Important PECB ISO-22301-Lead-Auditor Exam Questions

Answer: A

Explanation:

:The document that is owned by executive management and sets the purpose of BCM in an organization is the Business Continuity Policy. The Business Continuity Policy is a high-level document that defines the scope, objectives, principles, and roles and responsibilities for business continuity management within the organization. It also demonstrates the commitment of top management to support and continually improve the BCMS.The Business Continuity Policy is one of the mandatory documents required by ISO 22301, the international standard for BCMS12.

The other options are not correct because they are not documents that are owned by executive management and set the purpose of BCM in an organization. A Business Process Policy is a document that describes the procedures and rules for performing a specific business process, such as procurement, sales, or accounting. A Register is a document that records and tracks the status of certain items, such as risks, incidents, or assets. A Worksheet is a document that contains data and calculations, such as a spreadsheet or a form.

Answer: C

Explanation:

Business continuity programs should be a part of the governance process of the organization, which is the system by which the organization is directed and controlled. The governance process involves setting the strategic direction, establishing the policies and objectives, allocating the resources, monitoring the performance, and ensuring the accountability and transparency of the organization. Business continuity programs support the governance process by ensuring the continuity of the organization's critical functions and processes in the event of a disruptive incident, and by enhancing the organization's resilience and reputation.Reference: ISO 22301 Auditing eBook, Chapter 1: Introduction to Business Continuity Management Systems (BCMS), Section 1.1: Governance, page 8.

Answer: C

Explanation:

A competitor is an organization or individual that operates in the same market as another organization or individual and offers similar products or services that are in direct or indirect competition with each other. Competitors are interested parties that can affect or be affected by the organization's business continuity objectives, strategies, and performance. Competitors can also pose threats or opportunities for the organization's business continuity management system (BCMS).Reference: ISO 22301 Auditing eBook, page 18; ISO 22301:2019 standard, clause 3.3.1

Answer: A

Explanation:

Crisis communication is the process of managing the flow of information during and after a crisis situation that threatens the reputation, operations, or survival of an organization. It aims to protect the organization's shareholder value and long-term reputation by maintaining trust and confidence among its stakeholders. According to the ISO 22301 Auditing eBook, crisis communication is one of the key elements of a business continuity management system, as it enables the organization to communicate effectively with its internal and external parties, such as employees, customers, suppliers, media, regulators, and the public. Effective crisis communication can help the organization to minimize the negative impacts of a crisis, restore normal operations as soon as possible, and enhance its resilience and reputation in the long run.Reference: ISO 22301 Auditing eBook, pages 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, and 27.

Answer: B

Explanation:

Business Continuity Management (BCM) is the approach that identifies potential threats to an organization and impacts to business operations.BCM provides a framework for building organizational resilience with the capability of an effective response that safeguards the interests of its key stakeholders, reputation, brand and value-creating activities1.BCM involves the following steps2:

Establishing the context and scope of the BCMS

Conducting a business impact analysis (BIA) and risk assessment (RA)

Developing business continuity strategies and solutions

Implementing business continuity plans and procedures

Exercising, testing and reviewing the BCMS

Continually improving the BCMSReference:

ISO 22301:2019, clause 3.6

ISO 22301 Auditing eBook, page 15