ISO 22301 Lead Implementer

ISO 22301 Lead Implementer practice questions, page 2 of 3, with answer review and explanations.

Question 6

What is the difference between business continuity (BC) and disaster recovery (DR)?

  1. BC minimizes ineffective system function, whereas DR minimizes operational downtime
  2. BC ensures effective communication during a disaster, whereas DR ensures that the organization returns to normal operations after a disaster has occurred
  3. BC enables organizations’ natural and technological infrastructure to return to normal operation after disasters, whereas DR enables the return to normal operations of IT infrastructure following human-induced disasters only

Question 7

Based on ISO 22301, how does an organization help the BCMS from an internal processes perspective?

  1. Protecting and enhancing its reputation and credibility
  2. Improving its capability to remain effective during disruptions
  3. Reducing legal and financial exposure

Question 8

Which of the following does a BCMS framework integrate to achieve the desired outcomes in terms of business continuity management?

  1. Structures, policies
  2. Processes, procedures
  3. Both

Question 9

Which of the following statements regarding ISO 22313 is correct?

  1. ISO 22313 provides guidance for applying the requirements of ISO 22301
  2. ISO 22313 outlines the requirements for obtaining certification against ISO 22301
  3. ISO 22313 gives guidance for business continuity strategy determination and selection

Question 10

Scenario 3 - Bhealth is a company that manufactures and sells biomedical products. Inspired by the traditional Japanese approach to skincare products, the company sells innovative and high-quality sun protection and face and body creams. In addition to its products, Bhealth sells products from a Japanese brand that are imported from Japan to the US. To ensure the continuity of operations and mitigate risks associated with supply chain disruptions, natural disasters, and other unforeseen events, the company implemented a business continuity management system (BCMS) based on ISO 22301. To implement the BCMS, the top management assigned a team of five members and appointed Victor as the project manager. The project team initiated the implementation by analyzing the company’s internal and external context. They primarily analyzed the market forces and opportunities, focusing on key political, economic, social, and technological areas. This included understanding the company’s regulatory environment, economic trends affecting consumer spending on skincare and biomedical products, the changing consumer behaviors and preferences towards skincare products, and the advancements in skincare technology and production methods. Then, the project team used a technique to determine the current procedures and processes related to BCMS and set targets for each procedure and process to achieve a desired state. Based on the results of the analysis, the top management and Victor determined the physical and organizational boundaries to which the BCMS would apply. They decided that the BCMS would cover all company departments and processes. Since the company had no previous management systems, they believed including the BCMS in all business units was necessary. After determining the scope, the top management established business continuity objectives. They aimed to reduce critical business operations’ recovery time from disruption to less than 24 hours within the next 12 months. In addition, the top management established and communicated specific objectives only to the Supply Chain and Logistics Department, which emphasized the establishment of at least two alternative suppliers for each critical component or product imported from Japan within the next six months, ensuring that these suppliers meet Bhealth’s quality and delivery standards. Afterward, the project team used various approaches to estimate the required resources for the BCMS. They considered just-in-time inventory methods and maintaining larger stockpiles of critical supplies as alternative strategies. Examining these options determined which approach provided the optimal balance between cost and resilience. Based on the scenario above, answer the following question: Based on scenario 3, the top management established and communicated specific objectives only to the Supply Chain and Logistics Department. Is this recommended?

  1. Yes, specific business continuity objectives applicable for a function or level can be communicated only to relevant interested parties
  2. No, specific business continuity objectives applicable for a function can be established, but they must be communicated to the entire organization
  3. No, the individual responsible for a function must establish the specific business continuity objectives applicable to that function