ISO 22301 Lead Implementer practice questions, page 3 of 3, with answer review and explanations.
Question 11
Scenario 3 - Bhealth is a company that manufactures and sells biomedical products. Inspired by the traditional Japanese approach to skincare products, the company sells innovative and high-quality sun protection and face and body creams. In addition to its products, Bhealth sells products from a Japanese brand that are imported from Japan to the US. To ensure the continuity of operations and mitigate risks associated with supply chain disruptions, natural disasters, and other unforeseen events, the company implemented a business continuity management system (BCMS) based on ISO 22301. To implement the BCMS, the top management assigned a team of five members and appointed Victor as the project manager. The project team initiated the implementation by analyzing the company’s internal and external context. They primarily analyzed the market forces and opportunities, focusing on key political, economic, social, and technological areas. This included understanding the company’s regulatory environment, economic trends affecting consumer spending on skincare and biomedical products, the changing consumer behaviors and preferences towards skincare products, and the advancements in skincare technology and production methods. Then, the project team used a technique to determine the current procedures and processes related to BCMS and set targets for each procedure and process to achieve a desired state. Based on the results of the analysis, the top management and Victor determined the physical and organizational boundaries to which the BCMS would apply. They decided that the BCMS would cover all company departments and processes. Since the company had no previous management systems, they believed including the BCMS in all business units was necessary. After determining the scope, the top management established business continuity objectives. They aimed to reduce critical business operations’ recovery time from disruption to less than 24 hours within the next 12 months. In addition, the top management established and communicated specific objectives only to the Supply Chain and Logistics Department, which emphasized the establishment of at least two alternative suppliers for each critical component or product imported from Japan within the next six months, ensuring that these suppliers meet Bhealth’s quality and delivery standards. Afterward, the project team used various approaches to estimate the required resources for the BCMS. They considered just-in-time inventory methods and maintaining larger stockpiles of critical supplies as alternative strategies. Examining these options determined which approach provided the optimal balance between cost and resilience. Based on the scenario above, answer the following question: According to scenario 3, the top management and Victor discussed physical and organizational boundaries to which the BCMS would apply. What did they establish in this case?
BCMS strategies
BCMS key processes and activities
BCMS scope
Question 12
Scenario 4 - Netcomp is a German research institute that provides research and analysis solutions in the environment and energy fields. Its goal is to contribute to improving air and water quality through innovative services. Last month, Netcomp suffered an incident that disrupted its operations for more than four days. The water pipes placed in the central laboratory of Netcomp were damaged, flooding the entire first floor. The central laboratory, one of the essential functions of Netcomp, became inaccessible for four days. To ensure safety, the top management decided to implement a business continuity management system (BCMS) based on ISO 22301. To ensure a successful implementation of the BCMS, the company’s top management established a BCMS project team and defined the roles and responsibilities of each member. Josh was appointed as the project manager to lead the implementation of the BCMS. The BCMS project team initiated the BCMS implementation plan by drafting the business continuity policy only in German. Following Josh’s approval of the business continuity policy, the BCMS project team communicated it to the staff and made it available only to Netcomp’s employees. They documented the policy only in the electronic version. The BCMS project team diligently identified external and internal issues that could impact the company’s strategic direction and ability to achieve desired BCMS results. This involved utilizing a PEST analysis to evaluate the internal and external environment, market forces, and opportunities relevant to Netcomp’s interests. Additionally, they conducted customer surveys to gain insights into clients’ perspectives on the institute’s research and analysis services. Based on the survey results, the company determined the scope of the BCMS. They decided that the scope would initially cover only the critical functions, starting with the central laboratory, and gradually expand to include other research facilities and processes. Based on the scenario above, answer the following question: What did the project team analyze when identifying external and internal issues relevant to the company’s strategic direction?
