Scenario:
Marketiser, a marketing company in Florida specializing in branding, advertising, market research, and design services, primarily serves small and medium-sized enterprises. After a devastating hurricane caused severe flooding and rendered its office unusable, Marketiser decided to implement a BCMS based on ISO 22301 to handle such disruptions.
The company formed a project team of four members from various departments and appointed Danielle as the project manager. Danielle conducted a comprehensive business impact analysis (BIA) focusing on activities related to data loss and backup recovery, recognizing the critical importance of safeguarding digital assets.
She set specific recovery objectives, including a one-day recovery point objective (RPO) and a two-day recovery time objective (RTO).
Based on the BIA outcomes, the team chose a business continuity strategy that involved relocating preconfigured trailers with essential hardware and connectivity to an alternate site. Considering Marketiser's vulnerability to hurricanes, the strategy allowed swift activation and relocation with minimal lead time. To validate their strategy, Danielle and the team conducted real-time recovery exercises, testing their ability to restore data and resume critical operations within the defined RTO.
Marketiser's business continuity process is illustrated in Scenario 5. Is this process compliant with ISO 22301?

• A. No, according to ISO 22301, business continuity plans and procedures are input to BIA and business continuity strategy.
• B. No, according to ISO 22301, business continuity plans and procedures must be based on the selected business continuity strategies and solutions.
• C. Yes, according to ISO 22301, business continuity strategy is selected based on the business continuity plans and procedures.

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

What is the purpose of an audit follow-up?

• A. To confirm the conformity and effectiveness of the management system.
• B. To evaluate the actions taken to correct the detected nonconformities during the audit.
• C. To review internal audit results and management review results.

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

What must be included in a business continuity plan, among others?

• A. Reporting requirements
• B. Risk assessment
• C. Legal and regulatory requirements

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

Scenario:
NexTech Innovations, a dynamic tech startup located in Seoul, South Korea, is renowned for its advancements in artificial intelligence and robotics. Serving a global clientele, NexTech encountered a sudden obstacle when a critical supplier abruptly ceased operations, disrupting their supply chain and threatening their ability to deliver products on schedule. Recognizing the need for resilience, NexTech initiated the implementation of a robust business continuity management system (BCMS) based on ISO 22301.
NexTech's top management established a project team of five members and appointed Rebecca, the lead operations manager, as the project manager. The BCM team was tasked with the effective implementation of the BCMS in line with ISO 22301 requirements. Rebecca worked with the top management to analyze the internal context of the company to define the BCMS scope, focusing on assessing and determining who is responsible for coordinating and managing activities at different organizational levels.
The project team divided the implementation project into smaller tasks, identifying the personnel, equipment, and materials needed for each. Rebecca personally handled resource allocation to implement and support the BCMS. Meanwhile, the top management ensured active involvement and commitment at all levels of the organization to enhance the BCMS's effectiveness.
Rebecca and the team drafted and published the business continuity policy on the company's website.
However, some employees found the technical jargon challenging to understand, so comprehensive training sessions were held to address this issue. These measures strengthened NexTech's resilience and enhanced client trust by proactively addressing potential disruptions.
Rebecca allocated the necessary resources for implementing and supporting the BCMS. Is this in compliance with ISO 22301?

• A. No, it is the top management's responsibility to allocate the resources needed for the BCMS.
• B. No, resource allocation for the BCMS should be delegated to a resource allocation team, not the project manager alone.
• C. Yes, it is the project manager's responsibility to allocate resources for the management system.

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

Scenario:
Headquartered in Sri Lanka, Operons Inc. is a freight forwarding company that adopted a BCMS aligned with ISO 22301. Prior to the certification audit, Operons Inc. measured gaps between their BCMS and the standard's requirements to ensure compliance. The certification body was contracted to conduct the audit, and a biased auditor from a previous ISO 9001 audit was replaced upon request. During the audit, two minor nonconformities were identified, and the audit team issued a recommendation for certification.
Based on Scenario 8, Operons Inc. contracted the same certification body that had conducted the ISO 9001 audit and requested more information about the competence and skills of the audit team. Is this acceptable?

• A. Yes, competence and skills of the audit team are among the main criteria in selecting a certification body.
• B. No, the auditee cannot ask about the competence and skills of the audit team; that is the responsibility of the certification body.
• C. No, the same certification body cannot be contracted to audit two management systems in the same organization.

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).