Business resumption refers to the long-term process (typically more than 60 days) of returning the organization to full, normal operations after a disruption. It follows the earlier stages of emergency response and business recovery and focuses on rebuilding systems and restoring service levels.
Business continuity (A) is a broader concept that includes all planning efforts.
Business recovery (B) focuses on short-term, interim operations.
Business healing (D) is not a formal term in continuity planning.
References:
ASIS International - Business Continuity Guidelines
PSP Study Guide - Emergency Management and Recovery Phases

A virus is a type of malicious software that attaches itself to legitimate files and spreads when those files are executed.
A worm is a standalone malware program that replicates itself to spread to other computers without needing to attach to a host file.
A bug refers to an error or flaw in software, but in the context of this question (malicious instructions causing effects), it can contribute to vulnerabilities exploited by malware.
Since all these can involve sets of unwanted instructions leading to harmful effects, "All of the above" is the most accurate answer.
References:
PSP Study Guide - Cybersecurity Threats and Malware Types
ASIS POA Manual - Information Security and System Integrity

The Chief Security Officer (CSO) is responsible for overseeing an organization's entire security posture- including physical, personnel, and sometimes information security. A crucial part of this role is ensuring that communication channels are effective. The CSO must analyze these channels regularly to ensure that the information received is accurate, relevant, timely, concise, and actionable for security operations and decision- making.
CIO (A) focuses on IT systems.
Information Security Officer (B) handles cybersecurity but may not oversee overall physical security.
Chief Minister (C) is a governmental/political role, not organizational security.
References:
ASIS POA Manual - Security Program Administration
PSP Study Guide - Security Leadership & Communication

An operational audit is a continuous and comprehensive review of all facets of the security operation. It evaluates whether security procedures are functioning as intended and whether resources are being used efficiently. This process identifies inefficiencies, policy violations, or procedural weaknesses over time.
References from PSP: ASIS POA - Security Operations Review; PSP Study Manual - Domain 3: Operations and Program Evaluation

When issuing weapons to security personnel, policies must clearly define the conditions under which the equipment may be used. This ensures legal compliance, accountability, and safety. Proper use-of-force guidelines are critical in managing liability and operational control.
A (Public perception) is important but secondary.
B and C may be relevant to personnel qualification but not to issuance policies themselves.
References:
PSP Study Guide - Use of Force and Weapons Policy
POA Manual - Security Officer Equipment and Operational Protocols