PECB ISO 22301 Lead Implementer Exam - Topic 7 Question 10 Discussion

Actual exam question for PECB's ISO 22301 Lead Implementer exam

Question #: 10
Topic #: 7

[All ISO 22301 Lead Implementer Questions]

Scenario:

Initar, an IT security service company in New Jersey, provides 24/7 cloud and IT infrastructure support to mid-sized companies. Recognizing the need for a robust business continuity strategy, Initar transitioned from informal business continuity planning to implementing a BCMS based on ISO 22301.

During the BCMS implementation, a major nonconformity was identified: the BIA report lacked a defined Maximum Tolerable Period of Disruption (MTPD), which is required by ISO 22301. The corrective action process began with the IT team conducting a root cause analysis using a cause-and-effect diagram. Based on the analysis, an action plan was drafted to update all BIAs and establish the MTPD. The plan was approved by the head of the IT department, who monitored its implementation, while the internal auditor reviewed the effectiveness of the corrective action.

What did Initar conduct to identify the source of the problem?

AAudit follow-up

BRoot cause analysis

CComparative analysis

Show Suggested Answer

Suggested Answer: B

by Mollie at Mar 19, 2025, 08:56 AM

Limited Time Offer

25%

Off

Get Premium ISO 22301 Lead Implementer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Colette

2 months ago

Wait, they didn’t have an MTPD defined? That’s surprising!

upvoted 0 times

...

Rashad

2 months ago

Totally agree, root cause analysis is key!

upvoted 0 times

...

Lakeesha

2 months ago

They did a root cause analysis to find the issue.

upvoted 0 times

...

Lyla

3 months ago

I thought audits were the go-to for this kind of thing.

upvoted 0 times

...

Loreen

3 months ago

Definitely a root cause analysis, but I wonder if they missed other issues too.

upvoted 0 times

...

Francoise

3 months ago

I vaguely recall a practice question where we discussed the importance of identifying the source of problems. I think root cause analysis was the answer there too.

upvoted 0 times

...

Yuette

3 months ago

I feel like comparative analysis doesn't fit here. It seems more like they needed to dig deep into the issue, so root cause analysis makes sense.

upvoted 0 times

...

Wei

4 months ago

I'm not entirely sure, but I remember something about audits being important in these processes. Could it be an audit follow-up?

upvoted 0 times

...

Julianna

4 months ago

I think they did a root cause analysis since it mentioned using a cause-and-effect diagram. That sounds right.

upvoted 0 times

...

Youlanda

4 months ago

Root cause analysis seems like the obvious choice here. The scenario clearly states that the IT team used a cause-and-effect diagram to conduct this analysis, so B is the correct answer.

upvoted 0 times

...

Keneth

4 months ago

Hmm, this is a tricky one. The scenario covers a lot of ground, and I want to make sure I don't miss any important details. I think I'll mark B for now, but I'll double-check my understanding before submitting the final answer.

upvoted 0 times

...

Allene

4 months ago

Okay, let me think this through. The scenario says that a major nonconformity was identified, and then the IT team conducted a root cause analysis. That sounds like the key step to identify the source of the problem, so I'll go with B.

upvoted 0 times

...

Kattie

5 months ago

I'm a bit unsure about this one. The question is asking what Initar conducted to identify the source of the problem, but the scenario mentions several steps in the corrective action process. I'll need to re-read the details carefully to make sure I understand the sequence of events.

upvoted 0 times

...

Octavio

5 months ago

This seems like a straightforward question. The scenario clearly states that the IT team conducted a root cause analysis using a cause-and-effect diagram, so the answer must be B.

upvoted 0 times

...

Buck

10 months ago

Definitely root cause analysis. Initar needs to get to the bottom of this MTPD issue before they can fix it properly. No point just putting a band-aid on the problem.

upvoted 0 times

Maryann

9 months ago

A) Audit follow-up

upvoted 0 times

...

William

9 months ago

Exactly, they need to understand the root cause before taking corrective action.

upvoted 0 times

...

Lashawnda

9 months ago

B) Root cause analysis

upvoted 0 times

...

Noel

10 months ago

Root cause analysis? That's like a detective story, but with diagrams instead of magnifying glasses. I bet the IT team had a lot of fun playing Sherlock Holmes.

upvoted 0 times

Eric

8 months ago

B) Root cause analysis

upvoted 0 times

...

Allene

9 months ago

The IT team used a cause-and-effect diagram to identify the root cause.

upvoted 0 times

...

Felicitas

9 months ago

C) Comparative analysis

upvoted 0 times

...

Jamal

9 months ago

B) Root cause analysis

upvoted 0 times

...

Aron

10 months ago

A) Audit follow-up

upvoted 0 times

...

Alease

10 months ago

I agree, the root cause analysis is the way to go. Conducting a thorough investigation to understand the problem's origins is crucial for implementing an effective corrective action.

upvoted 0 times

Malcolm

10 months ago

B) Audit follow-up

upvoted 0 times

...

Carin

10 months ago

A) Root cause analysis

upvoted 0 times

...

Anastacia

11 months ago

I agree. It helps in finding the root cause and implementing effective corrective actions.

upvoted 0 times

...

Lenna

11 months ago

The root cause analysis using a cause-and-effect diagram is the correct approach to identify the source of the problem. This systematic technique helps uncover the underlying factors that led to the nonconformity.

upvoted 0 times