1. Discuss the need to monitor expenses related to the response, continuity and recovery to an incident. How is this need best accomplished? How would it be different under the Incident Command System?
2. Although the standards mandate very specific requirements for the plans that add a level of complexity, discuss the pros and cons of very simple plans versus detailed plans?
3. How do exercises and tests support continual improvement?
4. Discuss experiences a group would have observed when change is introduced into an organization. How can any roadblocks resolved?