Which strategy supports the recovery needs of each critical product and service?
Strategy option evaluation and selection is the strategy that supports the recovery needs of each critical product and service. This strategy involves the following steps:
Identify the recovery options: Based on the results of the business impact analysis (BIA) and the risk assessment, identify the possible recovery options for each critical product and service. Recovery options are the alternative ways of resuming the delivery of the product or service within the recovery time objective (RTO) and the recovery point objective (RPO). Examples of recovery options are: relocating to an alternate site, activating a mutual aid agreement, using a cloud-based backup, outsourcing to a third-party provider, etc.
Evaluate the recovery options: Assess the feasibility, effectiveness, and efficiency of each recovery option, using criteria such as: cost, availability, scalability, compatibility, security, compliance, etc. Compare the advantages and disadvantages of each option and rank them according to their suitability for meeting the recovery needs.
Select the recovery options: Choose the best recovery option for each critical product and service, based on the evaluation results and the available resources. Ensure that the selected option aligns with the organization's business continuity objectives, policies, and strategies. Document the rationale and justification for the selection and communicate it to the relevant stakeholders.
Strategy option evaluation and selection is the strategy that supports the recovery needs of each critical product and service, as it enables the organization to identify, evaluate, and select the most appropriate recovery option for each critical product and service, based on the BIA and the risk assessment results. This strategy helps the organization to ensure the continuity and resilience of its critical products and services in the event of a disruption, and to optimize the use of its resources and capabilities.Reference:
ISO 22301 Auditing eBook, Chapter 3: Business Continuity Management System, Section 3.4.2: Business Continuity Strategy, Page 19
ISO 22301 Auditing eBook, Chapter 5: Business Continuity Management System Audit Activities, Section 5.3.2: Audit of Business Continuity Strategy, Page 37
ISO 22301:2019, Clause 8.3: Business Continuity Strategies and Solutions, Page 18
Which step in PDCA Cycle Formulate and implement a management plan with actions?
The step in the PDCA cycle that formulates and implements a management plan with actions is the Do step. The Do step is the second phase of the PDCA cycle, following the Plan step. In the Do step, the organization executes the plan that was developed in the Plan step, based on the objectives, policies, and procedures of the business continuity management system (BCMS). The Do step involves implementing the new or improved processes, controls, activities, and measures that are designed to achieve the desired outcomes and performance of the BCMS. The Do step also involves documenting the results and outcomes of the implementation, as well as any problems or deviations that occurred. The Do step provides the basis for the Check step, where the organization monitors and evaluates the effectiveness and efficiency of the implemented plan.Reference:
ISO 22301 Auditing eBook, Chapter 1: Introduction to Business Continuity Management Systems, Section 1.3: PDCA Cycle1
ISO 22301:2019 - Security and resilience --- Business continuity management systems --- Requirements, Clause 8: Operation2
Which step of PDCA Cycle is associated with preparing the Statement of Applicability (SOA)?
The Statement of Applicability (SOA) is a document that identifies the applicable requirements of ISO 22301 and explains how they are addressed by the organization's Business Continuity Management System (BCMS). The SOA is prepared during the planning phase of the PDCA cycle, as part of the process of establishing the BCMS scope, objectives, and policy. The SOA is based on the results of the business impact analysis, risk assessment, and risk treatment, and it provides a rationale for the inclusion or exclusion of each requirement. The SOA also helps to demonstrate the conformity of the BCMS with the standard and to communicate the BCMS scope and objectives to interested parties.Reference: ISO 22301:2019, Clause 6.1.3; ISO 22301 Auditing eBook, Chapter 4.2.2.
Which of the following has a determined roles and responsibilities based on knowledge and skills profiles?
According to ISO 22301:2019, Clause 7.2, the organization must determine the necessary competence of persons doing work under its control that affects its business continuity performance. The organization must ensure that these persons are competent on the basis of appropriate education, training, or experience, and where applicable, take actions to acquire the necessary competence, and evaluate the effectiveness of the actions taken. The organization must also retain appropriate documented information as evidence of competence. Therefore, people are the ones who have determined roles and responsibilities based on knowledge and skills profiles, as they are the key resources for implementing and maintaining the business continuity management system (BCMS).Reference: ISO 22301:2019, Clause 7.2; ISO 22301 Auditing eBook, Chapter 4.2.2.
Adopting the BCMS optimizes the organization's business continuity capability.
Adopting the BCMS optimizes the organization's business continuity capability by enabling it to identify, prevent, prepare for, respond to, and recover from disruptive events. The BCMS provides a systematic approach to plan, implement, operate, monitor, review, maintain, and improve the organization's ability to protect its critical functions and deliver its products and services at an acceptable level of performance during and after a disruption. The BCMS also helps the organization to enhance its resilience, reduce its risks, improve its reputation, and increase its customer satisfaction.Reference: ISO 22301:2019, Clause 1; ISO 22301 Auditing eBook, Chapter 1.1.
Lisa Flores
12 days agoMaria Johnson
23 days agoStephen Lee
1 month agoAnthony Torres
1 month agoRonald Moore
1 month agoPatricia Torres
1 month agoJoshua Carter
1 month agoJessica Bell
1 month agoPhyliss
2 months agoMeghan
2 months agoAmos
2 months agoTomoko
3 months agoSherman
3 months agoAnnita
3 months agoEun
4 months agoStephaine
4 months agoTamesha
4 months agoJunita
4 months agoRegenia
5 months agoRikki
5 months agoHeike
5 months agoAnnabelle
5 months agoLouvenia
6 months agoWilford
6 months agoRaymon
6 months agoMaryann
6 months agoKirk
7 months agoKing
7 months agoCarlee
7 months agoGayla
7 months agoJerry
8 months agoStaci
8 months agoKenneth
8 months agoAmos
8 months agoWalker
8 months agoNicolette
9 months agoJaclyn
9 months agoDonette
11 months agoReita
12 months agoEdwin
1 year agoBoris
1 year agoSilva
1 year agoChanel
1 year agoNydia
1 year agoRuthann
1 year agoErasmo
1 year agoYen
1 year agoNieves
2 years agoIluminada
2 years agoSharita
2 years agoLakeesha
2 years agoPaulene
2 years agoCordelia
2 years agoJavier
2 years agoMicaela
2 years agoOliva
2 years agoCyril
2 years agoWillis
2 years agoCherry
2 years agoPenney
2 years agoGeraldo
2 years agoJacinta
2 years agoKristofer
2 years agoDaniel
2 years agoLouisa
2 years agoYasuko
2 years agoStephen
2 years agoMonroe
2 years ago