coordinated plan. While multilateral planning can enhance collaboration across a broad network, it is complex and not specifically tailored to strengthening individual supplier relationships, which is the focus of this question.

Bilateral: This refers to a two-party agreement or plan between the organization and a specific supplier. Bilateral continuity planning fosters a direct, functioning relationship with key suppliers, enabling mutual understanding, aligned recovery strategies, and stronger assurances of continuous supply. It is the most effective approach for building robust, one-on-one supplier relationships, as it allows for tailored coordination and commitments.

Unilateral: This is a one-sided plan where the organization develops its continuity strategy without direct supplier involvement. While it may address internal resilience, it does not enhance the functioning relationship with suppliers or provide assurances of their continuity, making it inadequate for this purpose.

The correct answer isB. Bilateral, as it directly enhances the relationship with key suppliers through mutual planning and coordination, ensuring a continuous supply chain. This aligns with Business Continuity Professional practices that emphasize collaboration with critical external dependencies.

References:

DRI International Professional Practices for Business Continuity Management (2023), Section 4: Business Impact Analysis and Risk Assessment – Highlights the importance of engaging key suppliers in continuity planning.

ISO 22301:2019, Clause 8.2.3 – Emphasizes identifying and managing dependencies, including suppliers, through coordinated planning.