Business Continuity Management

Conceptual Framework

The following are some of the reasons why the NSSF would develop and implement a business continuity plan EXCEPT

  • To minimize disruptions to business operations
  • To minimize injury/death and /or damage/destruction of property
  • To minimize errors in routine data processing
  • To ensure recovery of business operations in the shortest time possible

The following are some of the things that the Fund can do to realize the benefits of business continuity management EXCEPT

  • Actively promoting BCM awareness within the Fund
  • Conducting Fund wide risk assessment
  • Conducting business continuity tests
  • Expanding its network across the region

Under the NSSF Business Continuity Management Framework, the following are some of the responsibilities of all staff EXCEPT

  • Reading and understanding the procedures required to manage emergencies and disasters for business recovery
  • Providing up to date information about their contacts to the Human Resource and Administration Department
  • Being ready at all times for implementation of Business Continuity Management procedures in the event of an emergence or disaster
  • Attending annual staff conferences

The Crisis Management Committee comprises of

  • Members of the Executive Committee only
  • Members of the Executive Committee and other Senior Managers
  • Senior managers only
  • Staff of the Risk management department

One of the main responsibilities of the Crisis Management Committee is supervising business continuity and recovery efforts during and after a disaster

  • True
  • False

The NSSF Command Centre, which is a place used to provide centralized command or instructions when the primary site cannot be accessed is located at

  • Jinja branch
  • Social Security House
  • Bugolobi branch
  • Kireka branch

Recovery Time Objective (RTO) is time that the technology requirements can be disrupted without significantly impacting the business processes

  • True
  • False

According to the NSSF Business Continuity Management Framework, the Recovery Time Objective (RTO) for payment of member benefits is

  • One (1) day
  • Five (5) days
  • Three (3) days
  • Two (2) days

The best way to protect the Fund business is to have a recovery strategy that

  • Minimizes the Recovery Time Objective
  • Maximizes Recovery Time Objective
  • Keeps Recovery Time Objective (RTO) constant
  • All the above

In order to avoid confusion and minimize disruptions, the NSSF Business Continuity Management Framework has provided for an alternate site for each department, section and branch

  • True
  • False

Where is the NSSF Disaster Recovery Centre (DRC) located?

  • Jinja
  • Bank of Uganda
  • Kireka
  • Entebbe

According to the NSSF Business Continuity Management Framework, the impact of a disruption that leads to loss of revenue equivalent to 10% or more of monthly contributions or failure to carry on business for ten (10) or more days is categorized as

  • High
  • Extreme
  • Very high
  • Medium

One way to ensure business continuity is to have all key documents backed up and saved in a folder where they can be assessed anywhere on the Fund’s network

  • True
  • False

The following but ONE, are key elements of the NSSF Business Continuity Management Framework

  • Disaster awareness training
  • Risk assessment
  • Team building activities
  • Disaster recovery testing exercises

Crisis Management

One of or a combination of the following will require an automatic invocation of the Crisis Management Plan. State what this is or are.

  • (i) only
  • (i) and (ii) only
  • Either (i), (ii), (iii) or a combination of them
  • (ii) and (iii) only

i) An occurrence resulting in complete breakdown of the Fund’s computer systems, leading to inability to access and/or process any data

ii) An occurrence rendering accessibility to the Fund’s Head Office building impossible for a period more than a day

iii) An occurrence resulting in multiple injuries and/or loss of lives on the Fund’s premises

According to the NSSF Business Continuity Management Framework, who is responsible for invoking and calling off the Crisis Management Plan (CMP)?

  • Head of Risk
  • Managing Director
  • Board Chairman
  • Head of Human Resources and Administration

If the office building caught fire, what is the first and best course of action to take?

  • First rescue office assets and then run out of building
  • Run out of building immediately to the designate assembly point
  • Call for help and ensure the assets are safe
  • First account for colleagues and run to assembly point

What is the correct order of the following emergence procedures

Which of the following is true about required resources during the early stages of recovery after a major business disruption?

  • (i)
  • (ii)
  • (iii)
  • None of the above

i) All the resources that were available before the disaster

ii) Only a few critical staff & facilities

iii) No need for the resources until full recovery

Business recovery

In NSSF, business process recovery following a disaster is mainly supported by:

  • The Disaster Recovery Centre
  • Third party facilities
  • Insurance underwriters
  • Security agencies