ISO-22301-Lead-Auditor Exam Dumps - PECB Certified ISO 22301 Lead Auditor Exam

The team that is responsible for determining how the impact of the incident is managed within the policy guidelines set by the strategic team is the tactical team. The tactical team is composed of managers or experts who have the authority and competence to make decisions and allocate resources to implement the business continuity plans and strategies. The tactical team coordinates and communicates with the operational team, which is responsible for executing the recovery and restoration activities, and reports to the strategic team, which is responsible for setting the overall direction and objectives of the incident response1.

References: 1: ISO 22301 Auditing eBook, Chapter 7: Business Continuity Response, Section 7.2: Incident Management Structure, Subsection 7.2.1: Incident Management Teams, Page 103

Crisis communication is the process of managing the flow of information during and after a crisis situation that threatens the reputation, operations, or survival of an organization. It aims to protect the organization’s shareholder value and long-term reputation by maintaining trust and confidence among its stakeholders. According to the ISO 22301 Auditing eBook, crisis communication is one of the key elements of a business continuity management system, as it enables the organization to communicate effectively with its internal and external parties, such as employees, customers, suppliers, media, regulators, and the public. Effective crisis communication can help the organization to minimize the negative impacts of a crisis, restore normal operations as soon as possible, and enhance its resilience and reputation in the long run. References: ISO 22301 Auditing eBook, pages 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, and 27.

Maintenance is the activity that ensures that the programme and its components remain in line with the organization’s overall strategy. Maintenance involves monitoring and reviewing the performance and effectiveness of the programme, identifying and implementing improvements, and ensuring alignment with the changing needs and expectations of the organization and its stakeholders. Maintenance is an essential part of the programme management cycle, as it helps to ensure that the programme delivers the intended benefits and outcomes, and that the programme remains relevant and adaptable to the changing environment. Maintenance is also a requirement of ISO 22301, the international standard for business continuity management systems (BCMS). According to ISO 22301, the organization shall establish, implement and maintain a process for continual improvement of the BCMS, which includes evaluating the need for changes to the BCMS, and ensuring that the BCMS remains suitable, adequate and effective1. References:

• ISO 22301:2019, clause 10.2

SMART is an acronym for Specific, Measurable, Achievable, Relevant, and Time-bound. It is a method of setting objectives and evaluating performance that entails the use of unstructured narrative style to inform specific factors and the overall work performance. SMART objectives are clear, realistic, and measurable, and they help to align the individual’s goals with the organization’s strategy. SMART objectives also provide feedback and motivation for the individual and the team. References: ISO 22301 Auditing eBook, page 321

According to ISO 22301:2019, Clause 3.10, critical functions are the functions that are directly responsible for the delivery of products and services to the customers and other interested parties. Critical functions are essential for the organization to achieve its objectives, protect its reputation, and meet its legal and contractual obligations. Critical functions are also the ones that are most vulnerable to disruption, and therefore require the highest level of protection and recovery capability. The identification and prioritization of critical functions are part of the business impact analysis (BIA) process, which is a key component of the business continuity management system (BCMS). References: ISO 22301:2019, Clause 3.10; ISO 22301 Auditing eBook, Chapter 4.2.2.

 The media and press have a profound impact on the long-term performance, or in some cases, the survival of an organization, especially in the aftermath of a disruptive incident. The media and press can influence the perception and reputation of the organization, as well as the expectations and satisfaction of its stakeholders, such as customers, suppliers, regulators, employees, and the general public. Therefore, it is important for the organization to establish and maintain a positive relationship with the media and press, and to communicate effectively and transparently during and after a crisis. ISO 22301:2019, Clause 8.4.3, requires the organization to establish, implement, and maintain a documented procedure to manage communications with relevant interested parties during a disruptive incident. The procedure should include the identification of the spokesperson(s) who will communicate with the media and press, the preparation of key messages and statements, the approval and distribution of information, and the monitoring and evaluation of the effectiveness of the communications. The organization should also consider the potential legal andethical implications of its communications, and ensure that the information provided is accurate, consistent, and timely. References: ISO 22301:2019, Clause 8.4.3; ISO 22301 Auditing eBook, Chapter 4.3.3.