The needs and expectations of interested parties
The context of the organization
The roles and responsibilities of the BCMS project team
Question 13
Scenario 4 - Netcomp is a German research institute that provides research and analysis solutions in the environment and energy fields. Its goal is to contribute to improving air and water quality through innovative services. Last month, Netcomp suffered an incident that disrupted its operations for more than four days. The water pipes placed in the central laboratory of Netcomp were damaged, flooding the entire first floor. The central laboratory, one of the essential functions of Netcomp, became inaccessible for four days. To ensure safety, the top management decided to implement a business continuity management system (BCMS) based on ISO 22301. To ensure a successful implementation of the BCMS, the company’s top management established a BCMS project team and defined the roles and responsibilities of each member. Josh was appointed as the project manager to lead the implementation of the BCMS. The BCMS project team initiated the BCMS implementation plan by drafting the business continuity policy only in German. Following Josh’s approval of the business continuity policy, the BCMS project team communicated it to the staff and made it available only to Netcomp’s employees. They documented the policy only in the electronic version. The BCMS project team diligently identified external and internal issues that could impact the company’s strategic direction and ability to achieve desired BCMS results. This involved utilizing a PEST analysis to evaluate the internal and external environment, market forces, and opportunities relevant to Netcomp’s interests. Additionally, they conducted customer surveys to gain insights into clients’ perspectives on the institute’s research and analysis services. Based on the survey results, the company determined the scope of the BCMS. They decided that the scope would initially cover only the critical functions, starting with the central laboratory, and gradually expand to include other research facilities and processes. Based on the scenario above, answer the following question: Based on scenario 4, the BCMS project team communicated the company’s business continuity policy to the company's staff after getting approval from Josh. Is this acceptable?
Yes, the project manager is responsible for approving the business continuity policy
No, the business continuity must be communicated only to the top management
No, the BCMS project team must obtain the approval of the top management for the business continuity policy
Question 14
Scenario 4 - Netcomp is a German research institute that provides research and analysis solutions in the environment and energy fields. Its goal is to contribute to improving air and water quality through innovative services. Last month, Netcomp suffered an incident that disrupted its operations for more than four days. The water pipes placed in the central laboratory of Netcomp were damaged, flooding the entire first floor. The central laboratory, one of the essential functions of Netcomp, became inaccessible for four days. To ensure safety, the top management decided to implement a business continuity management system (BCMS) based on ISO 22301. To ensure a successful implementation of the BCMS, the company’s top management established a BCMS project team and defined the roles and responsibilities of each member. Josh was appointed as the project manager to lead the implementation of the BCMS. The BCMS project team initiated the BCMS implementation plan by drafting the business continuity policy only in German. Following Josh’s approval of the business continuity policy, the BCMS project team communicated it to the staff and made it available only to Netcomp’s employees. They documented the policy only in the electronic version. The BCMS project team diligently identified external and internal issues that could impact the company’s strategic direction and ability to achieve desired BCMS results. This involved utilizing a PEST analysis to evaluate the internal and external environment, market forces, and opportunities relevant to Netcomp’s interests. Additionally, they conducted customer surveys to gain insights into clients’ perspectives on the institute’s research and analysis services. Based on the survey results, the company determined the scope of the BCMS. They decided that the scope would initially cover only the critical functions, starting with the central laboratory, and gradually expand to include other research facilities and processes. Based on the scenario above, answer the following question: According to scenario 4, the organization decided that the scope would initially cover only one division. Is this acceptable?
No, the scope should include the entire organization
Yes, the organization can implement the BCMS only in one division
No, the scope should include only a specific process
Question 15
Scenario 4 - Netcomp is a German research institute that provides research and analysis solutions in the environment and energy fields. Its goal is to contribute to improving air and water quality through innovative services. Last month, Netcomp suffered an incident that disrupted its operations for more than four days. The water pipes placed in the central laboratory of Netcomp were damaged, flooding the entire first floor. The central laboratory, one of the essential functions of Netcomp, became inaccessible for four days. To ensure safety, the top management decided to implement a business continuity management system (BCMS) based on ISO 22301. To ensure a successful implementation of the BCMS, the company’s top management established a BCMS project team and defined the roles and responsibilities of each member. Josh was appointed as the project manager to lead the implementation of the BCMS. The BCMS project team initiated the BCMS implementation plan by drafting the business continuity policy only in German. Following Josh’s approval of the business continuity policy, the BCMS project team communicated it to the staff and made it available only to Netcomp’s employees. They documented the policy only in the electronic version. The BCMS project team diligently identified external and internal issues that could impact the company’s strategic direction and ability to achieve desired BCMS results. This involved utilizing a PEST analysis to evaluate the internal and external environment, market forces, and opportunities relevant to Netcomp’s interests. Additionally, they conducted customer surveys to gain insights into clients’ perspectives on the institute’s research and analysis services. Based on the survey results, the company determined the scope of the BCMS. They decided that the scope would initially cover only the critical functions, starting with the central laboratory, and gradually expand to include other research facilities and processes. Based on the scenario above, answer the following question: Based on scenario 4, the business continuity policy was made available only to Netcomp’s employees. Is this in accordance with ISO 22301 requirements?
No, the policy must be available only to the central laboratory
No, the policy must be available to top management only
Yes, as long as employees are the only relevant interested parties